firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

잘못 패치된 코드 수정

Browse Source
This commit is contained in:
thisgun
2019-06-13 16:36:18 +09:00
parent aa9edb872b
commit cc7142acee
2 changed files with 29 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
adm/shop_admin/categorylistupdate.php
View File

@ -59,9 +59,11 @@ for ($i=0; $i<count($_POST['ca_id']); $i++)
alert('스킨 파일 경로의 확장자는 php, htm, html 만 허용합니다.');
}
}
$p_ca_name = is_array($_POST['ca_name']) ? strip_tags($_POST['ca_name'][$i]) : '';
$sql = " update {$g5['g5_shop_category_table']}
set ca_name = '".sql_real_escape_string(strip_tags($_POST['ca_name'][$i]))."',
set ca_name = '".$p_ca_name."',
ca_mb_id = '".sql_real_escape_string(strip_tags($_POST['ca_mb_id'][$i]))."',
ca_use = '".sql_real_escape_string(strip_tags($_POST['ca_use'][$i]))."',
ca_list_mod = '".sql_real_escape_string(strip_tags($_POST['ca_list_mod'][$i]))."',

38
adm/shop_admin/itemlistupdate.php
View File

@ -23,21 +23,35 @@ if ($_POST['act_button'] == "선택수정") {
alert("기본분류는 반드시 선택해야 합니다.");
}
$p_ca_id = is_array($_POST['ca_id']) ? strip_tags($_POST['ca_id'][$k]) : '';
$p_ca_id2 = is_array($_POST['ca_id2']) ? strip_tags($_POST['ca_id2'][$k]) : '';
$p_ca_id3 = is_array($_POST['ca_id3']) ? strip_tags($_POST['ca_id3'][$k]) : '';
$p_it_name = is_array($_POST['it_name']) ? strip_tags($_POST['it_name'][$k]) : '';
$p_it_cust_price = is_array($_POST['it_cust_price']) ? strip_tags($_POST['it_cust_price'][$k]) : '';
$p_it_price = is_array($_POST['it_price']) ? strip_tags($_POST['it_price'][$k]) : '';
$p_it_stock_qty = is_array($_POST['it_stock_qty']) ? strip_tags($_POST['it_stock_qty'][$k]) : '';
$p_it_skin = is_array($_POST['it_skin']) ? strip_tags($_POST['it_skin'][$k]) : '';
$p_it_mobile_skin = is_array($_POST['it_mobile_skin']) ? strip_tags($_POST['it_mobile_skin'][$k]) : '';
$p_it_use = is_array($_POST['it_use']) ? strip_tags($_POST['it_use'][$k]) : '';
$p_it_soldout = is_array($_POST['it_soldout']) ? strip_tags($_POST['it_soldout'][$k]) : '';
$p_it_order = is_array($_POST['it_order']) ? strip_tags($_POST['it_order'][$k]) : '';
$sql = "update {$g5['g5_shop_item_table']}
set ca_id = '".sql_real_escape_string($_POST['ca_id'][$k])."',
ca_id2 = '".sql_real_escape_string($_POST['ca_id2'][$k])."',
ca_id3 = '".sql_real_escape_string($_POST['ca_id3'][$k])."',
it_name = '".sql_real_escape_string($_POST['it_name'][$k])."',
it_cust_price = '".sql_real_escape_string($_POST['it_cust_price'][$k])."',
it_price = '".sql_real_escape_string($_POST['it_price'][$k])."',
it_stock_qty = '".sql_real_escape_string($_POST['it_stock_qty'][$k])."',
it_skin = '".sql_real_escape_string($_POST['it_skin'][$k])."',
it_mobile_skin = '".sql_real_escape_string($_POST['it_mobile_skin'][$k])."',
it_use = '".sql_real_escape_string($_POST['it_use'][$k])."',
it_soldout = '".sql_real_escape_string($_POST['it_soldout'][$k])."',
it_order = '".sql_real_escape_string($_POST['it_order'][$k])."',
set ca_id = '".sql_real_escape_string($p_ca_id)."',
ca_id2 = '".sql_real_escape_string($p_ca_id2)."',
ca_id3 = '".sql_real_escape_string($p_ca_id3)."',
it_name = '".$p_it_name."',
it_cust_price = '".sql_real_escape_string($p_it_cust_price)."',
it_price = '".sql_real_escape_string($p_it_price)."',
it_stock_qty = '".sql_real_escape_string($p_it_stock_qty)."',
it_skin = '".sql_real_escape_string($p_it_skin)."',
it_mobile_skin = '".sql_real_escape_string($p_it_mobile_skin)."',
it_use = '".sql_real_escape_string($p_it_use)."',
it_soldout = '".sql_real_escape_string($p_it_soldout)."',
it_order = '".sql_real_escape_string($p_it_order)."',
it_update_time = '".G5_TIME_YMDHIS."'
where it_id = '".preg_replace('/[^a-z0-9_\-]/i', '', $_POST['it_id'][$k])."' ";
sql_query($sql);
}
} else if ($_POST['act_button'] == "선택삭제") {