Merge branch 'php81-jw'

adm/point_list.php

@@ -127,7 +127,6 @@ if (strstr($sfl, "mb_id")) {
             <tbody>
                 <?php
                 for ($i = 0; $row = sql_fetch_array($result); $i++) {
-
                     $mb_nick = get_sideview($row['mb_id'], $row['mb_nick'], $row['mb_email'], $row['mb_homepage']);
 
                     $link1 = $link2 = '';

adm/shop_admin/_common.php

@@ -9,4 +9,6 @@ if (!defined('G5_USE_SHOP') || !G5_USE_SHOP)
 include_once(G5_ADMIN_PATH.'/admin.lib.php');
 include_once('./admin.shop.lib.php');
 
+run_event('admin_common');
+
 check_order_inicis_tmps();

adm/shop_admin/categoryform.php

@@ -157,7 +157,6 @@ else {
 
 <form name="fcategoryform" action="./categoryformupdate.php" onsubmit="return fcategoryformcheck(this);" method="post" enctype="multipart/form-data">
 
-<input type="hidden" name="codedup"  value="<?php echo $default['de_code_dup_use']; ?>">
 <input type="hidden" name="w" value="<?php echo $w; ?>">
 <input type="hidden" name="sst" value="<?php echo $sst; ?>">
 <input type="hidden" name="sod" value="<?php echo $sod; ?>">
@@ -184,7 +183,6 @@ else {
             <?php if ($w == "") { ?>
                 <?php echo help("자동으로 보여지는 분류코드를 사용하시길 권해드리지만 직접 입력한 값으로도 사용할 수 있습니다.\n분류코드는 나중에 수정이 되지 않으므로 신중하게 결정하여 사용하십시오.\n\n분류코드는 2자리씩 10자리를 사용하여 5단계를 표현할 수 있습니다.\n0~z까지 입력이 가능하며 한 분류당 최대 1296가지를 표현할 수 있습니다.\n그러므로 총 3656158440062976가지의 분류를 사용할 수 있습니다."); ?>
                 <input type="text" name="ca_id" value="<?php echo $subid; ?>" id="ca_id" required class="required frm_input" size="<?php echo $sublen; ?>" maxlength="<?php echo $sublen; ?>">
-                <!-- <?php if ($default['de_code_dup_use']) { ?><a href="javascript:;" onclick="codedupcheck(document.getElementById('ca_id').value)">코드 중복검사</a><?php } ?> -->
             <?php } else { ?>
                 <input type="hidden" name="ca_id" value="<?php echo $ca['ca_id']; ?>">
                 <span class="frm_ca_id"><?php echo $ca['ca_id']; ?></span>

adm/shop_admin/codedupcheck.php

@@ -1,24 +0,0 @@
-<?php
-include_once('./_common.php');
-
-$it_id = isset($it_id) ? clean_xss_tags(trim($it_id)) : '';
-$ca_id = isset($ca_id) ? clean_xss_tags(trim($ca_id)) : '';
-
-$code = '';
-$name = '';
-
-if ($it_id)
-{
-    $row = get_shop_item($it_id, true);
-    $code = $it_id;
-    $name = $row['it_name'];
-}
-else if ($ca_id)
-{
-    $sql = " select ca_name from {$g5['g5_shop_category_table']} where ca_id = '$ca_id' ";
-    $row = sql_fetch($sql);
-    $code = $ca_id;
-    $name = $row['ca_name'];
-}
-
-echo '{ "code": "' . $code . '", "name": "' . $name . '" }';

adm/shop_admin/configform.php

@@ -1398,13 +1398,6 @@ if(!$default['de_kakaopay_cancelpwd']){
                 <?php echo get_member_level_select('de_level_sell', 1, 10, $default['de_level_sell']); ?>
             </td>
         </tr>
-        <tr>
-            <th scope="row"><label for="de_code_dup_use">코드 중복검사</label></th>
-            <td>
-                 <?php echo help("분류, 상품 등을 추가할 때 자동으로 코드 중복검사를 하려면 체크하십시오."); ?>
-                <input type="checkbox" name="de_code_dup_use" value="1" id="de_code_dup_use"<?php echo $default['de_code_dup_use']?' checked':''; ?>> 사용
-            </td>
-        </tr>
         <tr>
             <th scope="row"><label for="de_cart_keep_term">장바구니 보관기간</label></th>
             <td>

adm/shop_admin/itemform.php

@@ -210,7 +210,6 @@ if(!sql_query(" select it_skin from {$g5['g5_shop_item_table']} limit 1", false)
 
 <form name="fitemform" action="./itemformupdate.php" method="post" enctype="MULTIPART/FORM-DATA" autocomplete="off" onsubmit="return fitemformcheck(this)">
 
-<input type="hidden" name="codedup" value="<?php echo $default['de_code_dup_use']; ?>">
 <input type="hidden" name="w" value="<?php echo $w; ?>">
 <input type="hidden" name="sca" value="<?php echo $sca; ?>">
 <input type="hidden" name="sst" value="<?php echo $sst; ?>">
@@ -333,11 +332,8 @@ if(!sql_query(" select it_skin from {$g5['g5_shop_item_table']} limit 1", false)
             <th scope="row">상품코드</th>
             <td colspan="2">
                 <?php if ($w == '') { // 추가 ?>
-                    <!-- 최근에 입력한 코드(자동 생성시)가 목록의 상단에 출력되게 하려면 아래의 코드로 대체하십시오. -->
-                    <!-- <input type=text class=required name=it_id value="<?php echo 10000000000-time()?>" size=12 maxlength=10 required> <a href='javascript:;' onclick="codedupcheck(document.all.it_id.value)"><img src='./img/btn_code.gif' border=0 align=absmiddle></a> -->
                     <?php echo help("상품의 코드는 10자리 숫자로 자동생성합니다. <b>직접 상품코드를 입력할 수도 있습니다.</b>\n상품코드는 영문자, 숫자, - 만 입력 가능합니다."); ?>
                     <input type="text" name="it_id" value="<?php echo time(); ?>" id="it_id" required class="frm_input required" size="20" maxlength="20">
-                    <!-- <?php if ($default['de_code_dup_use']) { ?><button type="button" class="btn_frmline" onclick="codedupcheck(document.all.it_id.value)">중복검사</a><?php } ?> -->
                 <?php } else { ?>
                     <input type="hidden" name="it_id" value="<?php echo $it['it_id']; ?>">
                     <span class="frm_ca_id"><?php echo $it['it_id']; ?></span>
@@ -1782,35 +1778,6 @@ $(function() {
 });
 <?php } ?>
 
-function codedupcheck(id)
-{
-    if (!id) {
-        alert('상품코드를 입력하십시오.');
-        f.it_id.focus();
-        return;
-    }
-
-    var it_id = id.replace(/[A-Za-z0-9\-_]/g, "");
-    if(it_id.length > 0) {
-        alert("상품코드는 영문자, 숫자, -, _ 만 사용할 수 있습니다.");
-        return false;
-    }
-
-    $.post(
-        "./codedupcheck.php",
-        { it_id: id },
-        function(data) {
-            if(data.name) {
-                alert("코드 '"+data.code+"' 는 '".data.name+"' (으)로 이미 등록되어 있으므로\n\n사용하실 수 없습니다.");
-                return false;
-            } else {
-                alert("'"+data.code+"' 은(는) 등록된 코드가 없으므로 사용하실 수 있습니다.");
-                document.fitemform.codedup.value = '';
-            }
-        }, "json"
-    );
-}
-
 function fitemformcheck(f)
 {
     if (!f.ca_id.value) {

adm/shop_admin/orderdeliveryexcel.php

@@ -21,7 +21,6 @@ if(! function_exists('column_char')) {
     }
 }
 
-if (phpversion() >= '5.2.0') {
     include_once(G5_LIB_PATH.'/PHPExcel.php');
     
     $headers = array('주문번호', '주문자명', '주문자전화1', '주문자전화2', '배송자명', '배송지전화1', '배송지전화2', '배송지주소', '배송회사', '운송장번호');
@@ -47,7 +46,7 @@ if (phpversion() >= '5.2.0') {
     $data = array_merge(array($headers), $rows);
 
     $excel = new PHPExcel();
-    $excel->setActiveSheetIndex(0)->getStyle( "A1:${last_char}1" )->getFill()->setFillType(PHPExcel_Style_Fill::FILL_SOLID)->getStartColor()->setARGB($header_bgcolor);
+    $excel->setActiveSheetIndex(0)->getStyle( "A1:{$last_char}1" )->getFill()->setFillType(PHPExcel_Style_Fill::FILL_SOLID)->getStartColor()->setARGB($header_bgcolor);
     $excel->setActiveSheetIndex(0)->getStyle( "A:$last_char" )->getAlignment()->setVertical(PHPExcel_Style_Alignment::VERTICAL_CENTER)->setWrapText(true);
     foreach($widths as $i => $w) $excel->setActiveSheetIndex(0)->getColumnDimension( column_char($i) )->setWidth($w);
     $excel->getActiveSheet()->fromArray($data,NULL,'A1');
@@ -58,47 +57,3 @@ if (phpversion() >= '5.2.0') {
 
     $writer = PHPExcel_IOFactory::createWriter($excel, 'Excel5');
     $writer->save('php://output');
-} else {
-    /*================================================================================
-    php_writeexcel http://www.bettina-attack.de/jonny/view.php/projects/php_writeexcel/
-    =================================================================================*/
-
-    include_once(G5_LIB_PATH.'/Excel/php_writeexcel/class.writeexcel_workbook.inc.php');
-    include_once(G5_LIB_PATH.'/Excel/php_writeexcel/class.writeexcel_worksheet.inc.php');
-
-    $fname = tempnam(G5_DATA_PATH, "tmp-deliverylist.xls");
-    $workbook = new writeexcel_workbook($fname);
-    $worksheet = $workbook->addworksheet();
-
-    // Put Excel data
-    $data = array('주문번호', '주문자명', '주문자전화1', '주문자전화2', '배송자명', '배송지전화1', '배송지전화2', '배송지주소', '배송회사', '운송장번호');
-    $data = array_map('iconv_euckr', $data);
-
-    $col = 0;
-    foreach($data as $cell) {
-        $worksheet->write(0, $col++, $cell);
-    }
-
-    for($i=1; $row=sql_fetch_array($result); $i++) {
-        $row = array_map('iconv_euckr', $row);
-
-        $worksheet->write($i, 0, ' '.$row['od_id']);
-        $worksheet->write($i, 1, $row['od_name']);
-        $worksheet->write($i, 2, ' '.$row['od_tel']);
-        $worksheet->write($i, 3, ' '.$row['od_hp']);
-        $worksheet->write($i, 4, $row['od_b_name']);
-        $worksheet->write($i, 5, ' '.$row['od_b_tel']);
-        $worksheet->write($i, 6, ' '.$row['od_b_hp']);
-        $worksheet->write($i, 7, print_address($row['od_b_addr1'], $row['od_b_addr2'], $row['od_b_addr3'], $row['od_b_addr_jibeon']));
-        $worksheet->write($i, 8, $row['od_delivery_company']);
-        $worksheet->write($i, 9, $row['od_invoice']);
-    }
-
-    $workbook->close();
-
-    header("Content-Type: application/x-msexcel; name=\"deliverylist-".date("ymd", time()).".xls\"");
-    header("Content-Disposition: inline; filename=\"deliverylist-".date("ymd", time()).".xls\"");
-    $fh=fopen($fname, "rb");
-    fpassthru($fh);
-    unlink($fname);
-}

adm/shop_admin/orderprintresult.php

@@ -168,7 +168,6 @@ if ($csv == 'xls')
     if (!$cnt)
         alert("출력할 내역이 없습니다.");
 
