// Set upload path by checking if the attachement is an image or other kinds of file
  if(preg_match("/\.(jpe?g|gif|png|wm[va]|mpe?g|avi|swf|flv|mp[1-4]|as[fx]|wav|midi?|moo?v|qt|r[am]{1,2}|m4v)$/i", $file_info['name']))
  {
   // Immediately remove the direct file if it has any kind of extensions for hacking
   $file_info['name'] = preg_replace('/\.(php|phtm|html?|cgi|pl|exe|jsp|asp|inc)/i', '$0-x',$file_info['name']);
   $file_info['name'] = str_replace(array('<','>'),array('%3C','%3E'),$file_info['name']);

   $path = sprintf("./files/attach/images/%s/%s", $module_srl,getNumberingPath($upload_target_srl,3));

   // special character to '_'
   // change to md5 file name. because window php bug. window php is not recognize unicode character file name - by cherryfilter
   $ext = substr(strrchr($file_info['name'],'.'),1);
   //$_filename = preg_replace('/[#$&*?+%"\']/', '_', $file_info['name']);
   $_filename = md5(crypt(rand(1000000,900000), rand(0,100))).'.'.$ext;
   $filename  = $path.$_filename;
   $idx = 1;
   while(file_exists($filename))
   {
    $filename = $path.preg_replace('/\.([a-z0-9]+)$/i','_'.$idx.'.$1',$_filename);
    $idx++;
   }
   if(preg_match("/\.(mp[1-4]|)$/i", $file_info['name']))
   {
    $direct_download = 'N';
   }else
   {
    $direct_download = 'Y';
   }
  }
  else
  {
   $path = sprintf("./files/attach/binaries/%s/%s", $module_srl, getNumberingPath($upload_target_srl,3));
   $filename = $path.md5(crypt(rand(1000000,900000), rand(0,100)));
   $direct_download = 'N';
  }

테스트는 해보지 않았습니다.