From c9785dcb5b18dee21bf2428155c3906b0f38e87d Mon Sep 17 00:00:00 2001
From: whitedot <whitedot@naver.com>
Date: Fri, 12 Apr 2013 16:36:12 +0900
Subject: [PATCH] =?UTF-8?q?=EC=87=BC=ED=95=91=EB=AA=B0=EA=B4=80=EB=A6=AC?=
 =?UTF-8?q?=EC=9E=90:=20#66=20=EC=97=90=20=EB=94=B0=EB=A5=B8=20=EB=B0=B0?=
 =?UTF-8?q?=EC=86=A1=EC=9D=BC=EA=B4=84=EC=B2=98=EB=A6=AC=20=EB=A7=88?=
 =?UTF-8?q?=ED=81=AC=EC=97=85=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/shop_admin/deliverylist.php |   3 +-
 adm/shop_admin/itemlist.php     | 241 ++++++++++++++++----------------
 2 files changed, 120 insertions(+), 124 deletions(-)

diff --git a/adm/shop_admin/deliverylist.php b/adm/shop_admin/deliverylist.php
index 2262e1caa..c5c517688 100644
--- a/adm/shop_admin/deliverylist.php
+++ b/adm/shop_admin/deliverylist.php
@@ -164,7 +164,8 @@ if ($search) // 검색렬일 때만 처음 버튼을 보여줌
         <td><?=$hope_date?></td>
         <td><input type="text" name="od_invoice_time[<?=$i?>]" value="<?=$invoice_time?>" class="frm_input" size="20" maxlength="19"></td>
         <td>
-            <select name="dl_id[<?=$i?>]">
+            <label for="dl_id_<?=$i?>">배송업체</label>
+            <select name="dl_id[<?=$i?>]" id="dl_id_<?=$i?>">
                 <option value="">선택하세요</option>
                 <?=$delivery_options?>
             </select>
diff --git a/adm/shop_admin/itemlist.php b/adm/shop_admin/itemlist.php
index 2050ee12d..1a1d6dc85 100644
--- a/adm/shop_admin/itemlist.php
+++ b/adm/shop_admin/itemlist.php
@@ -74,140 +74,135 @@ $sql  = " select *
            limit $from_record, $rows ";
 $result = sql_query($sql);
 
-//$qstr  = "$qstr&sca=$sca&page=$page";
-$qstr  = "$qstr&sca=$sca&page=$page&save_stx=$stx";
+//$qstr  = $qstr.'&amp;sca='.$sca.'&amp;page='.$page;
+$qstr  = $qstr.'&amp;sca='.$sca.'&amp;page='.$page.'&amp;save_stx='.$stx;
 ?>
 
-<table width=100% cellpadding=4 cellspacing=0>
-<form name=flist>
-<input type=hidden name=page value="<?=$page?>">
-<tr>
-    <td width=20%><a href='<?=$_SERVER['PHP_SELF']?>'>처음</a></td>
-    <td width=60% align=center>
-        <select name="sca">
-            <option value=''>전체분류
-            <?
-            $sql1 = " select ca_id, ca_name from {$g4['shop_category_table']} order by ca_id ";
-            $result1 = sql_query($sql1);
-            for ($i=0; $row1=sql_fetch_array($result1); $i++)
-            {
-                $len = strlen($row1['ca_id']) / 2 - 1;
-                $nbsp = "";
-                for ($i=0; $i<$len; $i++) $nbsp .= "&nbsp;&nbsp;&nbsp;";
-                echo "<option value='{$row1['ca_id']}'>$nbsp{$row1['ca_name']}\n";
-            }
-            ?>
-        </select>
-        <script> document.flist.sca.value = '<?=$sca?>';</script>
+<form name="flist">
+<input type="hidden" name="page" value="<?=$page?>">
+<input type="hidden" name="save_stx" value="<?=$stx?>">
 
