From cc7142aceed443da21bde2f94ca8688228c92345 Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Thu, 13 Jun 2019 16:36:18 +0900
Subject: [PATCH] =?UTF-8?q?=EC=9E=98=EB=AA=BB=20=ED=8C=A8=EC=B9=98?=
 =?UTF-8?q?=EB=90=9C=20=EC=BD=94=EB=93=9C=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/shop_admin/categorylistupdate.php |  4 ++-
 adm/shop_admin/itemlistupdate.php     | 38 ++++++++++++++++++---------
 2 files changed, 29 insertions(+), 13 deletions(-)

diff --git a/adm/shop_admin/categorylistupdate.php b/adm/shop_admin/categorylistupdate.php
index f1f5a92b2..6ec9e4061 100644
--- a/adm/shop_admin/categorylistupdate.php
+++ b/adm/shop_admin/categorylistupdate.php
@@ -59,9 +59,11 @@ for ($i=0; $i<count($_POST['ca_id']); $i++)
             alert('스킨 파일 경로의 확장자는 php, htm, html 만 허용합니다.');
         }
     }
+    
+    $p_ca_name = is_array($_POST['ca_name']) ? strip_tags($_POST['ca_name'][$i]) : '';
 
     $sql = " update {$g5['g5_shop_category_table']}
-                set ca_name             = '".sql_real_escape_string(strip_tags($_POST['ca_name'][$i]))."',
+                set ca_name             = '".$p_ca_name."',
                     ca_mb_id            = '".sql_real_escape_string(strip_tags($_POST['ca_mb_id'][$i]))."',
                     ca_use              = '".sql_real_escape_string(strip_tags($_POST['ca_use'][$i]))."',
                     ca_list_mod         = '".sql_real_escape_string(strip_tags($_POST['ca_list_mod'][$i]))."',
diff --git a/adm/shop_admin/itemlistupdate.php b/adm/shop_admin/itemlistupdate.php
index 9890f9594..9655cef3b 100644
--- a/adm/shop_admin/itemlistupdate.php
+++ b/adm/shop_admin/itemlistupdate.php
@@ -23,21 +23,35 @@ if ($_POST['act_button'] == "선택수정") {
             alert("기본분류는 반드시 선택해야 합니다.");
         }
 
+        $p_ca_id = is_array($_POST['ca_id']) ? strip_tags($_POST['ca_id'][$k]) : '';
+        $p_ca_id2 = is_array($_POST['ca_id2']) ? strip_tags($_POST['ca_id2'][$k]) : '';
+        $p_ca_id3 = is_array($_POST['ca_id3']) ? strip_tags($_POST['ca_id3'][$k]) : '';
+        $p_it_name = is_array($_POST['it_name']) ? strip_tags($_POST['it_name'][$k]) : '';
+        $p_it_cust_price = is_array($_POST['it_cust_price']) ? strip_tags($_POST['it_cust_price'][$k]) : '';
+        $p_it_price = is_array($_POST['it_price']) ? strip_tags($_POST['it_price'][$k]) : '';
+        $p_it_stock_qty = is_array($_POST['it_stock_qty']) ? strip_tags($_POST['it_stock_qty'][$k]) : '';
+        $p_it_skin = is_array($_POST['it_skin']) ? strip_tags($_POST['it_skin'][$k]) : '';
+        $p_it_mobile_skin = is_array($_POST['it_mobile_skin']) ? strip_tags($_POST['it_mobile_skin'][$k]) : '';
+        $p_it_use = is_array($_POST['it_use']) ? strip_tags($_POST['it_use'][$k]) : '';
+        $p_it_soldout = is_array($_POST['it_soldout']) ? strip_tags($_POST['it_soldout'][$k]) : '';
+        $p_it_order = is_array($_POST['it_order']) ? strip_tags($_POST['it_order'][$k]) : '';
+
         $sql = "update {$g5['g5_shop_item_table']}
-                   set ca_id          = '".sql_real_escape_string($_POST['ca_id'][$k])."',
-                       ca_id2         = '".sql_real_escape_string($_POST['ca_id2'][$k])."',
-                       ca_id3         = '".sql_real_escape_string($_POST['ca_id3'][$k])."',
-                       it_name        = '".sql_real_escape_string($_POST['it_name'][$k])."',
-                       it_cust_price  = '".sql_real_escape_string($_POST['it_cust_price'][$k])."',
-                       it_price       = '".sql_real_escape_string($_POST['it_price'][$k])."',
-                       it_stock_qty   = '".sql_real_escape_string($_POST['it_stock_qty'][$k])."',
-                       it_skin        = '".sql_real_escape_string($_POST['it_skin'][$k])."',
-                       it_mobile_skin = '".sql_real_escape_string($_POST['it_mobile_skin'][$k])."',
-                       it_use         = '".sql_real_escape_string($_POST['it_use'][$k])."',
-                       it_soldout     = '".sql_real_escape_string($_POST['it_soldout'][$k])."',
-                       it_order       = '".sql_real_escape_string($_POST['it_order'][$k])."',
+                   set ca_id          = '".sql_real_escape_string($p_ca_id)."',
+                       ca_id2         = '".sql_real_escape_string($p_ca_id2)."',
+                       ca_id3         = '".sql_real_escape_string($p_ca_id3)."',
+                       it_name        = '".$p_it_name."',
+                       it_cust_price  = '".sql_real_escape_string($p_it_cust_price)."',
+                       it_price       = '".sql_real_escape_string($p_it_price)."',
+                       it_stock_qty   = '".sql_real_escape_string($p_it_stock_qty)."',
+                       it_skin        = '".sql_real_escape_string($p_it_skin)."',
+                       it_mobile_skin = '".sql_real_escape_string($p_it_mobile_skin)."',
+                       it_use         = '".sql_real_escape_string($p_it_use)."',
+                       it_soldout     = '".sql_real_escape_string($p_it_soldout)."',
+                       it_order       = '".sql_real_escape_string($p_it_order)."',
                        it_update_time = '".G5_TIME_YMDHIS."'
                  where it_id   = '".preg_replace('/[^a-z0-9_\-]/i', '', $_POST['it_id'][$k])."' ";
+
         sql_query($sql);
     }
 } else if ($_POST['act_button'] == "선택삭제") {