배송지 이름 필터링 코드 추가

This commit is contained in:
chicpro
2016-01-07 10:24:13 +09:00
parent 2cdfe45774
commit 5a2766ae4d
3 changed files with 7 additions and 1 deletions

View File

@ -862,6 +862,8 @@ if($is_member) {
sql_query($sql); sql_query($sql);
} }
$ad_subject = clean_xss_tags($ad_subject);
if($row['ad_id']){ if($row['ad_id']){
$sql = " update {$g5['g5_shop_order_address_table']} $sql = " update {$g5['g5_shop_order_address_table']}
set ad_default = '$ad_default', set ad_default = '$ad_default',

View File

@ -16,8 +16,10 @@ if ($is_member && $count) {
// 실제 번호를 넘김 // 실제 번호를 넘김
$k = $_POST['chk'][$i]; $k = $_POST['chk'][$i];
$ad_subject = clean_xss_tags($_POST['ad_subject'][$k]);
$sql = " update {$g5['g5_shop_order_address_table']} $sql = " update {$g5['g5_shop_order_address_table']}
set ad_subject = '{$_POST['ad_subject'][$k]}' "; set ad_subject = '$ad_subject' ";
if($_POST['ad_default'] && $_POST['ad_id'][$k] == $_POST['ad_default']) { if($_POST['ad_default'] && $_POST['ad_id'][$k] == $_POST['ad_default']) {
sql_query(" update {$g5['g5_shop_order_address_table']} set ad_default = '0' where mb_id = '{$member['mb_id']}' "); sql_query(" update {$g5['g5_shop_order_address_table']} set ad_default = '0' where mb_id = '{$member['mb_id']}' ");

View File

@ -843,6 +843,8 @@ if($is_member) {
sql_query($sql); sql_query($sql);
} }
$ad_subject = clean_xss_tags($ad_subject);
if($row['ad_id']){ if($row['ad_id']){
$sql = " update {$g5['g5_shop_order_address_table']} $sql = " update {$g5['g5_shop_order_address_table']}
set ad_default = '$ad_default', set ad_default = '$ad_default',