-        <select name=sfl>
-            <option value='it_name'>상품명
-            <option value='it_id'>상품코드
-            <option value='it_maker'>제조사
-            <option value='it_origin'>원산지
-            <option value='it_sell_email'>판매자 e-mail
-        </select>
-        <?// if ($sel_field) echo "<script> document.flist.sel_field.value = '$sel_field';</script>"; ?>
-        <? if ($sfl) echo "<script> document.flist.sfl.value = '$sfl';</script>"; ?>
+<fieldset>
+    <? // ##### // 웹 접근성 취약 지점 시작 - 지운아빠 2013-04-12 ?>
+    <select name="sca">
+        <option value="">전체분류</option>
+        <?
+        $sql1 = " select ca_id, ca_name from {$g4['shop_category_table']} order by ca_id ";
+        $result1 = sql_query($sql1);
+        for ($i=0; $row1=sql_fetch_array($result1); $i++) {
+            $len = strlen($row1['ca_id']) / 2 - 1;
+            $nbsp = "";
+            for ($i=0; $i<$len; $i++) $nbsp .= "&nbsp;&nbsp;&nbsp;";
+            echo '<option value="'.$row1['ca_id'].'" '.get_selected($sca, $row1['ca_id']).'>'.$nbsp.$row1['ca_name'].'</option>'.PHP_EOL;
+        }
+        ?>
+    </select>
+    <? // ##### // 웹 접근성 취약 지점 끝 ?>
+    <select name="sfl">
+        <option value="it_name">상품명</option>
+        <option value="it_id">상품코드</option>
+        <option value="it_maker">제조사</option>
+        <option value="it_origin">원산지</option>
+        <option value="it_sell_email">판매자 e-mail</option>
+    </select>
+    <input type="text" name="stx" value="<?=$stx?>" required class="frm_input required">
+    <input type="submit" value="검색" class="btn_submit">
+</fieldset>
 
-        <input type=hidden name=save_stx value='<?=$stx?>'>
-        <input type=text name=stx value='<?=$stx?>'>
-        <input type=image src='<?=G4_ADMIN_URL?>/img/btn_search.gif' align=absmiddle>
-    </td>
-    <td width=20% align=right>건수 : <? echo $total_count ?>&nbsp;</td>
-</tr>
-</table>
-
-
-<table cellpadding=0 cellspacing=0 width=100% border=0>
-<tr><td colspan=13 height=2 bgcolor=0E87F9></td></tr>
-<tr align=center class=ht>
-    <td width=70><?=subject_sort_link("it_id", "sca=$sca")?>상품코드</a></td>
-    <td width='' colspan=2><?=subject_sort_link("it_name", "sca=$sca")?>상품명</a></td>
-    <td width=70><?=subject_sort_link("it_amount", "sca=$sca")?>비회원가격</a><br><?=subject_sort_link("it_cust_amount", "sca=$sca")?>시중가격</a></td>
-    <td width=70><?=subject_sort_link("it_amount2", "sca=$sca")?>회원가격</a><br><?=subject_sort_link("it_point", "sca=$sca")?>포인트</a></td>
-    <td width=70><?=subject_sort_link("it_amount3", "sca=$sca")?>특별가격</a><br><?=subject_sort_link("it_stock_qty", "sca=$sca")?>재고</a></td>
-    <td width=30><?=subject_sort_link("it_order", "sca=$sca")?>순서</a></td>
-    <td width=30><?=subject_sort_link("it_use", "sca=$sca", 1)?>판매</a></td>
-    <td width=30><?=subject_sort_link("it_hit", "sca=$sca", 1)?>조회</a></td>
-    <td width=100><a href='./itemform.php'><img src='<?=G4_ADMIN_URL?>/img/icon_insert.gif' border=0 title='상품등록'></a></td>
-</tr>
-<tr><td colspan=13 height=1 bgcolor=#CCCCCC></td></tr>
 </form>
 
