[PHP+CI4+mysql]회원 전용 게시판 만들기 강좌 #15. 수정및 삭제

게시글을 수정하고 삭제하는 기능을 넣어보자. 우선 게시판 보기 화면에 수정및 삭제 버튼을 달아준다. 이때 본인이 작성한 글에만 버튼이 보이도록 해야 한다.

 

/app/Views/board_view.php

 

<h3 class="pb-4 mb-4 fst-italic border-bottom" style="text-align:center;">

        - 게시판 보기 -

      </h3>

      <article class="blog-post">

        <h2 class="blog-post-title"><?php echo $view->subject;?></h2>

        <p class="blog-post-meta"><?php echo $view->regdate;?> by <a href="#"><?php echo $view->userid;?></a></p>

        <hr>

       

        <p>

        <?php echo $view->content;?>

        </p>

        <hr>

        <p style="text-align:right;">

          <?php

          if($_SESSION['userid']==$view->userid){

          ?>

          <a href="/modify/<?php echo $view->bid;?>"><button type="button" class="btn btn-primary">수정</button><a>

          <a href="/delete/<?php echo $view->bid;?>"><button type="button" class="btn btn-warning">삭제</button><a>

          <?php }?>

          <a href="/board"><button type="button" class="btn btn-primary">목록</button><a>

        </p>

      </article>

이렇게 분기 처리를 해준다. 이제 수정 버튼을 눌렀을때 이동할 modify와 delete를 만들어보자. 무조건 라우트부터 수정해야한다.

 

/app/Config/Routes.php

 

<?php

namespace Config;

// Create a new instance of our RouteCollection class.

$routes = Services::routes();

// Load the system's routing file first, so that the app and ENVIRONMENT

// can override as needed.

if (is_file(SYSTEMPATH . 'Config/Routes.php')) {

    require SYSTEMPATH . 'Config/Routes.php';

}

/*

 * --------------------------------------------------------------------

 * Router Setup

 * --------------------------------------------------------------------

 */

$routes->setDefaultNamespace('App\Controllers');

$routes->setDefaultController('Home');

$routes->setDefaultMethod('index');

$routes->setTranslateURIDashes(false);

$routes->set404Override();

// The Auto Routing (Legacy) is very dangerous. It is easy to create vulnerable apps

// where controller filters or CSRF protection are bypassed.

// If you don't want to define all routes, please use the Auto Routing (Improved).

// Set `$autoRoutesImproved` to true in `app/Config/Feature.php` and set the following to true.

// $routes->setAutoRoute(false);

/*

 * --------------------------------------------------------------------

 * Route Definitions

 * --------------------------------------------------------------------

 */

// We get a performance increase by specifying the default

// route since we don't have to scan directories.

$routes->get('/', 'Home::index');

$routes->get('/board', 'Board::list');

$routes->get('/boardWrite', 'Board::write');

$routes->match(['get', 'post'], 'writeSave', 'Board::save');

$routes->get('/boardView/(:num)', 'Board::view/$1');

$routes->get('/modify/(:num)', 'Board::modify/$1');

$routes->get('/delete/(:num)', 'Board::delete/$1');

//member

$routes->get('/login', 'MemberController::login');

$routes->get('/logout', 'MemberController::logout');

$routes->match(['get', 'post'], '/loginok', 'MemberController::loginok');

/*

 * --------------------------------------------------------------------

 * Additional Routing

 * --------------------------------------------------------------------

 *

 * There will often be times that you need additional routing and you

 * need it to be able to override any defaults in this file. Environment

 * based routes is one such time. require() additional route files here

 * to make that happen.

 *

 * You will have access to the $routes object within that file without

 * needing to reload it.

 */

if (is_file(APPPATH . 'Config/' . ENVIRONMENT . '/Routes.php')) {

    require APPPATH . 'Config/' . ENVIRONMENT . '/Routes.php';

}

라우트에 modify와 delete를 추가해줬다. 이제 컨트롤러에 modify와 delete를 추가해보자.

