From 8bc71997f4f20e50ad3afe05b3ce58290c17af0d Mon Sep 17 00:00:00 2001 From: gnuboard Date: Mon, 6 May 2013 21:06:39 +0900 Subject: [PATCH 1/4] =?UTF-8?q?=ED=9C=B4=EB=8C=80=ED=8F=B0=20=EB=B3=B8?= =?UTF-8?q?=EC=9D=B8=ED=99=95=EC=9D=B8=20=EA=B4=80=EB=A0=A8=20=EA=B8=B0?= =?UTF-8?q?=EB=8A=A5=20=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- bbs/register_form.php | 11 +- bbs/register_form_update.php | 27 +++- plugin/kcp/kcpcert.ajax.php | 25 ---- plugin/kcp/kcpcert.head.skin.php | 41 ------ plugin/kcp/kcpcert.tail.skin.php | 20 --- plugin/kcp/kcpcert_form.php | 2 +- plugin/kcp/kcpcert_result.php | 25 ++-- skin/member/basic/register_form.skin.php | 118 +++++++----------- .../basic/register_form_update.head.skin.php | 7 -- .../basic/register_form_update.tail.skin.php | 7 -- 10 files changed, 91 insertions(+), 192 deletions(-) delete mode 100644 plugin/kcp/kcpcert.ajax.php delete mode 100644 plugin/kcp/kcpcert.head.skin.php delete mode 100644 plugin/kcp/kcpcert.tail.skin.php delete mode 100644 skin/member/basic/register_form_update.head.skin.php delete mode 100644 skin/member/basic/register_form_update.tail.skin.php diff --git a/bbs/register_form.php b/bbs/register_form.php index 43ad5c9a6..2764b026e 100644 --- a/bbs/register_form.php +++ b/bbs/register_form.php @@ -7,6 +7,9 @@ include_once(G4_LIB_PATH.'/register.lib.php'); $token = md5(uniqid(rand(), true)); set_session("ss_token", $token); +set_session("ss_kcpcert_no", ""); +set_session("ss_kcpcert_hash", ""); + if ($w == "") { // 회원 로그인을 한 경우 회원가입 할 수 없다 @@ -74,13 +77,16 @@ if ($w == "") { $g4['title'] = '회원 정보 수정'; + set_session("ss_reg_mb_name", $member['mb_name']); + set_session("ss_reg_mb_hp", $member['mb_hp']); + $member['mb_email'] = get_text($member['mb_email']); $member['mb_homepage'] = get_text($member['mb_homepage']); $member['mb_password_q'] = get_text($member['mb_password_q']); $member['mb_password_a'] = get_text($member['mb_password_a']); $member['mb_birth'] = get_text($member['mb_birth']); $member['mb_tel'] = get_text($member['mb_tel']); - $member['mb_hp'] = hyphen_hp_number(get_text($member['mb_hp'])); + $member['mb_hp'] = hyphen_hp_number($member['mb_hp']); $member['mb_addr1'] = get_text($member['mb_addr1']); $member['mb_addr2'] = get_text($member['mb_addr2']); $member['mb_signature'] = get_text($member['mb_signature']); @@ -103,7 +109,8 @@ if ($w == "") { include_once('./_head.php'); // 회원아이콘 경로 -$mb_icon = G4_DATA_PATH.'/member/'.substr($member['mb_id'],0,2).'/'.$member['mb_id'].'.gif'; +$mb_icon_path = G4_DATA_PATH.'/member/'.substr($member['mb_id'],0,2).'/'.$member['mb_id'].'.gif'; +$mb_icon_url = G4_DATA_URL.'/member/'.substr($member['mb_id'],0,2).'/'.$member['mb_id'].'.gif'; $register_action_url = G4_HTTPS_BBS_URL.'/register_form_update.php'; $req_nick = !isset($member['mb_nick_date']) || (isset($member['mb_nick_date']) && $member['mb_nick_date'] <= date("Y-m-d", G4_SERVER_TIME - ($config['cf_nick_modify'] * 86400))); diff --git a/bbs/register_form_update.php b/bbs/register_form_update.php index 0187e8358..ad48fb7ff 100644 --- a/bbs/register_form_update.php +++ b/bbs/register_form_update.php @@ -264,7 +264,30 @@ if ($w == '') { if ($old_email != $mb_email && $config['cf_use_email_certify']) $sql_email_certify = " , mb_email_certify = '' "; - // set mb_name = '$mb_name', 제거 + ///////////////////////////////////////////////////////////////// + // 휴대폰 본인확인 + ///////////////////////////////////////////////////////////////// + $sql_hp_certify = ""; + $md5_cert_no = get_session("ss_kcpcert_no"); + $hidden_hp = preg_replace("/[^0-9]/", "", $mb_hp); + if ($config['cf_kcpcert_use'] && $md5_cert_no) { + $hash_data = md5($hidden_hp.$mb_name.$md5_cert_no); + // 해시값이 틀린 경우에는 휴대폰 인증 값을 무효화 한다. + if (get_session("ss_kcpcert_hash") != $hash_data) { + $sql_hp_certify .= " , mb_hp = '' "; + $sql_hp_certify .= " , mb_hp_certify = 0 "; + $sql_hp_certify .= " , mb_adult = 0 "; + } + } else { + if (get_session("ss_reg_mb_name") != $mb_name || + get_session("ss_reg_mb_hp") != $hidden_hp) { + $sql_hp_certify .