-    if (phpversion() >= '5.2.0') {
         include_once(G5_LIB_PATH.'/PHPExcel.php');
 
         $headers = array('우편번호', '주소', '이름', '전화1', '전화2', '상품명', '수량', '선택사항', '배송비', '상품코드', '주문번호', '운송장번호', '전하실말씀');
@@ -235,7 +234,7 @@ if ($csv == 'xls')
         $data = array_merge(array($headers), $rows);
 
         $excel = new PHPExcel();
-        $excel->setActiveSheetIndex(0)->getStyle( "A1:${last_char}1" )->getFill()->setFillType(PHPExcel_Style_Fill::FILL_SOLID)->getStartColor()->setARGB($header_bgcolor);
+        $excel->setActiveSheetIndex(0)->getStyle( "A1:{$last_char}1" )->getFill()->setFillType(PHPExcel_Style_Fill::FILL_SOLID)->getStartColor()->setARGB($header_bgcolor);
         $excel->setActiveSheetIndex(0)->getStyle( "A:$last_char" )->getAlignment()->setVertical(PHPExcel_Style_Alignment::VERTICAL_CENTER)->setWrapText(true);
         foreach($widths as $i => $w) $excel->setActiveSheetIndex(0)->getColumnDimension( column_char($i) )->setWidth($w);
         $excel->getActiveSheet()->fromArray($data,NULL,'A1');
@@ -246,95 +245,6 @@ if ($csv == 'xls')
 
         $writer = PHPExcel_IOFactory::createWriter($excel, 'Excel5');
         $writer->save('php://output');
-
-    } else {
-        /*================================================================================
-        php_writeexcel http://www.bettina-attack.de/jonny/view.php/projects/php_writeexcel/
-        =================================================================================*/
-
-        include_once(G5_LIB_PATH.'/Excel/php_writeexcel/class.writeexcel_workbook.inc.php');
-        include_once(G5_LIB_PATH.'/Excel/php_writeexcel/class.writeexcel_worksheet.inc.php');
-
-        $fname = tempnam(G5_DATA_PATH, "tmp-orderlist.xls");
-        $workbook = new writeexcel_workbook($fname);
-        $worksheet = $workbook->addworksheet();
-
-        // Put Excel data
-        $data = array('우편번호', '주소', '이름', '전화1', '전화2', '상품명', '수량', '선택사항', '배송비', '상품코드', '주문번호', '운송장번호', '전하실말씀');
-        $data = array_map('iconv_euckr', $data);
-
-        $col = 0;
-        foreach($data as $cell) {
-            $worksheet->write(0, $col++, $cell);
-        }
-
-        $save_it_id = '';
-        for($i=1; $row=sql_fetch_array($result); $i++)
-        {
-            if($save_it_id != $row['it_id']) {
-                // 합계금액 계산
-                $sql = " select SUM(IF(io_type = 1, (io_price * ct_qty), ((ct_price + io_price) * ct_qty))) as price,
-                                SUM(ct_qty) as qty
-                            from {$g5['g5_shop_cart_table']}
-                            where it_id = '{$row['it_id']}'
-                              and od_id = '{$row['od_id']}' ";
-                $sum = sql_fetch($sql);
-
-                switch($row['ct_send_cost'])
-                {
-                    case 1:
-                        $ct_send_cost = '착불';
-                        break;
-                    case 2:
-                        $ct_send_cost = '무료';
-                        break;
-                    default:
-                        $ct_send_cost = '선불';
-                        break;
-                }
-
-                // 조건부무료
-                if($row['it_sc_type'] == 2) {
-                    $sendcost = get_item_sendcost($row['it_id'], $sum['price'], $sum['qty'], $row['od_id']);
-
-                    if($sendcost == 0)
-                        $ct_send_cost = '무료';
-                }
-
-                $save_it_id = $row['it_id'];
-
-                $ct_send_cost = iconv_euckr($ct_send_cost);
-            }
-
-            $pull_address = iconv('UTF-8', 'UHC', print_address($row['od_b_addr1'], $row['od_b_addr2'], $row['od_b_addr3'], $row['od_b_addr_jibeon']));
-
-            $row = array_map('iconv_euckr', $row);
-
-            $worksheet->write($i, 0, ' '.$row['od_b_zip1'].$row['od_b_zip2']);
-            $worksheet->write($i, 1, $pull_address);
-            $worksheet->write($i, 2, $row['od_b_name']);
-            $worksheet->write($i, 3, ' '.$row['od_b_tel']);
-            $worksheet->write($i, 4, ' '.$row['od_b_hp']);
-            $worksheet->write($i, 5, $row['it_name']);
-            $worksheet->write($i, 6, $row['ct_qty']);
-            $worksheet->write($i, 7, $row['ct_option']);
-            $worksheet->write($i, 8, $ct_send_cost);
-            $worksheet->write($i, 9, ' '.$row['it_id']);
-            $worksheet->write($i, 10, ' '.$row['od_id']);
-            $worksheet->write($i, 11, $row['od_invoice']);
-            $worksheet->write($i, 12, $row['od_memo']);
-        }
-
-        $workbook->close();
-
-        header("Content-Type: application/x-msexcel; name=\"orderlist-".date("ymd", time()).".xls\"");
-        header("Content-Disposition: inline; filename=\"orderlist-".date("ymd", time()).".xls\"");
-        $fh=fopen($fname, "rb");
-        fpassthru($fh);
-        unlink($fname);
-
-        exit;
-    }   //end if php 5.2.0
 }
 
 

adm/shop_admin/price.php

@@ -62,7 +62,7 @@ $pg_anchor = '<ul class="anchor">
             <dt><a href="http://shopping.daum.net/" target="_blank">다음 쇼핑하우</a></dt>
             <dd>
                 <ul>
-                    <li>입점 안내 : <a href="http://commerceone.biz.daum.net/join/intro.daum" target="_blank">http://commerceone.biz.daum.net/join/intro.daum</a></li>
+                    <li>입점 안내 : <a href="https://shopping.biz.daum.net/join/main" target="_blank">https://shopping.biz.daum.net/join/main</a></li>
                     <li>전체상품 URL : <a href="<?php echo G5_SHOP_URL; ?>/price/daum.php" target="_blank"><?php echo G5_SHOP_URL; ?>/price/daum.php</a></li>
                     <li>요약상품 URL : <a href="<?php echo G5_SHOP_URL; ?>/price/daum_summary.php" target="_blank"><?php echo G5_SHOP_URL; ?>/price/daum_summary.php</a></li>
                 </ul>

adm/sms_admin/num_book_file_download.php

@@ -51,7 +51,7 @@ for($i=1; $res=sql_fetch_array($qry); $i++)
 
 $data = array_merge(array($headers), $rows);
 
-$excel->setActiveSheetIndex(0)->getStyle( "A1:${last_char}1" )->getFill()->setFillType(PHPExcel_Style_Fill::FILL_SOLID)->getStartColor()->setARGB($header_bgcolor);
+$excel->setActiveSheetIndex(0)->getStyle( "A1:{$last_char}1" )->getFill()->setFillType(PHPExcel_Style_Fill::FILL_SOLID)->getStartColor()->setARGB($header_bgcolor);
 $excel->setActiveSheetIndex(0)->getStyle( "A:$last_char" )->getAlignment()->setVertical(PHPExcel_Style_Alignment::VERTICAL_CENTER)->setWrapText(true);
 foreach($widths as $i => $w) $excel->setActiveSheetIndex(0)->getColumnDimension( column_char($i) )->setWidth($w);
 $excel->getActiveSheet()->fromArray($data,NULL,'A1');

bbs/member_confirm.php

@@ -4,15 +4,14 @@ include_once('./_common.php');
 if ($is_guest)
     alert('로그인 한 회원만 접근하실 수 있습니다.', G5_BBS_URL.'/login.php');
 
-/*
-if ($url)
-    $urlencode = urlencode($url);
-else
-    $urlencode = urlencode($_SERVER[REQUEST_URI]);
-*/
-
 $url = isset($_GET['url']) ? clean_xss_tags($_GET['url']) : '';
 
+while (1) {
+    $tmp = preg_replace('/&#[^;]+;/', '', $url);
+    if ($tmp == $url) break;
+    $url = $tmp;
+}
+
 //소셜 로그인 한 경우
 if( function_exists('social_member_comfirm_redirect') && (! $url || $url === 'register_form.php' || (function_exists('social_is_edit_page') && social_is_edit_page($url) ) ) ){    
     social_member_comfirm_redirect();

bbs/memo.php

@@ -16,8 +16,7 @@ if ($kind == 'recv')
 else if ($kind == 'send')
     $unkind = 'recv';
 else {
-    $kind = clean_xss_tags(trim($kind));
+    alert("kind 변수 값이 올바르지 않습니다.");
-    alert(''.$kind .'값을 넘겨주세요.');
 }
 
 if ($page < 1) { $page = 1; } // 페이지가 없으면 첫 페이지 (1 페이지)

bbs/password_reset_update.php

@@ -1,27 +1,31 @@
 <?php
 include_once('./_common.php');
 
-if($w == '')
+$mb_id = isset($_SESSION['ss_cert_mb_id']) ? trim(get_session('ss_cert_mb_id')) : '';
-    $mb_id = isset($_POST['mb_id']) ? trim($_POST['mb_id']) : '';
+$mb_dupinfo = isset($_SESSION['ss_cert_dupinfo']) ? trim(get_session('ss_cert_dupinfo')) : '';
-else
-    alert('잘못된 접근입니다', G5_URL);
 
-if(!$mb_id)
+if(!$mb_id) alert('회원아이디 값이 없습니다. 올바른 방법으로 이용해 주십시오.', G5_URL);
-    alert('회원아이디 값이 없습니다. 올바른 방법으로 이용해 주십시오.');
+
+if(!$mb_dupinfo) alert('잘못된 접근입니다.', G5_URL);
+
+$mb_check = sql_fetch("select * from {$g5['member_table']} where mb_id = '{$mb_id}' AND mb_dupinfo = '{$mb_dupinfo}'");
+
+if(!$mb_check) alert('잘못된 접근입니다.', G5_URL);
 