 

/app/Controllers/Board.php

 

<?php

namespace App\Controllers;

use App\Models\BoardModel;//사용할 모델을 반드시 써줘야한다.

class Board extends BaseController

{

    public function list()

    {

        $db = db_connect();

        $query = "select * from board order by bid desc";

        $rs = $db->query($query);

        $data['list'] = $rs->getResult();//결과값 저장

        return render('board_list', $data);//view에 리턴

    }

    public function write()

    {

        if(!isset($_SESSION['userid'])){

            echo "<script>alert('로그인하십시오.');location.href='/login'</script>";

            exit;

        }

        return render('board_write');  

    }

    public function save()

    {

        if(!isset($_SESSION['userid'])){

            echo "<script>alert('로그인하십시오.');location.href='/login'</script>";

            exit;

        }

        $db = db_connect();

        $bid=$this->request->getVar('bid');//bid값이 있으면 수정이고 아니면 등록이다.

        $subject=$this->request->getVar('subject');

        $content=$this->request->getVar('content');

        if($bid){

            $query = "select * from board where bid=".$bid;

            $rs = $db->query($query);

            if($_SESSION['userid']==$rs->getRow()->userid){

                $sql="update board set subject='".$subject."', content='".$content."' where bid=".$bid;

                $rs = $db->query($sql);

                return $this->response->redirect(site_url('/boardView/'.$bid));

                exit;

            }else{

                echo "<script>alert('본인이 작성한 글만 수정할 수 있습니다.');location.href='/login';</script>";

                exit;

            }

        }

        $sql="insert into board (userid,subject,content) values ('".$_SESSION['userid']."','".$subject."','".$content."')";

        $rs = $db->query($sql);

        return $this->response->redirect(site_url('/board'));

    }

    public function view($bid = null)

    {

        $db = db_connect();

        $query = "select * from board where bid=".$bid;

        $rs = $db->query($query);

        $data['view'] = $rs->getRow();

        $query2 = "select * from file_table where bid=".$bid;

        $rs2 = $db->query($query2);

        $data['file_view'] = $rs2->getRow();

        return render('board_view', $data);  

    }

    public function modify($bid = null)

    {

        $db = db_connect();

        $query = "select * from board where bid=".$bid;

        $rs = $db->query($query);

        if($_SESSION['userid']==$rs->getRow()->userid){

            $data['view'] = $rs->getRow();

            return render('board_write', $data);  

        }else{

            echo "<script>alert('본인이 작성한 글만 수정할 수 있습니다.');location.href='/login';</script>";

            exit;

        }

       

    }

    public function delete($bid = null)

    {

        $db = db_connect();

        $query = "select * from board where bid=".$bid;

        $rs = $db->query($query);

        if($_SESSION['userid']==$rs->getRow()->userid){

            $query = "delete from board where bid=".$bid;

            $rs = $db->query($query);

            return $this->response->redirect(site_url('/board'));

        }else{

            echo "<script>alert('본인이 작성한 글만 삭제할 수 있습니다.');location.href='/login';</script>";

            exit;

        }

    }

}

modify를 클릭하면 board_write로 가도록 작업했다. 데이터를 던져준다. board_write를 수정해보자.

 

/app/Views/board_write.php

 

    <form method="post" action="<?= site_url('/writeSave') ?>" enctype="multipart/form-data">

        <input type="hidden" name="bid" value="<?php echo isset($view->bid)?$view->bid:0;?>">

        <div class="mb-3">

        <label for="exampleFormControlInput1" class="form-label">이름</label>

            <input type="text" name="username" class="form-control" id="exampleFormControlInput1" placeholder="이름을 입력하세요." value="<?php echo $_SESSION['username']?>">

        </div>

        <div class="mb-3">

        <label for="exampleFormControlInput1" class="form-label">제목</label>

            <input type="text" name="subject" class="form-control" id="exampleFormControlInput1" placeholder="제목을 입력하세요." value="<?php echo isset($view->subject)?$view->subject:'';?>">

        </div>

        <div class="mb-3">

        <label for="exampleFormControlTextarea1" class="form-label">내용</label>

        <textarea class="form-control" id="exampleFormControlTextarea1" name="content" rows="3"><?php echo isset($view->content)?$view->content:'';?></textarea>

        </div>

        <br />

        <?php

        $btntitle=isset($view->bid)?"수정":"등록";

        ?>

            <button type="submit" class="btn btn-primary"><?php echo $btntitle;?></button>

    </form>

bid 파라미터를 받아서 bid가 있으면 수정이고 없으면 새글이라고 지정했다. 수정이나 등록이나 모두 같은 writeSave로 이동하므로 같은 컨트롤러에서 마찬가지로 bid를 이용해 분기 처리해준다. writeSave를 수정해보자.