-<form name=fitemlistupdate method=post action="./itemlistupdate.php" autocomplete='off'>
-<input type=hidden name=sca  value="<?=$sca?>">
-<input type=hidden name=sst  value="<?=$sst?>">
-<input type=hidden name=sod  value="<?=$sod?>">
-<input type=hidden name=sfl  value="<?=$sfl?>">
-<input type=hidden name=stx  value="<?=$stx?>">
-<input type=hidden name=page value="<?=$page?>">
-<?
-for ($i=0; $row=mysql_fetch_array($result); $i++)
-{
-    $href = G4_SHOP_URL."/item.php?it_id={$row['it_id']}";
+<section class="cbox">
+    <h2>상품 목록</h2>
 
-    $s_mod = icon("수정", "./itemform.php?w=u&it_id={$row['it_id']}&ca_id={$row['ca_id']}&$qstr");
-    $s_del = icon("삭제", "javascript:del('./itemformupdate.php?w=d&it_id={$row['it_id']}&ca_id={$row['ca_id']}&$qstr');");
-    $s_vie = icon("보기", $href);
-    //$s_copy = "<a href=\"javascript:board_copy('$row[bo_table]');\"><img src='img/icon_copy.gif' border=0 title='복사'></a>";
-    //$s_copy = icon("복사", "javascript:_copy('".get_text(htmlspecialchars2($row[it_name]))."', 'item_copy_update.php?it_id=$row[it_id]&ca_id=$row[ca_id]&$qstr');");
-    $s_copy = icon("복사", "javascript:_copy('{$row['it_id']}', '{$row['ca_id']}');");
+    <table cellpadding=0 cellspacing=0 width=100% border=0>
+    <tr><td colspan=13 height=2 bgcolor=0E87F9></td></tr>
+    <tr align=center class=ht>
+        <td width=70><?=subject_sort_link("it_id", "sca=$sca")?>상품코드</a></td>
+        <td width='' colspan=2><?=subject_sort_link("it_name", "sca=$sca")?>상품명</a></td>
+        <td width=70><?=subject_sort_link("it_amount", "sca=$sca")?>비회원가격</a><br><?=subject_sort_link("it_cust_amount", "sca=$sca")?>시중가격</a></td>
+        <td width=70><?=subject_sort_link("it_amount2", "sca=$sca")?>회원가격</a><br><?=subject_sort_link("it_point", "sca=$sca")?>포인트</a></td>
+        <td width=70><?=subject_sort_link("it_amount3", "sca=$sca")?>특별가격</a><br><?=subject_sort_link("it_stock_qty", "sca=$sca")?>재고</a></td>
+        <td width=30><?=subject_sort_link("it_order", "sca=$sca")?>순서</a></td>
+        <td width=30><?=subject_sort_link("it_use", "sca=$sca", 1)?>판매</a></td>
+        <td width=30><?=subject_sort_link("it_hit", "sca=$sca", 1)?>조회</a></td>
+        <td width=100><a href='./itemform.php'><img src='<?=G4_ADMIN_URL?>/img/icon_insert.gif' border=0 title='상품등록'></a></td>
+    </tr>
+    <tr><td colspan=13 height=1 bgcolor=#CCCCCC></td></tr>
 
-    $gallery = $row['it_gallery'] ? "Y" : "";
+    <form name=fitemlistupdate method=post action="./itemlistupdate.php" autocomplete='off'>
+    <input type=hidden name=sca  value="<?=$sca?>">
+    <input type=hidden name=sst  value="<?=$sst?>">
+    <input type=hidden name=sod  value="<?=$sod?>">
+    <input type=hidden name=sfl  value="<?=$sfl?>">
+    <input type=hidden name=stx  value="<?=$stx?>">
+    <input type=hidden name=page value="<?=$page?>">
+    <?
+    for ($i=0; $row=mysql_fetch_array($result); $i++)
+    {
+        $href = G4_SHOP_URL."/item.php?it_id={$row['it_id']}";
 