 $mb_password    = isset($_POST['mb_password']) ? trim($_POST['mb_password_re']) : '';
 $mb_password_re = isset($_POST['mb_password_re']) ? trim($_POST['mb_password_re']) : '';
 
 
-if ($w == '' && !$mb_password)
+if (!$mb_password)
-alert('비밀번호가 넘어오지 않았습니다.');
+    alert('비밀번호가 넘어오지 않았습니다.');
-if($w == '' && $mb_password != $mb_password_re)
+if ($mb_password != $mb_password_re)
-alert('비밀번호가 일치하지 않습니다.');
+    alert('비밀번호가 일치하지 않습니다.');
 
-$sql_password = "";
+$sql_password = "mb_password = '".get_encrypt_string($mb_password)."' ";
-if ($mb_password)
-    $sql_password = "mb_password = '".get_encrypt_string($mb_password)."' ";
 
-sql_query("update {$g5['member_table']} set {$sql_password} where mb_id = '{$mb_id}'");
+sql_query("update {$g5['member_table']} set {$sql_password} where mb_id = '{$mb_id}' AND mb_dupinfo = '{$mb_dupinfo}'");
+
+set_session('ss_cert_mb_id', '');
+set_session('ss_cert_dupinfo', '');
 
 goto_url(G5_BBS_URL.'/login.php');

bbs/qawrite_update.php

@@ -223,7 +223,7 @@ for ($i=1; $i<=$upload_count; $i++) {
         $shuffle = implode('', $chars_array);
 
         // 첨부파일 첨부시 첨부파일명에 공백이 포함되어 있으면 일부 PC에서 보이지 않거나 다운로드 되지 않는 현상이 있습니다. (길상여의 님 090925)
-        $upload[$i]['file'] = abs(ip2long($_SERVER['REMOTE_ADDR'])).'_'.substr($shuffle,0,8).'_'.replace_filename($filename);
+        $upload[$i]['file'] = md5(sha1($_SERVER['REMOTE_ADDR'])).'_'.substr($shuffle,0,8).'_'.replace_filename($filename);
 
         $dest_file = G5_DATA_PATH.'/qa/'.$upload[$i]['file'];
 

bbs/write_update.php

@@ -221,6 +221,9 @@ if (!isset($_POST['wr_subject']) || !trim($_POST['wr_subject']))
 
 $wr_seo_title = exist_seo_title_recursive('bbs', generate_seo_title($wr_subject), $write_table, $wr_id);
 
+$options = array($html,$secret,$mail);
+$wr_option = implode(',', array_filter($options, function($v) { return trim($v); }));
+
 if ($w == '' || $w == 'r') {
 
     if ($member['mb_id']) {
@@ -258,7 +261,7 @@ if ($w == '' || $w == 'r') {
                      wr_reply = '$wr_reply',
                      wr_comment = 0,
                      ca_name = '$ca_name',
-                     wr_option = '$html,$secret,$mail',
+                     wr_option = '$wr_option',
                      wr_subject = '$wr_subject',
                      wr_content = '$wr_content',
                      wr_seo_title = '$wr_seo_title',
@@ -380,7 +383,7 @@ if ($w == '' || $w == 'r') {
 
     $sql = " update {$write_table}
                 set ca_name = '{$ca_name}',
-                     wr_option = '{$html},{$secret},{$mail}',
+                     wr_option = '{$wr_option}',
                      wr_subject = '{$wr_subject}',
                      wr_content = '{$wr_content}',
                      wr_seo_title = '$wr_seo_title',
@@ -567,7 +570,7 @@ if(isset($_FILES['bf_file']['name']) && is_array($_FILES['bf_file']['name'])) {
             $shuffle = implode('', $chars_array);
 
             // 첨부파일 첨부시 첨부파일명에 공백이 포함되어 있으면 일부 PC에서 보이지 않거나 다운로드 되지 않는 현상이 있습니다. (길상여의 님 090925)
-            $upload[$i]['file'] = abs(ip2long($_SERVER['REMOTE_ADDR'])).'_'.substr($shuffle,0,8).'_'.replace_filename($filename);
+            $upload[$i]['file'] = md5(sha1($_SERVER['REMOTE_ADDR'])).'_'.substr($shuffle,0,8).'_'.replace_filename($filename);
 
             $dest_file = G5_DATA_PATH.'/file/'.$bo_table.'/'.$upload[$i]['file'];
 

config.php

@@ -229,7 +229,8 @@ define('G5_VISIT_BROWSCAP_USE', false);
 */
 define('G5_IP_DISPLAY', '\\1.♡.\\3.\\4');
 
-if(isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']=='on') {   //https 통신일때 daum 주소 js
+if ((isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']=='on') || 
+    (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO']==='https')) {   //https 통신일때 daum 주소 js
     define('G5_POSTCODE_JS', '<script src="https://spi.maps.daum.net/imap/map_js_init/postcode.v2.js"></script>');
 } else {  //http 통신일때 daum 주소 js
     define('G5_POSTCODE_JS', '<script src="http://dmaps.daum.net/map_js_init/postcode.v2.js"></script>');

css/default.css

@@ -272,7 +272,7 @@ a.btn_close {text-align:center;line-height:50px}
 a.btn_cancel {display:inline-block;background:#969696;color:#fff;text-decoration:none;vertical-align:middle}
 button.btn_cancel {display:inline-block;background:#969696;color:#fff;text-decoration:none;vertical-align:middle}
 .btn_cancel:hover {background:#aaa}
-a.btn_frmline, button.btn_frmline {display:inline-block;padding:0 25px;height:40px;border:0;background:#434a54;border-radius:3px;color:#fff;text-decoration:none;vertical-align:top} /* 우편번호검색버튼 등 */
+a.btn_frmline, button.btn_frmline {display:inline-block;width:128px;padding:0 5px;height:40px;border:0;background:#434a54;border-radius:3px;color:#fff;text-decoration:none;vertical-align:top} /* 우편번호검색버튼 등 */
 a.btn_frmline {}
 button.btn_frmline {font-size:1em}
 

css/default_shop.css

@@ -329,7 +329,7 @@ a.btn_close {text-align:center;line-height:50px}
 a.btn_cancel {display:inline-block;background:#969696;color:#fff;text-decoration:none;vertical-align:middle}
 button.btn_cancel {display:inline-block;background:#969696;color:#fff;text-decoration:none;vertical-align:middle}
 .btn_cancel:hover {background:#aaa}
-a.btn_frmline, button.btn_frmline {display:inline-block;padding:0 25px;height:40px;border:0;background:#434a54;border-radius:3px;color:#fff;text-decoration:none;vertical-align:top} /* 우편번호검색버튼 등 */
+a.btn_frmline, button.btn_frmline {display:inline-block;width:128px;padding:0 5px;height:40px;border:0;background:#434a54;border-radius:3px;color:#fff;text-decoration:none;vertical-align:top} /* 우편번호검색버튼 등 */
 a.btn_frmline {}
 button.btn_frmline {font-size:1em}
 a.btn_frmline {line-height:24px}
@@ -752,7 +752,7 @@ box-shadow: 1px 2px 2px #eee;}
 #sod_frm_taker .tbl_frm01 .choice_place input[type="radio"] + label span {top:7px}
 #sod_frm_taker .tbl_frm01 .choice_place input,
 #sod_frm_taker .tbl_frm01 .choice_place label {margin-left:10px}
-#sod_frm_taker .tbl_frm01 .btn_frmline {width:80px;height:30px;line-height:28px;background:#fff;border:1px solid #d4d6db;color:#606060;text-align:center;float:right}
+#sod_frm_taker .tbl_frm01 .btn_frmline {padding:0;width:80px;height:30px;line-height:28px;background:#fff;border:1px solid #d4d6db;color:#606060;text-align:center;float:right}
 
 #sod_frm_taker .tbl_frm01 td input {width:100%}
 #sod_frm_taker .tbl_frm01 td .addr input {width:20%}

head.sub.php

@@ -43,7 +43,7 @@ header("Pragma: no-cache"); // HTTP/1.0
 <meta charset="utf-8">
 <?php
 if (G5_IS_MOBILE) {
-    echo '<meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=0,maximum-scale=10">'.PHP_EOL;
+    echo '<meta name="viewport" id="meta_viewport" content="width=device-width,initial-scale=1.0,minimum-scale=0,maximum-scale=10">'.PHP_EOL;
     echo '<meta name="HandheldFriendly" content="true">'.PHP_EOL;
     echo '<meta name="format-detection" content="telephone=no">'.PHP_EOL;
 } else {

js/common.js

@@ -373,6 +373,10 @@ var win_zip = function(frm_name, frm_zip, frm_addr1, frm_addr2, frm_addr3, frm_j
         return false;
     }
 
+    // 핀치 줌 현상 제거
+    var vContent = "width=device-width,initial-scale=1.0,minimum-scale=0,maximum-scale=10";
+    $("#meta_viewport").attr("content", vContent + ",user-scalable=no");
+
     var zip_case = 1;   //0이면 레이어, 1이면 페이지에 끼워 넣기, 2이면 새창
 
     var complete_fn = function(data){
@@ -418,6 +422,7 @@ var win_zip = function(frm_name, frm_zip, frm_addr1, frm_addr2, frm_addr3, frm_j
         }
         
         setTimeout(function(){
+            $("#meta_viewport").attr("content", vContent);
             of[frm_addr2].focus();
         } , 100);
     };
@@ -435,6 +440,7 @@ var win_zip = function(frm_name, frm_zip, frm_addr1, frm_addr2, frm_addr3, frm_j
                 jQuery('form[name="'+frm_name+'"]').find('input[name="'+frm_addr1+'"]').before(element_wrap);
                 jQuery("#"+daum_pape_id).off("click", ".close_daum_juso").on("click", ".close_daum_juso", function(e){
                     e.preventDefault();
+                    $("#meta_viewport").attr("content", vContent);
                     jQuery(this).parent().hide();
                 });
             }
@@ -478,6 +484,7 @@ var win_zip = function(frm_name, frm_zip, frm_addr1, frm_addr2, frm_addr3, frm_j
                 document.body.appendChild(element_layer);
                 jQuery("#"+rayer_id).off("click", ".close_daum_juso").on("click", ".close_daum_juso", function(e){
                     e.preventDefault();
+                    $("#meta_viewport").attr("content", vContent);
                     jQuery(this).parent().hide();
                 });
             }

js/shop.js

@@ -480,7 +480,7 @@ function price_calculate()
         }
     });
 
-    $("#sit_tot_price").empty().html("<span>총 금액 :</span> "+number_format(String(total))+"원");
+    $("#sit_tot_price").empty().html("<span>총 금액 :</span><strong>"+number_format(String(total))+"</strong> 원");
 
     $("#sit_tot_price").trigger("price_calculate", [total]);
 }

js/shop.override.js

@@ -159,7 +159,7 @@ jQuery(function($){
                         }
                     });
 
-                    $("#sit_tot_price").empty().html("<span>총 금액 </span><strong>"+number_format(String(total))+"</strong> 원");
+                    $("#sit_tot_price").empty().html("<span>총 금액 :</span><strong>"+number_format(String(total))+"</strong> 원");
                     
                     $("#sit_tot_price").trigger("price_calculate", [total]);
                 } else {

lib/Excel/php_writeexcel/class.writeexcel_formula.inc.php

@@ -663,10 +663,10 @@ function _convertRange2d($range)
 
     // Split the range into 2 cell refs
     if (preg_match('/^\$?([A-Ia-i]?[A-Za-z])\$?(\d+)\:\$?([A-Ia-i]?[A-Za-z])\$?(\d+)$/',$range)) {
-        list($cell1, $cell2) = split(':', $range);
+        list($cell1, $cell2) = explode(':', $range);
     }
  elseif (preg_match('/^\$?([A-Ia-i]?[A-Za-z])\$?(\d+)\.\.\$?([A-Ia-i]?[A-Za-z])\$?(\d+)$/',$range)) {
-        list($cell1, $cell2) = split('\.\.', $range);
+        list($cell1, $cell2) = preg_split('/\.\./', $range);
     }
  else {
         // TODO: use real error codes
@@ -714,7 +714,7 @@ function _convertRange3d($token)
     $class = 2; // as far as I know, this is magick.
 
