diff --git a/shop/wishupdate.php b/shop/wishupdate.php
index 123eb7049..ebea16926 100644
--- a/shop/wishupdate.php
+++ b/shop/wishupdate.php
@@ -7,6 +7,13 @@ if (!$is_member)
 if ($w == "d")
 {
     $wi_id = trim($_GET['wi_id']);
+
+    $sql = " select mb_id from {$g5['g5_shop_wish_table']} where wi_id = '$wi_id' ";
+    $row = sql_fetch($sql);
+
+    if($row['mb_id'] != $member['mb_id'])
+        alert('위시리시트 상품을 삭제할 권한이 없습니다.');
+
     $sql = " delete from {$g5['g5_shop_wish_table']}
               where wi_id = '$wi_id'
                 and mb_id = '{$member['mb_id']}' ";
@@ -17,25 +24,28 @@ else
     if(is_array($it_id))
         $it_id = $_POST['it_id'][0];
 
-    $sql_common = " set mb_id = '{$member['mb_id']}',
-                        it_id = '$it_id',
-                        wi_time = '".G5_TIME_YMDHIS."',
-                        wi_ip = '$REMOTE_ADDR' ";
+    if(!$it_id)
+        alert('상품코드가 올바르지 않습니다.', G5_SHOP_URL);
+
+    // 상품정보 체크
+    $sql = " select it_id from {$g5['g5_shop_item_table']} where it_id = '$it_id' ";
+    $row = sql_fetch($sql);
+
+    if(!$row['it_id'])
+        alert('상품정보가 존재하지 않습니다.', G5_SHOP_URL);
 
     $sql = " select wi_id from {$g5['g5_shop_wish_table']}
               where mb_id = '{$member['mb_id']}' and it_id = '$it_id' ";
     $row = sql_fetch($sql);
-    if ($row['wi_id']) { // 이미 있다면 삭제함
-        $sql = " delete from {$g5['g5_shop_wish_table']} where wi_id = '{$row['wi_id']}' ";
+
+    if (!$row['wi_id']) { // 없다면 등록
+        $sql = " insert {$g5['g5_shop_wish_table']}
+                    set mb_id = '{$member['mb_id']}',
+                        it_id = '$it_id',
+                        wi_time = '".G5_TIME_YMDHIS."',
+                        wi_ip = '$REMOTE_ADDR' ";
         sql_query($sql);
     }
-
-    $sql = " insert {$g5['g5_shop_wish_table']}
-                set mb_id = '{$member['mb_id']}',
-                    it_id = '$it_id',
-                    wi_time = '".G5_TIME_YMDHIS."',
-                    wi_ip = '$REMOTE_ADDR' ";
-    sql_query($sql);
 }
 
 goto_url('./wishlist.php');