php8.0 버전 호환 코드 적용 및 PHP 끝 태그 삭제 일괄적용
This commit is contained in:
@ -4,51 +4,56 @@ include_once('./_common.php');
|
||||
|
||||
check_admin_token();
|
||||
|
||||
if( isset($_POST['pp_name']) ){
|
||||
$_POST['pp_name'] = strip_tags(clean_xss_attributes($_POST['pp_name']));
|
||||
}
|
||||
$pp_name = isset($_POST['pp_name']) ? strip_tags(clean_xss_attributes($_POST['pp_name'])) : '';
|
||||
$pp_id = isset($_REQUEST['pp_id']) ? preg_replace('/[^0-9]/', '', $_REQUEST['pp_id']) : 0;
|
||||
$pp_price = isset($_POST['pp_price']) ? preg_replace('/[^0-9]/', '', $_REQUEST['pp_price']) : 0;
|
||||
|
||||
if($w == 'd') {
|
||||
auth_check($auth[$sub_menu], 'd');
|
||||
auth_check_menu($auth, $sub_menu, 'd');
|
||||
|
||||
$sql = " select pp_id from {$g5['g5_shop_personalpay_table']} where pp_id = '{$_GET['pp_id']}' ";
|
||||
$sql = " select pp_id from {$g5['g5_shop_personalpay_table']} where pp_id = '{$pp_id}' ";
|
||||
$row = sql_fetch($sql);
|
||||
if(!$row['pp_id'])
|
||||
alert('삭제하시려는 자료가 존재하지 않습니다.');
|
||||
|
||||
sql_query(" delete from {$g5['g5_shop_personalpay_table']} where pp_id = '{$_GET['pp_id']}' ");
|
||||
sql_query(" delete from {$g5['g5_shop_personalpay_table']} where pp_id = '{$pp_id}' ");
|
||||
|
||||
goto_url('./personalpaylist.php?'.$qstr);
|
||||
} else {
|
||||
auth_check($auth[$sub_menu], 'w');
|
||||
auth_check_menu($auth, $sub_menu, 'w');
|
||||
|
||||
$_POST = array_map('trim', $_POST);
|
||||
|
||||
if(!$_POST['pp_name'])
|
||||
if(! $pp_name)
|
||||
alert('이름을 입력해 주십시오.');
|
||||
if(!$_POST['pp_price'])
|
||||
if(! $pp_price)
|
||||
alert('주문금액을 입력해 주십시오.');
|
||||
if(preg_match('/[^0-9]/', $_POST['pp_price']))
|
||||
if(preg_match('/[^0-9]/', $pp_price))
|
||||
alert('주문금액은 숫자만 입력해 주십시오.');
|
||||
|
||||
$od_id = preg_replace('/[^0-9]/', '', $_POST['od_id']);
|
||||
$od_id = isset($_POST['od_id']) ? safe_replace_regex($_POST['od_id'], 'od_id') : '';
|
||||
|
||||
if($_POST['od_id']) {
|
||||
if($od_id) {
|
||||
$sql = " select od_id from {$g5['g5_shop_order_table']} where od_id = '$od_id' ";
|
||||
$row = sql_fetch($sql);
|
||||
if(!$row['od_id'])
|
||||
if(! (isset($row['od_id']) && $row['od_id']))
|
||||
alert('입력하신 주문번호는 존재하지 않는 주문 자료입니다.');
|
||||
}
|
||||
|
||||
$sql_common = " pp_name = '{$_POST['pp_name']}',
|
||||
pp_price = '{$_POST['pp_price']}',
|
||||
$post_pp_content = isset($_POST['pp_content']) ? $_POST['pp_content'] : '';
|
||||
$post_pp_receipt_price = isset($_POST['pp_receipt_price']) ? (int) $_POST['pp_receipt_price'] : 0;
|
||||
$post_pp_settle_case = isset($_POST['pp_settle_case']) ? clean_xss_tags($_POST['pp_settle_case'], 1, 1) : '';
|
||||
$post_pp_receipt_time = isset($_POST['pp_receipt_time']) ? clean_xss_tags($_POST['pp_receipt_time'], 1, 1) : '';
|
||||
$post_pp_shop_memo = isset($_POST['pp_shop_memo']) ? $_POST['pp_shop_memo'] : '';
|
||||
$post_pp_use = isset($_POST['pp_use']) ? (int) $_POST['pp_use'] : 0;
|
||||
|
||||
$sql_common = " pp_name = '{$pp_name}',
|
||||
pp_price = '{$pp_price}',
|
||||
od_id = '$od_id',
|
||||
pp_content = '{$_POST['pp_content']}',
|
||||
pp_receipt_price = '{$_POST['pp_receipt_price']}',
|
||||
pp_settle_case = '{$_POST['pp_settle_case']}',
|
||||
pp_receipt_time = '{$_POST['pp_receipt_time']}',
|
||||
pp_shop_memo = '{$_POST['pp_shop_memo']}',
|
||||
pp_use = '{$_POST['pp_use']}' ";
|
||||
pp_content = '{$post_pp_content}',
|
||||
pp_receipt_price = '{$post_pp_receipt_price}',
|
||||
pp_settle_case = '{$post_pp_settle_case}',
|
||||
pp_receipt_time = '{$post_pp_receipt_time}',
|
||||
pp_shop_memo = '{$post_pp_shop_memo}',
|
||||
pp_use = '{$post_pp_use}' ";
|
||||
}
|
||||
|
||||
if($w == '') {
|
||||
@ -60,19 +65,18 @@ if($w == '') {
|
||||
pp_time = '".G5_TIME_YMDHIS."' ";
|
||||
sql_query($sql);
|
||||
} else if($w == 'u') {
|
||||
$sql = " select pp_id from {$g5['g5_shop_personalpay_table']} where pp_id = '{$_POST['pp_id']}' ";
|
||||
$sql = " select pp_id from {$g5['g5_shop_personalpay_table']} where pp_id = '{$pp_id}' ";
|
||||
$row = sql_fetch($sql);
|
||||
if(!$row['pp_id'])
|
||||
alert('수정하시려는 자료가 존재하지 않습니다.');
|
||||
|
||||
$sql = " update {$g5['g5_shop_personalpay_table']}
|
||||
set $sql_common
|
||||
where pp_id = '{$_POST['pp_id']}' ";
|
||||
where pp_id = '{$pp_id}' ";
|
||||
sql_query($sql);
|
||||
}
|
||||
|
||||
if($popup == 'yes')
|
||||
alert_close('개인결제가 추가됐습니다.');
|
||||
else
|
||||
goto_url('./personalpayform.php?w=u&pp_id='.$pp_id.'&'.$qstr);
|
||||
?>
|
||||
goto_url('./personalpayform.php?w=u&pp_id='.$pp_id.'&'.$qstr);
|
||||
Reference in New Issue
Block a user