     // Split the ref at the ! symbol
-    list($ext_ref, $range) = split('!', $token);
+    list($ext_ref, $range) = explode('!', $token);
 
     // Convert the external reference part
     $ext_ref = $this->_packExtRef($ext_ref);
@@ -723,7 +723,7 @@ function _convertRange3d($token)
     }
 
     // Split the range into 2 cell refs
-    list($cell1, $cell2) = split(':', $range);
+    list($cell1, $cell2) = explode(':', $range);
 
     // Convert the cell references
     if (preg_match('/^(\$)?[A-Ia-i]?[A-Za-z](\$)?(\d+)$/', $cell1))
@@ -812,7 +812,7 @@ function _convertRef3d($cell)
     $class = 2; // as far as I know, this is magick.
 
     // Split the ref at the ! symbol
-    list($ext_ref, $cell) = split('!', $cell);
+    list($ext_ref, $cell) = explode('!', $cell);
 
     // Convert the external reference part
     $ext_ref = $this->_packExtRef($ext_ref);
@@ -853,7 +853,7 @@ function _packExtRef($ext_ref) {
     // Check if there is a sheet range eg., Sheet1:Sheet2.
     if (preg_match("/:/", $ext_ref))
  {
-        list($sheet_name1, $sheet_name2) = split(':', $ext_ref);
+        list($sheet_name1, $sheet_name2) = explode(':', $ext_ref);
 
         $sheet1 = $this->_getSheetIndex($sheet_name1);
         if ($sheet1 == -1) {

lib/PHPExcel/Calculation/FormulaParser.php

@@ -181,8 +181,8 @@ class PHPExcel_Calculation_FormulaParser
             // embeds are doubled
             // end marks token
             if ($inString) {
-                if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::QUOTE_DOUBLE) {
+                if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::QUOTE_DOUBLE) {
-                    if ((($index + 2) <= $formulaLength) && ($this->formula{$index + 1} == PHPExcel_Calculation_FormulaParser::QUOTE_DOUBLE)) {
+                    if ((($index + 2) <= $formulaLength) && ($this->formula[$index + 1] == PHPExcel_Calculation_FormulaParser::QUOTE_DOUBLE)) {
                         $value .= PHPExcel_Calculation_FormulaParser::QUOTE_DOUBLE;
                         ++$index;
                     } else {
@@ -191,7 +191,7 @@ class PHPExcel_Calculation_FormulaParser
                         $value = "";
                     }
                 } else {
-                    $value .= $this->formula{$index};
+                    $value .= $this->formula[$index];
                 }
                 ++$index;
                 continue;
@@ -201,15 +201,15 @@ class PHPExcel_Calculation_FormulaParser
             // embeds are double
             // end does not mark a token
             if ($inPath) {
-                if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::QUOTE_SINGLE) {
+                if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::QUOTE_SINGLE) {
-                    if ((($index + 2) <= $formulaLength) && ($this->formula{$index + 1} == PHPExcel_Calculation_FormulaParser::QUOTE_SINGLE)) {
+                    if ((($index + 2) <= $formulaLength) && ($this->formula[$index + 1] == PHPExcel_Calculation_FormulaParser::QUOTE_SINGLE)) {
                         $value .= PHPExcel_Calculation_FormulaParser::QUOTE_SINGLE;
                         ++$index;
                     } else {
                         $inPath = false;
                     }
                 } else {
-                    $value .= $this->formula{$index};
+                    $value .= $this->formula[$index];
                 }
                 ++$index;
                 continue;
@@ -219,10 +219,10 @@ class PHPExcel_Calculation_FormulaParser
             // no embeds (changed to "()" by Excel)
             // end does not mark a token
             if ($inRange) {
-                if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::BRACKET_CLOSE) {
+                if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::BRACKET_CLOSE) {
                     $inRange = false;
                 }
-                $value .= $this->formula{$index};
+                $value .= $this->formula[$index];
                 ++$index;
                 continue;
             }
@@ -230,7 +230,7 @@ class PHPExcel_Calculation_FormulaParser
             // error values
             // end marks a token, determined from absolute list of values
             if ($inError) {
-                $value .= $this->formula{$index};
+                $value .= $this->formula[$index];
                 ++$index;
                 if (in_array($value, $ERRORS)) {
                     $inError = false;
@@ -241,10 +241,10 @@ class PHPExcel_Calculation_FormulaParser
             }
 
             // scientific notation check
-            if (strpos(PHPExcel_Calculation_FormulaParser::OPERATORS_SN, $this->formula{$index}) !== false) {
+            if (strpos(PHPExcel_Calculation_FormulaParser::OPERATORS_SN, $this->formula[$index]) !== false) {
                 if (strlen($value) > 1) {
-                    if (preg_match("/^[1-9]{1}(\.[0-9]+)?E{1}$/", $this->formula{$index}) != 0) {
+                    if (preg_match("/^[1-9]{1}(\.[0-9]+)?E{1}$/", $this->formula[$index]) != 0) {
-                        $value .= $this->formula{$index};
+                        $value .= $this->formula[$index];
                         ++$index;
                         continue;
                     }
@@ -254,7 +254,7 @@ class PHPExcel_Calculation_FormulaParser
             // independent character evaluation (order not important)
 
             // establish state-dependent character evaluations
-            if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::QUOTE_DOUBLE) {
+            if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::QUOTE_DOUBLE) {
                 if (strlen($value > 0)) {
                     // unexpected
                     $tokens1[] = new PHPExcel_Calculation_FormulaToken($value, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_UNKNOWN);
@@ -265,7 +265,7 @@ class PHPExcel_Calculation_FormulaParser
                 continue;
             }
 
-            if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::QUOTE_SINGLE) {
+            if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::QUOTE_SINGLE) {
                 if (strlen($value) > 0) {
                     // unexpected
                     $tokens1[] = new PHPExcel_Calculation_FormulaToken($value, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_UNKNOWN);
@@ -276,14 +276,14 @@ class PHPExcel_Calculation_FormulaParser
                 continue;
             }
 
-            if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::BRACKET_OPEN) {
+            if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::BRACKET_OPEN) {
                 $inRange = true;
                 $value .= PHPExcel_Calculation_FormulaParser::BRACKET_OPEN;
                 ++$index;
                 continue;
             }
 
-            if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::ERROR_START) {
+            if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::ERROR_START) {
                 if (strlen($value) > 0) {
                     // unexpected
                     $tokens1[] = new PHPExcel_Calculation_FormulaToken($value, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_UNKNOWN);
@@ -296,7 +296,7 @@ class PHPExcel_Calculation_FormulaParser
             }
 
             // mark start and end of arrays and array rows
-            if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::BRACE_OPEN) {
+            if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::BRACE_OPEN) {
                 if (strlen($value) > 0) {
                     // unexpected
                     $tokens1[] = new PHPExcel_Calculation_FormulaToken($value, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_UNKNOWN);
@@ -315,7 +315,7 @@ class PHPExcel_Calculation_FormulaParser
                 continue;
             }
 
-            if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::SEMICOLON) {
+            if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::SEMICOLON) {
                 if (strlen($value) > 0) {
                     $tokens1[] = new PHPExcel_Calculation_FormulaToken($value, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_OPERAND);
                     $value = "";
@@ -337,7 +337,7 @@ class PHPExcel_Calculation_FormulaParser
                 continue;
             }
 
-            if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::BRACE_CLOSE) {
+            if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::BRACE_CLOSE) {
                 if (strlen($value) > 0) {
                     $tokens1[] = new PHPExcel_Calculation_FormulaToken($value, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_OPERAND);
                     $value = "";
@@ -358,14 +358,14 @@ class PHPExcel_Calculation_FormulaParser
             }
 
             // trim white-space
-            if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::WHITESPACE) {
+            if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::WHITESPACE) {
                 if (strlen($value) > 0) {
                     $tokens1[] = new PHPExcel_Calculation_FormulaToken($value, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_OPERAND);
                     $value = "";
                 }
                 $tokens1[] = new PHPExcel_Calculation_FormulaToken("", PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_WHITESPACE);
                 ++$index;
-                while (($this->formula{$index} == PHPExcel_Calculation_FormulaParser::WHITESPACE) && ($index < $formulaLength)) {
+                while (($this->formula[$index] == PHPExcel_Calculation_FormulaParser::WHITESPACE) && ($index < $formulaLength)) {
                     ++$index;
                 }
                 continue;
@@ -385,29 +385,29 @@ class PHPExcel_Calculation_FormulaParser
             }
 
             // standard infix operators
-            if (strpos(PHPExcel_Calculation_FormulaParser::OPERATORS_INFIX, $this->formula{$index}) !== false) {
+            if (strpos(PHPExcel_Calculation_FormulaParser::OPERATORS_INFIX, $this->formula[$index]) !== false) {
                 if (strlen($value) > 0) {
                     $tokens1[] =new PHPExcel_Calculation_FormulaToken($value, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_OPERAND);
                     $value = "";
                 }
-                $tokens1[] = new PHPExcel_Calculation_FormulaToken($this->formula{$index}, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_OPERATORINFIX);
+                $tokens1[] = new PHPExcel_Calculation_FormulaToken($this->formula[$index], PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_OPERATORINFIX);
                 ++$index;
                 continue;
             }
 
