Commit @7d73cf767a860f6a97cdf2e8db0aca0800d6191d

itn 2023-06-20

bbsId를 변조해서 공지사항에 글 등록 방지 처리

@7d73cf767a860f6a97cdf2e8db0aca0800d6191d

0b8ce37

7d73cf7

src/main/java/itn/let/cop/bbs/service/EgovBBSManageService.java

--- src/main/java/itn/let/cop/bbs/service/EgovBBSManageService.java

+++ src/main/java/itn/let/cop/bbs/service/EgovBBSManageService.java


 
 	public List<BoardVO> selectAdminMainBoardByDash(BoardVO boardVO) throws Exception;
 	
+	public List<BoardVO> selectUserBbsWriteList(BoardVO boardVO) throws Exception;
+	
 	public int selectAdminMainNewBoardCnt(BoardVO boardVO) throws Exception;
 	
 	public int selectAdminMainYdaBoardCnt(BoardVO boardVO) throws Exception;

0b8ce37

7d73cf7

src/main/java/itn/let/cop/bbs/service/impl/BBSManageDAO.java

--- src/main/java/itn/let/cop/bbs/service/impl/BBSManageDAO.java

+++ src/main/java/itn/let/cop/bbs/service/impl/BBSManageDAO.java


     	return (List<BoardVO>) list("BBSManageDAO.selectAdminMainBoardByDash", boardVO);
     }
     
+    @SuppressWarnings("unchecked")
+    public List<BoardVO> selectUserBbsWriteList(BoardVO boardVO) throws Exception {
+    	return (List<BoardVO>) list("BBSManageDAO.selectUserBbsWriteList", boardVO);
+    }
+    
 	public int selectAdminMainNewBoardCnt(BoardVO boardVO) throws Exception{
 		return (Integer)select("BBSManageDAO.selectAdminMainNewBoardCnt", boardVO);
 	}

0b8ce37

7d73cf7

src/main/java/itn/let/cop/bbs/service/impl/EgovBBSManageServiceImpl.java

--- src/main/java/itn/let/cop/bbs/service/impl/EgovBBSManageServiceImpl.java

+++ src/main/java/itn/let/cop/bbs/service/impl/EgovBBSManageServiceImpl.java


 	public List<BoardVO> selectAdminMainBoardByDash(BoardVO boardVO) throws Exception {
 		return bbsMngDAO.selectAdminMainBoardByDash(boardVO);
 	}
+
+	@Override
+	public List<BoardVO> selectUserBbsWriteList(BoardVO boardVO) throws Exception {
+		return bbsMngDAO.selectUserBbsWriteList(boardVO);
+	}	
 	
 	@Override
 	public int selectAdminMainNewBoardCnt(BoardVO boardVO) throws Exception {

0b8ce37

7d73cf7

src/main/java/itn/let/cop/bbs/web/EgovBBSManageController.java

--- src/main/java/itn/let/cop/bbs/web/EgovBBSManageController.java

+++ src/main/java/itn/let/cop/bbs/web/EgovBBSManageController.java

...	...	@@ -2242,6 +2242,20 @@
2242	2242	ModelAndView modelAndView = new ModelAndView();
2243	2243	modelAndView.setViewName("jsonView");
2244	2244
	2245	+ // Start => bbsId를 변조해서 공지사항에 글 등록 방지 처리
	2246	+ //boardVO.setBbsId("BBSMSTR_000000000651"); // 공지사항
	2247	+ List<BoardVO> userBbsWriteList = bbsMngService.selectUserBbsWriteList(boardVO);
	2248	+ System.out.println("boardVO.getBbsId : " + boardVO.getBbsId());
	2249	+ System.out.println("userBbsWriteList.size() : " + userBbsWriteList.size());
	2250	+
	2251	+ if (userBbsWriteList.size() == 0) {
	2252	+ // 1:1문의, 불편사항 등 고객이 등록할수있는 게시판 목록이 아닐경우
	2253	+ modelAndView.addObject("message", "잘못된 접근입니다.\n관리자에게 문의하세요.");
	2254	+ modelAndView.addObject("result", "fail");
	2255	+ return modelAndView;
	2256	+ }
	2257	+ // End
	2258	+
2245	2259	if (bmVO == null \|\| ("N").equals(bmVO.getUseAt())) {
2246	2260	redirectAttributes.addFlashAttribute("message", egovMessageSource.getMessage("fail.common.imposbl"));
2247	2261	//return "redirect:/web/main/mainPage.do";
...	...	@@ -2622,6 +2636,20 @@
2622	2636	ModelAndView modelAndView = new ModelAndView();
2623	2637	modelAndView.setViewName("jsonView");
2624	2638
	2639	+ // Start => bbsId를 변조해서 공지사항에 글 등록 방지 처리
	2640	+ //boardVO.setBbsId("BBSMSTR_000000000651"); // 공지사항
	2641	+ List<BoardVO> userBbsWriteList = bbsMngService.selectUserBbsWriteList(boardVO);
	2642	+ System.out.println("boardVO.getBbsId : " + boardVO.getBbsId());
	2643	+ System.out.println("userBbsWriteList.size() : " + userBbsWriteList.size());
	2644	+
	2645	+ if (userBbsWriteList.size() == 0) {
	2646	+ // 1:1문의, 불편사항 등 고객이 등록할수있는 게시판 목록이 아닐경우
	2647	+ modelAndView.addObject("message", "잘못된 접근입니다.\n관리자에게 문의하세요.");
	2648	+ modelAndView.addObject("result", "fail");
	2649	+ return modelAndView;
	2650	+ }
	2651	+ // End
	2652	+
2625	2653	BoardMasterVO bmVO = new BoardMasterVO();
2626	2654	bmVO.setBbsId(boardVO.getBbsId());
2627	2655	bmVO = bbsAttrbService.selectBBSMasterInf(bmVO);