= " , mb_hp = '{$mb_hp}' "; + $sql_hp_certify .= " , mb_hp_certify = 0 "; + $sql_hp_certify .= " , mb_adult = 0 "; + } + } + ///////////////////////////////////////////////////////////////// + $sql = " update {$g4['member_table']} set mb_nick = '{$mb_nick}', mb_mailling = '{$mb_mailling}', @@ -273,7 +296,6 @@ if ($w == '') { mb_email = '{$mb_email}', mb_homepage = '{$mb_homepage}', mb_tel = '{$mb_tel}', - mb_hp = '{$mb_hp}', mb_zip1 = '{$mb_zip1}', mb_zip2 = '{$mb_zip2}', mb_addr1 = '{$mb_addr1}', @@ -296,6 +318,7 @@ if ($w == '') { {$sql_open_date} {$sql_sex} {$sql_email_certify} + {$sql_hp_certify} where mb_id = '$mb_id' "; sql_query($sql); diff --git a/plugin/kcp/kcpcert.ajax.php b/plugin/kcp/kcpcert.ajax.php deleted file mode 100644 index 159a58e47..000000000 --- a/plugin/kcp/kcpcert.ajax.php +++ /dev/null @@ -1,25 +0,0 @@ - \ No newline at end of file diff --git a/plugin/kcp/kcpcert.head.skin.php b/plugin/kcp/kcpcert.head.skin.php deleted file mode 100644 index d141b22b7..000000000 --- a/plugin/kcp/kcpcert.head.skin.php +++ /dev/null @@ -1,41 +0,0 @@ - \ No newline at end of file diff --git a/plugin/kcp/kcpcert.tail.skin.php b/plugin/kcp/kcpcert.tail.skin.php deleted file mode 100644 index 49621ee8b..000000000 --- a/plugin/kcp/kcpcert.tail.skin.php +++ /dev/null @@ -1,20 +0,0 @@ - \ No newline at end of file diff --git a/plugin/kcp/kcpcert_form.php b/plugin/kcp/kcpcert_form.php index 07e5e04cd..3cb772a7e 100644 --- a/plugin/kcp/kcpcert_form.php +++ b/plugin/kcp/kcpcert_form.php @@ -52,7 +52,7 @@ if(!$ordr_idxx) function auth_type_check(user_name) { var auth_form = document.form_auth; - auth_form.user_name.value = encodeURIComponent(user_name); + //auth_form.user_name.value = encodeURIComponent(user_name); if( auth_form.ordr_idxx.value == "" ) { diff --git a/plugin/kcp/kcpcert_result.php b/plugin/kcp/kcpcert_result.php index 3c66df1b4..8295e44ae 100644 --- a/plugin/kcp/kcpcert_result.php +++ b/plugin/kcp/kcpcert_result.php @@ -3,8 +3,6 @@ include_once('./kcpcert_config.php'); set_session('ss_kcpcert_no', ''); set_session('ss_kcpcert_hash', ''); -set_session('ss_hp_certify', ''); -set_session('ss_adult', ''); $site_cd = ""; $ordr_idxx = ""; @@ -130,22 +128,28 @@ if( $cert_enc_use == "Y" ) $dec_res_cd = $ct_cert->mf_get_key_value("res_cd" ); // 암호화된 결과코드 $dec_mes_msg = $ct_cert->mf_get_key_value("res_msg" ); // 암호화된 결과메시지 - // 정상인증인지 체크 if(!$phone_no) alert_close("정상적인 인증이 아닙니다. 올바른 방법으로 이용해 주세요."); + $sql = " select count(*) as cnt from {$g4['member_table']} where mb_id <> '{$member['mb_id']}' and mb_hp = '{$phone_no}' "; + $row = sql_fetch($sql); + if ($row['cnt']) { + alert_close("이미 가입되어 있는 휴대폰번호 입니다."); + } + // hash 데이터 $md5_cert_no = md5($cert_no); $hash_data = md5($phone_no.$user_name.$md5_cert_no); set_session("ss_kcpcert_no", $md5_cert_no); set_session("ss_kcpcert_hash", $hash_data); - set_session("ss_hp_certify", "1"); // 성인인증결과 $adult_day = date("Ymd", strtotime("-19 years", G4_SERVER_TIME)); - if((int)$birth_day <= (int)$adult_day) - set_session("ss_adult", "1"); + $adult = ((int)$birth_day <= (int)$adult_day) ? 1 : 0; + + $sql = " update {$g4['member_table']} set mb_name = '$user_name', mb_hp = '$phone_no', mb_hp_certify = 1, mb_adult = $adult where mb_id = '{$member['mb_id']}' "; + sql_query($sql); } else if( $res_cd != "0000" ) { @@ -157,12 +161,11 @@ if( $cert_enc_use == "Y" ) else if( $cert_enc_use != "Y" ) { // 암호화 인증 안함 + alert_close("휴대폰 본인확인을 취소 하셨습니다."); + exit; } $ct_cert->mf_clear(); - -// 휴대폰번호 포맷변경 -$phone_no = hyphen_hp_number($phone_no); ?> - + @@ -142,14 +140,14 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가 - + - += $config['cf_icon_level']) { ?> @@ -160,13 +158,14 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가 gif만 가능하며 용량 바이트 이하만 등록됩니다. - + + 회원아이콘 - + - + @@ -184,7 +183,7 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가 휴대폰 문자메세지를 받겠습니다. - + @@ -209,14 +208,14 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가 - + - + @@ -238,15 +237,11 @@ if ($config['cf_kcpcert_use']) { // 휴대폰인증 form include_once(G4_KCP_PATH.'/kcpcert_form.php'); ?> -
자동등록방지