             // standard postfix operators (only one)
-            if (strpos(PHPExcel_Calculation_FormulaParser::OPERATORS_POSTFIX, $this->formula{$index}) !== false) {
+            if (strpos(PHPExcel_Calculation_FormulaParser::OPERATORS_POSTFIX, $this->formula[$index]) !== false) {
                 if (strlen($value) > 0) {
                     $tokens1[] = new PHPExcel_Calculation_FormulaToken($value, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_OPERAND);
                     $value = "";
                 }
-                $tokens1[] = new PHPExcel_Calculation_FormulaToken($this->formula{$index}, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_OPERATORPOSTFIX);
+                $tokens1[] = new PHPExcel_Calculation_FormulaToken($this->formula[$index], PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_OPERATORPOSTFIX);
                 ++$index;
                 continue;
             }
 
             // start subexpression or function
-            if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::PAREN_OPEN) {
+            if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::PAREN_OPEN) {
                 if (strlen($value) > 0) {
                     $tmp = new PHPExcel_Calculation_FormulaToken($value, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_FUNCTION, PHPExcel_Calculation_FormulaToken::TOKEN_SUBTYPE_START);
                     $tokens1[] = $tmp;
@@ -423,7 +423,7 @@ class PHPExcel_Calculation_FormulaParser
             }
 
             // function, subexpression, or array parameters, or operand unions
-            if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::COMMA) {
+            if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::COMMA) {
                 if (strlen($value) > 0) {
                     $tokens1[] = new PHPExcel_Calculation_FormulaToken($value, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_OPERAND);
                     $value = "";
@@ -444,7 +444,7 @@ class PHPExcel_Calculation_FormulaParser
             }
 
             // stop subexpression
-            if ($this->formula{$index} == PHPExcel_Calculation_FormulaParser::PAREN_CLOSE) {
+            if ($this->formula[$index] == PHPExcel_Calculation_FormulaParser::PAREN_CLOSE) {
                 if (strlen($value) > 0) {
                     $tokens1[] = new PHPExcel_Calculation_FormulaToken($value, PHPExcel_Calculation_FormulaToken::TOKEN_TYPE_OPERAND);
                     $value = "";
@@ -460,7 +460,7 @@ class PHPExcel_Calculation_FormulaParser
             }
 
             // token accumulation
-            $value .= $this->formula{$index};
+            $value .= $this->formula[$index];
             ++$index;
         }
 

lib/PHPExcel/Calculation/Statistical.php

@@ -346,7 +346,7 @@ class PHPExcel_Calculation_Statistical
         $y = $x;
         if ($y > 0.0 && $y <= LOG_GAMMA_X_MAX_VALUE) {
             if ($y <= EPS) {
-                $res = -log(y);
+                $res = -log($y);
             } elseif ($y <= 1.5) {
                 // ---------------------
                 //    EPS .LT. X .LE. 1.5
@@ -677,7 +677,7 @@ class PHPExcel_Calculation_Statistical
         $q = $p - 0.5;
 
         //    computation for p close to 0.5
-        if (abs($q) <= split1) {
+        if (abs($q) <= $split1) {
             $R = $const1 - $q * $q;
             $z = $q * ((((((($a7 * $R + $a6) * $R + $a5) * $R + $a4) * $R + $a3) * $R + $a2) * $R + $a1) * $R + $a0) /
                       ((((((($b7 * $R + $b6) * $R + $b5) * $R + $b4) * $R + $b3) * $R + $b2) * $R + $b1) * $R + 1);

lib/PHPExcel/Reader/Excel5/Escher.php

@@ -280,16 +280,16 @@ class PHPExcel_Reader_Excel5_Escher
         $foDelay = PHPExcel_Reader_Excel5::getInt4d($recordData, 28);
 
         // offset: 32; size: 1; unused1
-        $unused1 = ord($recordData{32});
+        $unused1 = ord($recordData[32]);
 
         // offset: 33; size: 1; size of nameData in bytes (including null terminator)
-        $cbName = ord($recordData{33});
+        $cbName = ord($recordData[33]);
 
         // offset: 34; size: 1; unused2
-        $unused2 = ord($recordData{34});
+        $unused2 = ord($recordData[34]);
 
         // offset: 35; size: 1; unused3
-        $unused3 = ord($recordData{35});
+        $unused3 = ord($recordData[35]);
 
         // offset: 36; size: $cbName; nameData
         $nameData = substr($recordData, 36, $cbName);
@@ -331,7 +331,7 @@ class PHPExcel_Reader_Excel5_Escher
         }
 
         // offset: var; size: 1; tag
-        $tag = ord($recordData{$pos});
+        $tag = ord($recordData[$pos]);
         $pos += 1;
 
         // offset: var; size: var; the raw image data
@@ -372,7 +372,7 @@ class PHPExcel_Reader_Excel5_Escher
         }
 
         // offset: var; size: 1; tag
-        $tag = ord($recordData{$pos});
+        $tag = ord($recordData[$pos]);
         $pos += 1;
 
         // offset: var; size: var; the raw image data

lib/PHPExcel/Reader/OOCalc.php

@@ -535,7 +535,7 @@ class PHPExcel_Reader_OOCalc extends PHPExcel_Reader_Abstract implements PHPExce
                                             array_push($dataArray, $pData);
                                         }
                                     }
-                                    $allCellDataText = implode($dataArray, "\n");
+                                    $allCellDataText = implode("\n", $dataArray);
 
 //                                    echo 'Value Type is '.$cellDataOfficeAttributes['value-type'].'<br />';
                                     switch ($cellDataOfficeAttributes['value-type']) {

lib/URI/uri.class.php

@@ -17,11 +17,12 @@ class G5_URI {
     }
 
 	public function parseURL() {
-		 /* grab URL query string and script name */
+		/* grab URL query string and script name */
 		$uri = $_SERVER['REQUEST_URI'];
 		$script = $_SERVER['SCRIPT_NAME'];
 		/* get extension */
-		$ext = end( explode(".",$script) );
+		$script_names = explode(".",$script);
+		$ext = end($script_names);
 
 		/* if extension is found in URL, eliminate it */
 		if(strstr($uri,".")) {
@@ -83,14 +84,17 @@ class G5_URI {
 
         return $links;
    }
-
+   /** 
+   * convert normal URL query string to clean URL 
+   */
    public function makeClean($string_url) {
-		/* convert normal URL query string to clean URL */
+	$url = parse_url($string_url);
-		$url=parse_url($string_url);
+        $strUrl = basename($url['path'],".php");
-		$strurl = basename($url['path'],".php");
+        parse_str($url['query'],$queryString);
-		$qstring = parse_str($url['query'],$vars);
+        foreach($queryString as $value){
-		while(list($k,$v) = each($vars)) $strurl .= "/".$v;
+            $strUrl .= "/$value";
-		return $strurl;
+        }
+        return $strUrl;
    }
 
    public function url_clean($string_url, $add_qry='') {
@@ -107,7 +111,7 @@ class G5_URI {
         }
 
         $return_url = '';
-		$qstring = parse_str($url['query'], $vars);
+	    parse_str($url['query'], $vars);
 
         // 예) Array ( [scheme] => http [host] => sir.kr [path] => /bbs/board.php [query] => wr_id=1110870&bo_table=cm_free&cpage=1 [fragment] => c_1110946 )
         //while(list($k,$v) = each($vars)) $page_name .= "/".$v;
@@ -159,8 +163,10 @@ class G5_URI {
             $add_param .= $add_param ? '&'.$add_qry : '?'.$add_qry;
         }
 
-        while(list($k,$v) = each($s)) $return_url .= '/'.$v;
+        foreach($s as $value){
+            $return_url .= "/$value";
+        }
 
-		return $host.$return_url.$add_param.$fragment;
+        return $host.$return_url.$add_param.$fragment;
    }
-}
+}

lib/common.lib.php

@@ -2491,22 +2491,6 @@ function get_skin_javascript($skin_path, $dir='')
     return $str;
 }
 
-// file_put_contents 는 PHP5 전용 함수이므로 PHP4 하위버전에서 사용하기 위함
-// http://www.phpied.com/file_get_contents-for-php4/
-if (!function_exists('file_put_contents')) {
-    function file_put_contents($filename, $data) {
-        $f = @fopen($filename, 'w');
-        if (!$f) {
-            return false;
-        } else {
-            $bytes = fwrite($f, $data);
-            fclose($f);
-            return $bytes;
-        }
-    }
-}
-
-
 // HTML 마지막 처리
 function html_end()
 {
@@ -3092,6 +3076,9 @@ function get_search_string($stx)
 // XSS 관련 태그 제거
 function clean_xss_tags($str, $check_entities=0, $is_remove_tags=0, $cur_str_len=0)
 {
+    // tab('\t'), formfeed('\f'), vertical tab('\v'), newline('\n'), carriage return('\r') 를 제거한다.
+    $str = preg_replace("#[\t\f\v\n\r]#", '', $str);
+
     if( $is_remove_tags ){
         $str = strip_tags($str);
     }
@@ -3353,6 +3340,11 @@ function check_url_host($url, $msg='', $return_url=G5_URL, $is_redirect=false)
     if(!$msg)
         $msg = 'url에 타 도메인을 지정할 수 없습니다.';
 
+    // KVE-2021-1277 Open Redirect 취약점 해결
+    if (preg_match('#\\\0#', $url)) {
+        alert('url 에 올바르지 않은 값이 포함되어 있습니다.');
+    }
+
     $url = urldecode($url);
     $p = @parse_url(trim($url));
     $host = preg_replace('/:[0-9]+$/', '', $_SERVER['HTTP_HOST']);

lib/icode.lms.lib.php

@@ -28,14 +28,14 @@ function get_icode_port_type($id, $pw)
 * 접속, 발송, URL발송, 결과등의 실질적으로 쓰이는 모든 부분이 포함되어 있다.
 */
 class LMS {
-	var $icode_id;
+	public $icode_id;
-	var $icode_pw;
+	public $icode_pw;
-	var $socket_host;
+    public $socket_host;
-	var $socket_port;
+    public $socket_port;
-	var $socket_portcode;
+    public $socket_portcode;
-	var $Data = array();
+    public $Data = array();
-	var $Result = array();
+    public $Result = array();
-    var $icode_key;
+    public $icode_key;
 