-    $tmp_ca_list  = "<select id='ca_id_$i' name='ca_id[$i]'>" . $ca_list;
-    $tmp_ca_list .= "<script language='javascript'>document.getElementById('ca_id_$i').value='{$row['ca_id']}';</script>";
+        $s_mod = icon("수정", "./itemform.php?w=u&it_id={$row['it_id']}&ca_id={$row['ca_id']}&$qstr");
+        $s_del = icon("삭제", "javascript:del('./itemformupdate.php?w=d&it_id={$row['it_id']}&ca_id={$row['ca_id']}&$qstr');");
+        $s_vie = icon("보기", $href);
+        //$s_copy = "<a href=\"javascript:board_copy('$row[bo_table]');\"><img src='img/icon_copy.gif' border=0 title='복사'></a>";
+        //$s_copy = icon("복사", "javascript:_copy('".get_text(htmlspecialchars2($row[it_name]))."', 'item_copy_update.php?it_id=$row[it_id]&ca_id=$row[ca_id]&$qstr');");
+        $s_copy = icon("복사", "javascript:_copy('{$row['it_id']}', '{$row['ca_id']}');");
 
-    $list = $i%2;
-    echo "
-    <input type='hidden' name='it_id[$i]' value='{$row['it_id']}'>
-    <tr class='list$list'>
-        <td>{$row['it_id']}</td>
-        <td style='padding-top:5px; padding-bottom:5px;'><a href='$href'>".get_it_image($row['it_id'].'_s', 50, 50)."</a></td>
-        <td align=left>$tmp_ca_list<br><input type='text' name='it_name[$i]' value='".htmlspecialchars2(cut_str($row['it_name'],250, ""))."' required size=40 class=ed></td>
-        <td colspan=3>
-            <table width=210 cellpadding=0 cellspacing=0>
-            <tr>
-                <td>
-                    <table cellpadding=0 cellspacing=0>
-                    <tr>
-                        <td width=70 align=center><input type='text' name='it_amount[$i]' value='{$row['it_amount']}' class=ed size=7 style='text-align:right; background-color:#DDE6FE;'></td>
-                        <td width=70 align=center><input type='text' name='it_amount2[$i]' value='{$row['it_amount2']}' class=ed size=7 style='text-align:right; background-color:#DDFEDE;'></td>
-                        <td width=70 align=center><input type='text' name='it_amount3[$i]' value='{$row['it_amount3']}' class=ed size=7 style='text-align:right; background-color:#FEDDDD;'></td>
-                    </tr>
-                    </table></td>
-            </tr>
-            <tr>
-                <td>
-                    <table cellpadding=0 cellspacing=0>
-                    <tr>
-                        <td width=70 align=center><input type='text' name='it_cust_amount[$i]' value='{$row['it_cust_amount']}' class=ed size=7 style='text-align:right;'></td>
-                        <td width=70 align=center><input type='text' name='it_point[$i]' value='{$row['it_point']}' class=ed size=7 style='text-align:right;'></td>
-                        <td width=70 align=center><input type='text' name='it_stock_qty[$i]' value='{$row['it_stock_qty']}' class=ed size=7 style='text-align:right;'></td>
-                    </tr>
-                    </table></td>
-            </tr>
-            </table></td>
-        <td><input type='text' name='it_order[$i]' value='{$row['it_order']}' class=ed size=3 style='text-align:right;'></td>
-        <td><input type=checkbox name='it_use[$i]' ".($row['it_use'] ? "checked" : "")." value='1'></td>
-        <td>{$row['it_hit']}</td>
-        <td>$s_mod $s_del $s_vie $s_copy</td>
-    </tr>";
-}
-if ($i == 0)
-    echo "<tr><td colspan=20 align=center height=100 bgcolor=#FFFFFF><span class=point>자료가 한건도 없습니다.</span></td></tr>";
-?>
-<tr><td colspan=13 height=1 bgcolor=#CCCCCC></td></tr>
-</table>
+        $gallery = $row['it_gallery'] ? "Y" : "";
 
