firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

KVE-2018-1987, 2019-0038 영카트 다중 취약점 수정

Browse Source
This commit is contained in:
thisgun
2019-01-28 16:22:50 +09:00
parent cc4f83c355
commit 9e502fdb18
8 changed files with 97 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
shop/inicis/inipay_cancel.php
View File

@ -11,13 +11,42 @@ if (!defined("_GNUBOARD_")) exit; // 개별 페이지 접근 불가
$cancelFlag = "true";
// $cancelFlag를 "ture"로 변경하는 condition 판단은 개별적으로
// $cancelFlag를 "true"로 변경하는 condition 판단은 개별적으로
// 수행하여 주십시오.
if($cancelFlag == "true")
{
if( isset($is_noti_pay) && $is_noti_pay ){
return;
}
include_once(G5_SHOP_PATH.'/settle_inicis.inc.php');
if( get_session('ss_order_id') && $tno ){
$ini_oid = preg_replace('/[^a-z0-9_\-]/i', '', get_session('ss_order_id'));
$tno = preg_replace('/[^a-z0-9_\-]/i', '', $tno);
$sql = "select oid from {$g5['g5_shop_inicis_log_table']} where oid = '$ini_oid' and P_TID = '$tno' ";
$exists_log = sql_fetch($sql);
if( $exists_log['oid'] ){
$sql = " update {$g5['g5_shop_inicis_log_table']}
set P_STATUS = 'cancel',
P_AUTH_DT = '".preg_replace('/[^0-9]/', '', G5_TIME_YMDHIS)."' where oid = '$ini_oid' and P_TID = '$tno' ";
} else {
$sql = " insert into {$g5['g5_shop_inicis_log_table']}
set oid = '$ini_oid',
P_TID = '$tno',
P_STATUS = 'cancel',
P_AUTH_DT = '".preg_replace('/[^0-9]/', '', G5_TIME_YMDHIS)."' ";
}
sql_query($sql, false);
}
$TID = $tno;
$inipay->SetField("type", "cancel"); // 고정
if( $default['de_inicis_admin_key'] ){