 	// SMS 서버 접속
 	function SMS_con($host, $id, $pw, $portcode) {
@@ -327,7 +327,7 @@ function is_vaild_callback($callback){
 function CheckCommonTypeDate($strDate) {
 	$strDate = preg_replace("/[^0-9]/", "", $strDate);
 	if ($strDate){
-		if (!checkdate(substr($strDate,4,2),substr($strDate,6,2),substr($rsvTime,0,4)))
+		if (!checkdate(substr($strDate,4,2),substr($strDate,6,2),substr($strDate,0,4)))
 		return "예약날짜오류";
 		if (substr($strDate,8,2)>23 || substr($strDate,10,2)>59) return false;
 		return "예약날짜오류";

lib/icode.sms.lib.php

@@ -22,13 +22,10 @@ function cut_char($word, $cut) {
 }
 
 function CheckCommonType($dest, $rsvTime) {
-	//$dest=eregi_replace("[^0-9]","",$dest);
 	$dest=preg_replace("/[^0-9]/i","",$dest);
 	if (strlen($dest)<10 || strlen($dest)>11) return "휴대폰 번호가 틀렸습니다";
 	$CID=substr($dest,0,3);
-	//if ( eregi("[^0-9]",$CID) || ($CID!='010' && $CID!='011' && $CID!='016' && $CID!='017' && $CID!='018' && $CID!='019') ) return "휴대폰 앞자리 번호가 잘못되었습니다";
 	if ( preg_match("/[^0-9]/i",$CID) || ($CID!='010' && $CID!='011' && $CID!='016' && $CID!='017' && $CID!='018' && $CID!='019') ) return "휴대폰 앞자리 번호가 잘못되었습니다";
-	//$rsvTime=eregi_replace("[^0-9]","",$rsvTime);
 	$rsvTime=preg_replace("/[^0-9]/i","",$rsvTime);
 	if ($rsvTime) {
 		if (!checkdate(substr($rsvTime,4,2),substr($rsvTime,6,2),substr($rsvTime,0,4))) return "예약날짜가 잘못되었습니다";
@@ -37,16 +34,16 @@ function CheckCommonType($dest, $rsvTime) {
 }
 
 class SMS {
-	var $ID;
+	public $ID;
-	var $PWD;
+    public $PWD;
-	var $SMS_Server;
+    public $SMS_Server;
-	var $port;
+    public $port;
-	var $SMS_Port;
+    public $SMS_Port;
-	var $Data = array();
+    public $Data = array();
-	var $Result = array();
+    public $Result = array();
-    var $icode_key;
+    public $icode_key;
-    var $socket_port;
+    public $socket_port;
-    var $socket_host;
+    public $socket_host;
 
 	function SMS_con($sms_server,$sms_id,$sms_pw,$port) {
         global $config;
@@ -102,7 +99,7 @@ class SMS {
             if($enc === 'EUC-KR'){
                 $msg = iconv_utf8($msg);
             }
-            
+
             // 보낼 내용을 배열에 집어넣기
             $dest = spacing($dest,11);
             $callBack = spacing($callBack,11);

lib/shop.uri.lib.php

@@ -138,7 +138,7 @@ function shop_short_url_clean($string_url, $url, $page_name, $array_page_names){
             $add_param = '?'.http_build_query($result,'','&');
         }
 
-        if( $add_qry ){
+        if( isset($add_qry) ){
             $add_param .= $add_param ? '&'.$add_qry : '?'.$add_qry;
         }
 

lib/uri.lib.php

@@ -1,8 +1,6 @@
 <?php
 if (!defined('_GNUBOARD_')) exit;
 
-include_once(dirname(__FILE__) .'/URI/uri.class.php');
-
 // 짧은 주소 형식으로 만들어서 가져온다.
 function get_pretty_url($folder, $no='', $query_string='', $action='')
 {

mobile/shop/event.php

@@ -1,5 +1,7 @@
 <?php
+if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
 include_once('./_common.php');
+if (!defined('_SHOP_COMMON_')) exit; // 모바일 페이지로 직접 접근하는 것을 막음
 
 $ev_id = isset($_GET['ev_id']) ? (int) $_GET['ev_id'] : 0;
 

mobile/shop/itemqalist.php

@@ -40,7 +40,7 @@ $sql = " select count(*) as cnt
 $row = sql_fetch($sql);
 $total_count = $row['cnt'];
 
-$rows = $config['cf_page_rows'];
+$rows = $config['cf_mobile_page_rows'];
 $total_page  = ceil($total_count / $rows);  // 전체 페이지 계산
 if ($page < 1) { $page = 1; } // 페이지가 없으면 첫 페이지 (1 페이지)
 $from_record = ($page - 1) * $rows; // 시작 열을 구함

mobile/shop/itemuselist.php

@@ -40,7 +40,7 @@ $sql = " select count(*) as cnt
 $row = sql_fetch($sql);
 $total_count = $row['cnt'];
 
-$rows = $config['cf_page_rows'];
+$rows = $config['cf_mobile_page_rows'];
 $total_page  = ceil($total_count / $rows);  // 전체 페이지 계산
 if ($page < 1) { $page = 1; } // 페이지가 없으면 첫 페이지 (1 페이지)
 $from_record = ($page - 1) * $rows; // 시작 열을 구함

mobile/shop/lg/mispwapurl.php

@@ -2,7 +2,7 @@
 // 해당 페이지는 사용자가 ISP{국민/BC) 카드 결제를 성공하였을 때, 사용자에게 보여지는 페이지입니다.
 include_once('./_common.php');
 
-$LGD_OID    = $_GET['LGD_OID'];
+$LGD_OID    = clean_xss_tags($_GET['LGD_OID']);
 
 echo "LGD_OID = ".$LGD_OID;
 

mobile/shop/mypage.php

@@ -2,7 +2,7 @@
 include_once('./_common.php');
 
 // 테마에 mypage.php 있으면 include
-if(defined('G5_THEME_SHOP_PATH')) {
+if(defined('G5_THEME_MSHOP_PATH')) {
     $theme_mypage_file = G5_THEME_MSHOP_PATH.'/mypage.php';
     if(is_file($theme_mypage_file)) {
         include_once($theme_mypage_file);

mobile/shop/orderinquiry.php

@@ -49,7 +49,7 @@ if ($total_count == 0)
         alert('주문이 존재하지 않습니다.');
 }
 
-$rows = $config['cf_page_rows'];
+$rows = $config['cf_mobile_page_rows'];
 $total_page  = ceil($total_count / $rows);  // 전체 페이지 계산
 if ($page < 1) { $page = 1; } // 페이지가 없으면 첫 페이지 (1 페이지)
 $from_record = ($page - 1) * $rows; // 시작 열을 구함

mobile/shop/orderinquiry.sub.php

@@ -4,7 +4,7 @@ if (!defined("_GNUBOARD_")) exit; // 개별 페이지 접근 불가
 if (!defined("_ORDERINQUIRY_")) exit; // 개별 페이지 접근 불가
 
 // 테마에 orderinquiry.sub.php 있으면 include
-if(defined('G5_THEME_SHOP_PATH')) {
+if(defined('G5_THEME_MSHOP_PATH')) {
     $theme_inquiry_file = G5_THEME_MSHOP_PATH.'/orderinquiry.sub.php';
     if(is_file($theme_inquiry_file)) {
         include_once($theme_inquiry_file);

mobile/shop/orderinquiryview.php

@@ -2,7 +2,7 @@
 include_once('./_common.php');
 
 // 테마에 orderinquiryview.php 있으면 include
-if(defined('G5_THEME_SHOP_PATH')) {
+if(defined('G5_THEME_MSHOP_PATH')) {
     $theme_inquiryview_file = G5_THEME_MSHOP_PATH.'/orderinquiryview.php';
     if(is_file($theme_inquiryview_file)) {
         include_once($theme_inquiryview_file);

mobile/shop/wishlist.php

@@ -2,7 +2,7 @@
 include_once('./_common.php');
 
 // 테마에 wishlist.php 있으면 include
-if(defined('G5_THEME_SHOP_PATH')) {
+if(defined('G5_THEME_MSHOP_PATH')) {
     $theme_wishlist_file = G5_THEME_MSHOP_PATH.'/wishlist.php';
     if(is_file($theme_wishlist_file)) {
         include_once($theme_wishlist_file);

mobile/skin/member/basic/password_reset.skin.php

@@ -12,7 +12,8 @@ add_stylesheet('<link rel="stylesheet" href="' . $member_skin_url . '/style.css"
             <fieldset id="info_fs">
                 <p>새로운 비밀번호를 입력해주세요.</p>
                 <label for="mb_id" class="sound_only">아이디</label>
-                <input type="text" name="mb_id" id="mb_id" value="<?php echo $_POST['mb_id']; ?>" required class="required frm_input full_input" size="30" placeholder="아이디" readonly>
+                <br>
+                <b>회원 아이디 : <?php echo $_POST['mb_id']; ?></b>
                 <label for="mb_pw" class="sound_only">새 비밀번호<strong class="sound_only">필수</strong></label>
                 <input type="password" name="mb_password" id="mb_pw" required class="required frm_input full_input" size="30" placeholder="새 비밀번호">
                 <label for="mb_pw2" class="sound_only">새 비밀번호 확인<strong class="sound_only">필수</strong></label>

mobile/skin/member/basic/register_form.skin.php

@@ -47,6 +47,8 @@ if ($config['cf_cert_use'] && ($config['cf_cert_simple'] || $config['cf_cert_ipi
         <ul>
             <li>
                 <?php 
+                $desc_name = '';
+                $desc_phone = '';
 	            if ($config['cf_cert_use']) {
                     $desc_name = ' - 본인확인 시 자동입력';
                     $desc_phone = ' - 본인확인 시 자동입력';

plugin/PHPMailer/extras/htmlfilter.php

@@ -348,7 +348,7 @@ function tln_getnxtag($body, $offset)
             }
                 //intentional fall-through
         case '>':
-            $attary{$attname} = '"yes"';
+            $attary[$attname] = '"yes"';
             return array($tagname, $attary, $tagtype, $lt, $pos);
             break;
         default:
@@ -382,7 +382,7 @@ function tln_getnxtag($body, $offset)
                     }
                     list($pos, $attval, $match) = $regary;
                     $pos++;
-                    $attary{$attname} = '\'' . $attval . '\'';
+                    $attary[$attname] = '\'' . $attval . '\'';
                 } elseif ($quot == '"') {
                     $regary = tln_findnxreg($body, $pos + 1, '\"');
                     if ($regary == false) {
@@ -390,7 +390,7 @@ function tln_getnxtag($body, $offset)
                     }
                     list($pos, $attval, $match) = $regary;
                     $pos++;
-                            $attary{$attname} = '"' . $attval . '"';
+                            $attary[$attname] = '"' . $attval . '"';
                 } else {
                     /**
                      * These are hateful. Look for \s, or >.
@@ -404,13 +404,13 @@ function tln_getnxtag($body, $offset)
                      * If it's ">" it will be caught at the top.
                      */
                     $attval = preg_replace('/\"/s', '"', $attval);
-                    $attary{$attname} = '"' . $attval . '"';
+                    $attary[$attname] = '"' . $attval . '"';
                 }
             } elseif (preg_match('|[\w/>]|', $char)) {
                 /**
                  * That was attribute type 4.
                  */
-                $attary{$attname} = '"yes"';
+                $attary[$attname] = '"yes"';
             } else {
                 /**
                  * An illegal character. Find next '>' and return.
@@ -446,7 +446,7 @@ function tln_deent(&$attvalue, $regex, $hex = false)
             if ($hex) {
                 $numval = hexdec($numval);
             }
-            $repl{$matches[0][$i]} = chr($numval);
+            $repl[$matches[0][$i]] = chr($numval);
         }
         $attvalue = strtr($attvalue, $repl);
         return true;
@@ -528,7 +528,7 @@ function tln_fixatts(
             if (preg_match($matchtag, $tagname)) {
                 foreach ($matchattrs as $matchattr) {
                     if (preg_match($matchattr, $attname)) {
-                        unset($attary{$attname});
+                        unset($attary[$attname]);
                         continue;
                     }
                 }
@@ -541,7 +541,7 @@ function tln_fixatts(
         tln_defang($attvalue);
         if ($attname == 'style' && $attvalue !== $oldattvalue) {
             $attvalue = "idiocy";
-            $attary{$attname} = $attvalue;
+            $attary[$attname] = $attvalue;
         }
         tln_unspace($attvalue);
 