0b8ce37

7d73cf7

src/main/resources/egovframework/sqlmap/let/cop/bbs/EgovBoard_SQL_Mysql.xml

--- src/main/resources/egovframework/sqlmap/let/cop/bbs/EgovBoard_SQL_Mysql.xml

+++ src/main/resources/egovframework/sqlmap/let/cop/bbs/EgovBoard_SQL_Mysql.xml


 	    LIMIT #recordCountPerPage# OFFSET #firstIndex#
    </select>   
    
+   <select id="BBSManageDAO.selectUserBbsWriteList" parameterClass="BoardVO" resultClass="BoardVO"  >
+		SELECT 
+			BBS_ID AS bbsId
+			, BBS_NM AS bbsNm 
+		FROM lettnbbsmaster 
+		WHERE 
+			USE_AT = 'Y'
+			AND DASHBD_CNT_YN = 'Y'
+			AND BBS_ID = #bbsId#
+   </select>   
+      
    <select id="BBSManageDAO.selectAdminMainNewBoardCnt" parameterClass="BoardVO" resultClass="java.lang.Integer" >
 		<![CDATA[
 		SELECT COUNT(*) FROM LETTNBBS A

Add a comment

Open 0
Closed 0

List

...	...	@@ -217,6 +217,8 @@
217	217
218	218	public List<BoardVO> selectAdminMainBoardByDash(BoardVO boardVO) throws Exception;
219	219
	220	+ public List<BoardVO> selectUserBbsWriteList(BoardVO boardVO) throws Exception;
	221	+
220	222	public int selectAdminMainNewBoardCnt(BoardVO boardVO) throws Exception;
221	223
222	224	public int selectAdminMainYdaBoardCnt(BoardVO boardVO) throws Exception;

...	...	@@ -350,6 +350,11 @@
350	350	return (List<BoardVO>) list("BBSManageDAO.selectAdminMainBoardByDash", boardVO);
351	351	}
352	352
	353	+ @SuppressWarnings("unchecked")
	354	+ public List<BoardVO> selectUserBbsWriteList(BoardVO boardVO) throws Exception {
	355	+ return (List<BoardVO>) list("BBSManageDAO.selectUserBbsWriteList", boardVO);
	356	+ }
	357	+
353	358	public int selectAdminMainNewBoardCnt(BoardVO boardVO) throws Exception{
354	359	return (Integer)select("BBSManageDAO.selectAdminMainNewBoardCnt", boardVO);
355	360	}

...	...	@@ -331,6 +331,11 @@
331	331	public List<BoardVO> selectAdminMainBoardByDash(BoardVO boardVO) throws Exception {
332	332	return bbsMngDAO.selectAdminMainBoardByDash(boardVO);
333	333	}
	334	+
	335	+ @Override
	336	+ public List<BoardVO> selectUserBbsWriteList(BoardVO boardVO) throws Exception {
	337	+ return bbsMngDAO.selectUserBbsWriteList(boardVO);
	338	+ }
334	339
335	340	@Override
336	341	public int selectAdminMainNewBoardCnt(BoardVO boardVO) throws Exception {

...	...	@@ -1767,6 +1767,17 @@
1767	1767	LIMIT #recordCountPerPage# OFFSET #firstIndex#
1768	1768	</select>
1769	1769
	1770	+ <select id="BBSManageDAO.selectUserBbsWriteList" parameterClass="BoardVO" resultClass="BoardVO" >
	1771	+ SELECT
	1772	+ BBS_ID AS bbsId
	1773	+ , BBS_NM AS bbsNm
	1774	+ FROM lettnbbsmaster
	1775	+ WHERE
	1776	+ USE_AT = 'Y'
	1777	+ AND DASHBD_CNT_YN = 'Y'
	1778	+ AND BBS_ID = #bbsId#
	1779	+ </select>
	1780	+
1770	1781	<select id="BBSManageDAO.selectAdminMainNewBoardCnt" parameterClass="BoardVO" resultClass="java.lang.Integer" >
1771	1782	<![CDATA[
1772	1783	SELECT COUNT(*) FROM LETTNBBS A

Delete comment