firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

잘못 패치된 코드 수정

Browse Source
This commit is contained in:
thisgun
2019-06-13 16:36:18 +09:00
parent aa9edb872b
commit cc7142acee
2 changed files with 29 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
adm/shop_admin/categorylistupdate.php
View File

@ -60,8 +60,10 @@ for ($i=0; $i<count($_POST['ca_id']); $i++)
} }
} }
$p_ca_name = is_array($_POST['ca_name']) ? strip_tags($_POST['ca_name'][$i]) : '';
$sql = " update {$g5['g5_shop_category_table']} $sql = " update {$g5['g5_shop_category_table']}
set ca_name = '".sql_real_escape_string(strip_tags($_POST['ca_name'][$i]))."', set ca_name = '".$p_ca_name."',
ca_mb_id = '".sql_real_escape_string(strip_tags($_POST['ca_mb_id'][$i]))."', ca_mb_id = '".sql_real_escape_string(strip_tags($_POST['ca_mb_id'][$i]))."',
ca_use = '".sql_real_escape_string(strip_tags($_POST['ca_use'][$i]))."', ca_use = '".sql_real_escape_string(strip_tags($_POST['ca_use'][$i]))."',
ca_list_mod = '".sql_real_escape_string(strip_tags($_POST['ca_list_mod'][$i]))."', ca_list_mod = '".sql_real_escape_string(strip_tags($_POST['ca_list_mod'][$i]))."',

38
adm/shop_admin/itemlistupdate.php
View File

@ -23,21 +23,35 @@ if ($_POST['act_button'] == "선택수정") {
alert("기본분류는 반드시 선택해야 합니다."); alert("기본분류는 반드시 선택해야 합니다.");
} }
$p_ca_id = is_array($_POST['ca_id']) ? strip_tags($_POST['ca_id'][$k]) : '';
$p_ca_id2 = is_array($_POST['ca_id2']) ? strip_tags($_POST['ca_id2'][$k]) : '';
$p_ca_id3 = is_array($_POST['ca_id3']) ? strip_tags($_POST['ca_id3'][$k]) : '';
$p_it_name = is_array($_POST['it_name']) ? strip_tags($_POST['it_name'][$k]) : '';
$p_it_cust_price = is_array($_POST['it_cust_price']) ? strip_tags($_POST['it_cust_price'][$k]) : '';
$p_it_price = is_array($_POST['it_price']) ? strip_tags($_POST['it_price'][$k]) : '';
$p_it_stock_qty = is_array($_POST['it_stock_qty']) ? strip_tags($_POST['it_stock_qty'][$k]) : '';
$p_it_skin = is_array($_POST['it_skin']) ? strip_tags($_POST['it_skin'][$k]) : '';
$p_it_mobile_skin = is_array($_POST['it_mobile_skin']) ? strip_tags($_POST['it_mobile_skin'][$k]) : '';
$p_it_use = is_array($_POST['it_use']) ? strip_tags($_POST['it_use'][$k]) : '';
$p_it_soldout = is_array($_POST['it_soldout']) ? strip_tags($_POST['it_soldout'][$k]) : '';
$p_it_order = is_array($_POST['it_order']) ? strip_tags($_POST['it_order'][$k]) : '';
$sql = "update {$g5['g5_shop_item_table']} $sql = "update {$g5['g5_shop_item_table']}
set ca_id = '".sql_real_escape_string($_POST['ca_id'][$k])."', set ca_id = '".sql_real_escape_string($p_ca_id)."',
ca_id2 = '".sql_real_escape_string($_POST['ca_id2'][$k])."', ca_id2 = '".sql_real_escape_string($p_ca_id2)."',
ca_id3 = '".sql_real_escape_string($_POST['ca_id3'][$k])."', ca_id3 = '".sql_real_escape_string($p_ca_id3)."',
it_name = '".sql_real_escape_string($_POST['it_name'][$k])."', it_name = '".$p_it_name."',
it_cust_price = '".sql_real_escape_string($_POST['it_cust_price'][$k])."', it_cust_price = '".sql_real_escape_string($p_it_cust_price)."',
it_price = '".sql_real_escape_string($_POST['it_price'][$k])."', it_price = '".sql_real_escape_string($p_it_price)."',
it_stock_qty = '".sql_real_escape_string($_POST['it_stock_qty'][$k])."', it_stock_qty = '".sql_real_escape_string($p_it_stock_qty)."',
it_skin = '".sql_real_escape_string($_POST['it_skin'][$k])."', it_skin = '".sql_real_escape_string($p_it_skin)."',
it_mobile_skin = '".sql_real_escape_string($_POST['it_mobile_skin'][$k])."', it_mobile_skin = '".sql_real_escape_string($p_it_mobile_skin)."',
it_use = '".sql_real_escape_string($_POST['it_use'][$k])."', it_use = '".sql_real_escape_string($p_it_use)."',
it_soldout = '".sql_real_escape_string($_POST['it_soldout'][$k])."', it_soldout = '".sql_real_escape_string($p_it_soldout)."',
it_order = '".sql_real_escape_string($_POST['it_order'][$k])."', it_order = '".sql_real_escape_string($p_it_order)."',
it_update_time = '".G5_TIME_YMDHIS."' it_update_time = '".G5_TIME_YMDHIS."'
where it_id = '".preg_replace('/[^a-z0-9_\-]/i', '', $_POST['it_id'][$k])."' "; where it_id = '".preg_replace('/[^a-z0-9_\-]/i', '', $_POST['it_id'][$k])."' ";
sql_query($sql); sql_query($sql);
} }
} else if ($_POST['act_button'] == "선택삭제") { } else if ($_POST['act_button'] == "선택삭제") {