@@ -563,7 +563,7 @@ function tln_fixatts(
                         list($valmatch, $valrepl) = $valary;
                         $newvalue = preg_replace($valmatch, $valrepl, $attvalue);
                         if ($newvalue != $attvalue) {
-                            $attary{$attname} = $newvalue;
+                            $attary[$attname] = $newvalue;
                             $attvalue = $newvalue;
                         }
                     }
@@ -572,14 +572,14 @@ function tln_fixatts(
         }
         if ($attname == 'style') {
             if (preg_match('/[\0-\37\200-\377]+/', $attvalue)) {
-                $attary{$attname} = '"disallowed character"';
+                $attary[$attname] = '"disallowed character"';
             }
             preg_match_all("/url\s*\((.+)\)/si", $attvalue, $aMatch);
             if (count($aMatch)) {
                 foreach($aMatch[1] as $sMatch) {
                     $urlvalue = $sMatch;
                     tln_fixurl($attname, $urlvalue, $trans_image_path, $block_external_images);
-                    $attary{$attname} = str_replace($sMatch, $urlvalue, $attvalue);
+                    $attary[$attname] = str_replace($sMatch, $urlvalue, $attvalue);
                 }
             }
         }
@@ -671,7 +671,7 @@ function tln_fixstyle($body, $pos, $trans_image_path, $block_external_images)
     $bSucces = false;
     $bEndTag = false;
     for ($i=$pos,$iCount=strlen($body);$i<$iCount;++$i) {
-        $char = $body{$i};
+        $char = $body[$i];
         switch ($char) {
             case '<':
                 $sToken = $char;
@@ -702,7 +702,7 @@ function tln_fixstyle($body, $pos, $trans_image_path, $block_external_images)
             case '!':
                 if ($sToken == '<') {
                     // possible comment
-                    if (isset($body{$i+2}) && substr($body,$i,3) == '!--') {
+                    if (isset($body[$i+2]) && substr($body,$i,3) == '!--') {
                         $i = strpos($body,'-->',$i+3);
                         if ($i === false) { // no end comment
                             $i = strlen($body);
@@ -818,7 +818,7 @@ function tln_body2div($attary, $trans_image_path)
             $styledef .= "color: $text; ";
         }
         if (strlen($styledef) > 0){
-            $divattary{"style"} = "\"$styledef\"";
+            $divattary["style"] = "\"$styledef\"";
         }
     }
     return $divattary;
@@ -914,10 +914,10 @@ function tln_sanitize(
                         if ($tagname == "body") {
                             $tagname = "div";
                         }
-                        if (isset($open_tags{$tagname}) &&
+                        if (isset($open_tags[$tagname]) &&
-                            $open_tags{$tagname} > 0
+                            $open_tags[$tagname] > 0
                         ) {
-                            $open_tags{$tagname}--;
+                            $open_tags[$tagname]--;
                         } else {
                             $tagname = false;
                         }
@@ -961,10 +961,10 @@ function tln_sanitize(
                                 $attary = tln_body2div($attary, $trans_image_path);
                             }
                             if ($tagtype == 1) {
-                                if (isset($open_tags{$tagname})) {
+                                if (isset($open_tags[$tagname])) {
-                                    $open_tags{$tagname}++;
+                                    $open_tags[$tagname]++;
                                 } else {
-                                    $open_tags{$tagname} = 1;
+                                    $open_tags[$tagname] = 1;
                                 }
                             }
                             /**
@@ -1121,19 +1121,19 @@ function HTMLFilter($body, $trans_image_path, $block_external_images = false)
 
     if ($block_external_images) {
         array_push(
-            $bad_attvals{'/.*/'}{'/^src|background/i'}[0],
+            $bad_attvals['/.*/']['/^src|background/i'][0],
             '/^([\'\"])\s*https*:.*([\'\"])/si'
         );
         array_push(
-            $bad_attvals{'/.*/'}{'/^src|background/i'}[1],
+            $bad_attvals['/.*/']['/^src|background/i'][1],
             "\\1$trans_image_path\\1"
         );
         array_push(
-            $bad_attvals{'/.*/'}{'/^style/i'}[0],
+            $bad_attvals['/.*/']['/^style/i'][0],
             '/url\(([\'\"])\s*https*:.*([\'\"])\)/si'
         );
         array_push(
-            $bad_attvals{'/.*/'}{'/^style/i'}[1],
+            $bad_attvals['/.*/']['/^style/i'][1],
             "url(\\1$trans_image_path\\1)"
         );
     }

plugin/editor/smarteditor2/photo_uploader/popup/php/UploadHandler.php

@@ -1057,7 +1057,7 @@ class UploadHandler
         }
         if (count($failed_versions)) {
             $file->error = $this->get_error_message('image_resize')
-                    .' ('.implode($failed_versions,', ').')';
+                    .' ('.implode(', ', $failed_versions).')';
         }
         // Free memory:
         $this->destroy_image_object($file_path);

plugin/htmlpurifier/HTMLPurifier.standalone.php

@@ -3801,7 +3801,7 @@ class HTMLPurifier_ElementDef
 
         if (!empty($def->content_model)) {
             $this->content_model =
-                str_replace("#SUPER", $this->content_model, $def->content_model);
+                str_replace("#SUPER", (string)$this->content_model, $def->content_model);
             $this->child = false;
         }
         if (!empty($def->content_model_type)) {
@@ -7555,7 +7555,7 @@ class HTMLPurifier_Length
         if ($this->n === '0' && $this->unit === false) {
             return true;
         }
-        if (!ctype_lower($this->unit)) {
+        if ($this->unit === false || !ctype_lower($this->unit)) {
             $this->unit = strtolower($this->unit);
         }
         if (!isset(HTMLPurifier_Length::$allowedUnits[$this->unit])) {
@@ -7946,8 +7946,8 @@ class HTMLPurifier_Lexer
     {
         // normalize newlines to \n
         if ($config->get('Core.NormalizeNewlines')) {
-            $html = str_replace("\r\n", "\n", $html);
+            $html = str_replace("\r\n", "\n", (string)$html);
-            $html = str_replace("\r", "\n", $html);
+            $html = str_replace("\r", "\n", (string)$html);
         }
 
         if ($config->get('HTML.Trusted')) {
@@ -21914,11 +21914,11 @@ class HTMLPurifier_URIFilter_Munge extends HTMLPurifier_URIFilter
         $string = $uri->toString();
         // always available
         $this->replace['%s'] = $string;
-        $this->replace['%r'] = $context->get('EmbeddedURI', true);
+        $this->replace['%r'] = $context->get('EmbeddedURI', true)?: '';
-        $token = $context->get('CurrentToken', true);
+        $token = $context->get('CurrentToken', true) ?: '';
-        $this->replace['%n'] = $token ? $token->name : null;
+        $this->replace['%n'] = $token ? $token->name : '';
-        $this->replace['%m'] = $context->get('CurrentAttr', true);
+        $this->replace['%m'] = $context->get('CurrentAttr', true) ?: '';
-        $this->replace['%p'] = $context->get('CurrentCSSProperty', true);
+        $this->replace['%p'] = $context->get('CurrentCSSProperty', true) ?: '';
         // not always available
         if ($this->secretKey) {
             $this->replace['%t'] = hash_hmac("sha256", $string, $this->secretKey);

plugin/htmlpurifier/standalone/HTMLPurifier/Lexer/PH5P.php

@@ -4410,7 +4410,7 @@ class HTML5TreeConstructer
 
         foreach ($token['attr'] as $attr) {
             if (!$el->hasAttribute($attr['name'])) {
-                $el->setAttribute($attr['name'], $attr['value']);
+                $el->setAttribute($attr['name'], (string)$attr['value']);
             }
         }
 

plugin/inicert/ini_find_result.php

@@ -50,6 +50,22 @@ if ($_POST["resultCode"] === "0000") {
             alert_close("인증하신 정보로 가입된 회원정보가 없습니다.");
             exit;                
         }
+
+        $md5_cert_no = md5($cert_no);
+        $hash_data   = md5($user_name.$cert_type.$birth_day.$phone_no.$md5_cert_no);
+
+        // 성인인증결과
+        $adult_day = date("Ymd", strtotime("-19 years", G5_SERVER_TIME));
+        $adult = ((int)$birth_day <= (int)$adult_day) ? 1 : 0;
+
+        set_session("ss_cert_type",    $cert_type);
+        set_session("ss_cert_no",      $md5_cert_no);
+        set_session("ss_cert_hash",    $hash_data);
+        set_session("ss_cert_adult",   $adult);
+        set_session("ss_cert_birth",   $birth_day);
+        //set_session("ss_cert_sex",     ($sex_code=="01"?"M":"F")); // 이니시스 간편인증은 성별정보 리턴 없음
+        set_session('ss_cert_dupinfo', $mb_dupinfo);
+        set_session('ss_cert_mb_id', $row['mb_id']);
     } else {
         // 인증실패 curl의 인증실패 체크
         alert_close('코드 : '.$res_data['resultCode'].'  '.urldecode($res_data['resultMsg']));

plugin/kcaptcha/kcaptcha_mp3.php

@@ -16,7 +16,7 @@ function make_mp3()
         $mp3s[] = $file;
     }
 
-    $ip = sprintf("%u", ip2long($_SERVER['REMOTE_ADDR']));
+    $ip = md5(sha1($_SERVER['REMOTE_ADDR']));
     $mp3_file = 'cache/kcaptcha-'.$ip.'_'.G5_SERVER_TIME.'.mp3';
 