-<table width=100%>
-<tr>
-    <td width=50%><input type=submit class=btn1 value='일괄수정' accesskey='s'></td>
-    <td width=50% align=right><?=get_paging($config['cf_write_pages'], $page, $total_page, "{$_SERVER['PHP_SELF']}?$qstr&page=");?></td>
-</tr>
-</table>
-</form>
+        $tmp_ca_list  = "<select id='ca_id_$i' name='ca_id[$i]'>" . $ca_list;
+        $tmp_ca_list .= "<script language='javascript'>document.getElementById('ca_id_$i').value='{$row['ca_id']}';</script>";
+
+        $list = $i%2;
+        echo "
+        <input type='hidden' name='it_id[$i]' value='{$row['it_id']}'>
+        <tr class='list$list'>
+            <td>{$row['it_id']}</td>
+            <td style='padding-top:5px; padding-bottom:5px;'><a href='$href'>".get_it_image($row['it_id'].'_s', 50, 50)."</a></td>
+            <td align=left>$tmp_ca_list<br><input type='text' name='it_name[$i]' value='".htmlspecialchars2(cut_str($row['it_name'],250, ""))."' required size=40 class=ed></td>
+            <td colspan=3>
+                <table width=210 cellpadding=0 cellspacing=0>
+                <tr>
+                    <td>
+                        <table cellpadding=0 cellspacing=0>
+                        <tr>
+                            <td width=70 align=center><input type='text' name='it_amount[$i]' value='{$row['it_amount']}' class=ed size=7 style='text-align:right; background-color:#DDE6FE;'></td>
+                            <td width=70 align=center><input type='text' name='it_amount2[$i]' value='{$row['it_amount2']}' class=ed size=7 style='text-align:right; background-color:#DDFEDE;'></td>
+                            <td width=70 align=center><input type='text' name='it_amount3[$i]' value='{$row['it_amount3']}' class=ed size=7 style='text-align:right; background-color:#FEDDDD;'></td>
+                        </tr>
+                        </table></td>
+                </tr>
+                <tr>
+                    <td>
+                        <table cellpadding=0 cellspacing=0>
+                        <tr>
+                            <td width=70 align=center><input type='text' name='it_cust_amount[$i]' value='{$row['it_cust_amount']}' class=ed size=7 style='text-align:right;'></td>
+                            <td width=70 align=center><input type='text' name='it_point[$i]' value='{$row['it_point']}' class=ed size=7 style='text-align:right;'></td>
+                            <td width=70 align=center><input type='text' name='it_stock_qty[$i]' value='{$row['it_stock_qty']}' class=ed size=7 style='text-align:right;'></td>
+                        </tr>
+                        </table></td>
+                </tr>
+                </table></td>
+            <td><input type='text' name='it_order[$i]' value='{$row['it_order']}' class=ed size=3 style='text-align:right;'></td>
+            <td><input type=checkbox name='it_use[$i]' ".($row['it_use'] ? "checked" : "")." value='1'></td>
+            <td>{$row['it_hit']}</td>
+            <td>$s_mod $s_del $s_vie $s_copy</td>
+        </tr>";
+    }
+    if ($i == 0)
+        echo "<tr><td colspan=20 align=center height=100 bgcolor=#FFFFFF><span class=point>자료가 한건도 없습니다.</span></td></tr>";
+    ?>
+    <tr><td colspan=13 height=1 bgcolor=#CCCCCC></td></tr>
+    </table>
+
+    <div class="btn_submit">
+        <input type="submit" value="일괄수정" class="btn_submit" accesskey="s">
+    </div>
+    </form>
+
+</section>
+
+<?=get_paging($config['cf_write_pages'], $page, $total_page, "{$_SERVER['PHP_SELF']}?$qstr&page=");?>
 
 <script>
 function _trim(str)