 

/app/Controllers/Board.php

 

<?php

namespace App\Controllers;

use App\Models\BoardModel;//사용할 모델을 반드시 써줘야한다.

class Board extends BaseController

{

    public function list()

    {

        $db = db_connect();

        $query = "select * from board order by bid desc";

        $rs = $db->query($query);

        $data['list'] = $rs->getResult();//결과값 저장

        return render('board_list', $data);//view에 리턴

    }

    public function write()

    {

        if(!isset($_SESSION['userid'])){

            echo "<script>alert('로그인하십시오.');location.href='/login'</script>";

            exit;

        }

        return render('board_write');  

    }

    public function save()

    {

        if(!isset($_SESSION['userid'])){

            echo "<script>alert('로그인하십시오.');location.href='/login'</script>";

            exit;

        }

        $db = db_connect();

        $bid=$this->request->getVar('bid');//bid값이 있으면 수정이고 아니면 등록이다.

        $subject=$this->request->getVar('subject');

        $content=$this->request->getVar('content');

        if($bid){

            $query = "select * from board where bid=".$bid;

            $rs = $db->query($query);

            if($_SESSION['userid']==$rs->getRow()->userid){

                $sql="update board set subject='".$subject."', content='".$content."' where bid=".$bid;

                $rs = $db->query($sql);

                return $this->response->redirect(site_url('/boardView/'.$bid));

            }else{

                echo "<script>alert('본인이 작성한 글만 수정할 수 있습니다.');location.href='/login';</script>";

                exit;

            }

        }

        $sql="insert into board (userid,subject,content) values ('".$_SESSION['userid']."','".$subject."','".$content."')";

        $rs = $db->query($sql);

        return $this->response->redirect(site_url('/board'));

    }

    public function view($bid = null)

    {

        $db = db_connect();

        $query = "select * from board where bid=".$bid;

        $rs = $db->query($query);

        $data['view'] = $rs->getRow();

        $query2 = "select * from file_table where bid=".$bid;

        $rs2 = $db->query($query2);

        $data['file_view'] = $rs2->getRow();

        return render('board_view', $data);  

    }

    public function modify($bid = null)

    {

        $db = db_connect();

        $query = "select * from board where bid=".$bid;

        $rs = $db->query($query);

        if($_SESSION['userid']==$rs->getRow()->userid){

            $data['view'] = $rs->getRow();

            return render('board_write', $data);  

        }else{

            echo "<script>alert('본인이 작성한 글만 수정할 수 있습니다.');location.href='/login';</script>";

            exit;

        }

       

    }

    public function delete($bid = null)

    {

        $db = db_connect();

        $query = "select * from board where bid=".$bid;

        $rs = $db->query($query);

        if($_SESSION['userid']==$rs->getRow()->userid){

            $query = "delete from board where bid=".$bid;

            $rs = $db->query($query);

            return $this->response->redirect(site_url('/board'));

        }else{

            echo "<script>alert('본인이 작성한 글만 삭제할 수 있습니다.');location.href='/login';</script>";

            exit;

        }

    }

}

 

이렇게 수정한다. 보시다시피 저장하는 부분에 bid를 이용해 분기처리를 해줬다. 마찬가지로 delete도 확인해보자.본인글인지확인해서 본인글이면 삭제하도록 해주었다.

 

요즘은 대부분 삭제를 하지 않지만 이렇게 했다. 상태값을 줘서 구분해도 된다. 요즘은 대부분 그렇게 하는 것이 대세다. 그건 각자 알아서 해보자.

 

다음 시간엔 첨부파일을 등록하는걸 해보자.