     $contents = '';

plugin/kcpcert/find_kcpcert_result.php

@@ -159,7 +159,25 @@ if( $cert_enc_use == "Y" )
                 alert_close("인증하신 정보로 가입된 회원정보가 없습니다.");
                 exit;
             }
+        }else{
+            $mb_dupinfo = $md5_ci;
         }
+        
+        $md5_cert_no = md5($cert_no);
+        $hash_data   = md5($user_name.$cert_type.$birth_day.$phone_no.$md5_cert_no);
+        
+        // 성인인증결과
+        $adult_day = date("Ymd", strtotime("-19 years", G5_SERVER_TIME));
+        $adult = ((int)$birth_day <= (int)$adult_day) ? 1 : 0;
+        
+        set_session("ss_cert_type",    $cert_type);
+        set_session("ss_cert_no",      $md5_cert_no);
+        set_session("ss_cert_hash",    $hash_data);
+        set_session("ss_cert_adult",   $adult);
+        set_session("ss_cert_birth",   $birth_day);
+        set_session("ss_cert_sex",     ($sex_code=="01"?"M":"F")); // 이니시스 간편인증은 성별정보 리턴 없음
+        set_session('ss_cert_dupinfo', $mb_dupinfo);
+        set_session('ss_cert_mb_id', $row['mb_id']);
     }
     else if( $res_cd != "0000" )
     {

plugin/lgxpay/find_AuthOnlyRes.php

@@ -136,8 +136,25 @@ if ($xpay->TX()) {
                 alert_close("인증하신 정보로 가입된 회원정보가 없습니다.");
                 exit;
             }
+        }else{
+            $mb_dupinfo = $md5_ci;
         }
-
+        
+        $md5_cert_no = md5($cert_no);
+        $hash_data   = md5($user_name.$cert_type.$birth_day.$phone_no.$md5_cert_no);
+        
+        // 성인인증결과
+        $adult_day = date("Ymd", strtotime("-19 years", G5_SERVER_TIME));
+        $adult = ((int)$birth_day <= (int)$adult_day) ? 1 : 0;
+        
+        set_session("ss_cert_type",    $cert_type);
+        set_session("ss_cert_no",      $md5_cert_no);
+        set_session("ss_cert_hash",    $hash_data);
+        set_session("ss_cert_adult",   $adult);
+        set_session("ss_cert_birth",   $birth_day);
+        set_session("ss_cert_sex",     $mb_sex); // 이니시스 간편인증은 성별정보 리턴 없음
+        set_session('ss_cert_dupinfo', $mb_dupinfo);
+        set_session('ss_cert_mb_id', $row['mb_id']);
     } else {
         //인증요청 결과 실패 DB처리
         //echo "인증요청 결과 실패 DB처리하시기 바랍니다.<br>";

plugin/lgxpay/lgdacom/XPayClient.php

@@ -904,7 +904,7 @@ class XPayClient
 	*/
 	function StringToHex($MertKey)
 	{
-		$szKey; 
+		$szKey = array();
 		$szMertKey = str_split($MertKey,2);
 		for ($i = 0 ; $i < 16 ; $i++)
 		{

plugin/okname/find_hpcert2.php

@@ -121,8 +121,26 @@ if (empty($row['mb_id'])) { // ci로 등록된 계정이 없다면
         alert_close("인증하신 정보로 가입된 회원정보가 없습니다.");
         exit;
     }
+}else{
+    $mb_dupinfo = $md5_ci;
 }
 
+$md5_cert_no = md5($cert_no);
+$hash_data   = md5($user_name.$cert_type.$birth_day.$phone_no.$md5_cert_no);
+
+// 성인인증결과
+$adult_day = date("Ymd", strtotime("-19 years", G5_SERVER_TIME));
+$adult = ((int)$birth_day <= (int)$adult_day) ? 1 : 0;
+
+set_session("ss_cert_type",    $cert_type);
+set_session("ss_cert_no",      $md5_cert_no);
+set_session("ss_cert_hash",    $hash_data);
+set_session("ss_cert_adult",   $adult);
+set_session("ss_cert_birth",   $birth_day);
+set_session('ss_cert_sex',     ($field[9] == 1 ? 'M' : 'F'));
+set_session('ss_cert_dupinfo', $mb_dupinfo);
+set_session('ss_cert_mb_id', $row['mb_id']);
+
 $g5['title'] = 'KCB 휴대폰 본인확인';
 include_once(G5_PATH.'/head.sub.php');
 ?>

plugin/okname/find_ipin2.php

@@ -95,7 +95,26 @@ if (empty($row['mb_id'])) { // ci로 등록된 계정이 없다면
         alert_close("인증하신 정보로 가입된 회원정보가 없습니다.");
         exit;
     }
+}else{
+    $mb_dupinfo = $md5_ci;
 }
+
+$md5_cert_no = md5($cert_no);
+$hash_data   = md5($user_name.$cert_type.$birth_day.$phone_no.$md5_cert_no);
+
+// 성인인증결과
+$adult_day = date("Ymd", strtotime("-19 years", G5_SERVER_TIME));
+$adult = ((int)$birth_day <= (int)$adult_day) ? 1 : 0;
+
+set_session("ss_cert_type",    $cert_type);
+set_session("ss_cert_no",      $md5_cert_no);
+set_session("ss_cert_hash",    $hash_data);
+set_session("ss_cert_adult",   $adult);
+set_session("ss_cert_birth",   $birth_day);
+set_session('ss_cert_sex',     ($field[9] == 1 ? 'M' : 'F'));
+set_session('ss_cert_dupinfo', $mb_dupinfo);
+set_session('ss_cert_mb_id', $row['mb_id']);
+
 $g5['title'] = 'KCB 아이핀 본인확인';
 include_once(G5_PATH.'/head.sub.php');
 ?>

plugin/sms5/sms5.lib.php

@@ -151,15 +151,15 @@ if($config['cf_sms_type'] == 'LMS') {
     include_once(G5_LIB_PATH.'/icode.lms.lib.php');
 
     class SMS5 extends LMS {
-        var $icode_id;
+        public $icode_id;
-        var $icode_pw;
+        public $icode_pw;
-        var $socket_host;
+        public $socket_host;
-        var $socket_port;
+        public $socket_port;
-        var $socket_portcode;
+        public $socket_portcode;
-        var $send_type;
+        public $send_type;
-        var $Data = array();
+        public $Data = array();
-        var $Result = array();
+        public $Result = array();
-        var $Log = array();
+        public $Log = array();
 
         function Add($strDest, $strCallBack, $strCaller, $strSubject, $strURL, $strData, $strDate="", $nCount) {
             global $config;
@@ -242,7 +242,7 @@ if($config['cf_sms_type'] == 'LMS') {
         function CheckCommonTypeDate($strDate) {
             $strDate=preg_replace("/[^0-9]/","",$strDate);
             if ($strDate) {
-                if (!checkdate(substr($strDate,4,2),substr($strDate,6,2),substr($rsvTime,0,4))) return "예약날짜가 잘못되었습니다";
+                if (!checkdate(substr($strDate,4,2),substr($strDate,6,2),substr($strDate,0,4))) return "예약날짜가 잘못되었습니다";
                 if (substr($strDate,8,2)>23 || substr($strDate,10,2)>59) return "예약시간이 잘못되었습니다";
             }
         }
@@ -427,10 +427,6 @@ if($config['cf_sms_type'] == 'LMS') {
                 if (!$fsocket) return false;
                 set_time_limit(300);
 
-                ## php4.3.10일경우
-                ## zend 최신버전으로 업해주세요..
-                ## 또는 69번째 줄을 $this->Data as $tmp => $puts 로 변경해 주세요.
-
                 foreach($this->Data as $puts) {
                     $dest = substr($puts,26,11);
                     fputs($fsocket, $puts);

shop/_common.php

@@ -17,4 +17,6 @@ if (isset($_REQUEST['sortodr']))  {
 if (!defined('G5_USE_SHOP') || !G5_USE_SHOP)
     die('<p>쇼핑몰 설치 후 이용해 주십시오.</p>');
 
-define('_SHOP_', true);
+define('_SHOP_', true);
+define('_SHOP_COMMON_', true); // 모바일 페이지의 직접 접근을 막는 경우에 사용
+?>

shop/inicis/libs/HttpClient.php

@@ -32,6 +32,12 @@ class HttpClient {
         $data = substr($data, 1); // remove leading "&"
         $url_data = parse_url($url);
 
+        // host 가 inicis.com 의 주소가 아니라면 false 반환
+        // [scheme] => https, [host] => fcstdpay.inicis.com, [path] => /api/payAuth
+        if (preg_match("#inicis\.com$#", $url_data["host"]) == false) {
+            // error_log(print_r($url_data, 1));
+            return false;
+        }
 
         if ($url_data["scheme"] == "https") {
             $this->ssl = "ssl://";

shop/inicis/libs/sha256.inc.php

@@ -46,6 +46,7 @@
  *             Ability to define "_NANO_SHA2_UPPER" to yeild upper case hashes.
  * 2009-08-01: Added ability to attempt to use mhash() prior to running pure
  *             php code.
+ * 2022-05-19: PHP 8.1 부터 deprecate 되는 mhash() 삭제
  *
  * NOTE: Some sporadic versions of PHP do not handle integer overflows the
  *       same as the majority of builds.  If you get hash results of:
@@ -211,11 +212,7 @@ if (!class_exists('nanoSha2'))
 
             // check for php's internal sha256 function, ignore if ig_func==true
             if ($ig_func == false) {
-                if (version_compare(PHP_VERSION,'5.1.2','>=')) {
                     return hash("sha256", $str, false);
-                } else if (function_exists('mhash') && defined('MHASH_SHA256')) {
-                    return base64_encode(bin2hex(mhash(MHASH_SHA256, $str)));
-                }
             }
 
             /*

shop/price/google_feed.php

@@ -78,6 +78,7 @@ for ($i = 0; $row = sql_fetch_array($result); $i++) {
 
     $adult = "no";
     foreach($cate_array as $key => $var) {
+        if(empty($var)) continue;
         if(in_array(1, $category_adult_array[$var])) {
             $adult = "yes";
         }

shop/settle_inicis_common.php

@@ -14,7 +14,7 @@ $INIpayLog  = false;                  // 로그를 기록하려면 true 로 수
 
 //**********************************************************************************
 
-$PG_IP = $_SERVER['REMOTE_ADDR'];
+$PG_IP = get_real_client_ip();
 
 if( $PG_IP == "203.238.37.3" || $PG_IP == "203.238.37.15" || $PG_IP == "203.238.37.16" || $PG_IP == "203.238.37.25" || $PG_IP == "39.115.212.9" )  //PG에서 보냈는지 IP로 체크
 {

shop/settle_lg_common.php

@@ -80,7 +80,7 @@ if ( $LGD_HASHDATA2 == $LGD_HASHDATA ) { //해쉬값 검증이 성공이면
 
             $result = false;
 
-            if($row['pp_id']) {
+            if(isset($row['pp_id']) && $row['pp_id']) {
                 // 개인결제 UPDATE
                 $sql = " update {$g5['g5_shop_personalpay_table']}
                             set pp_receipt_price = '$LGD_AMOUNT',
@@ -113,7 +113,7 @@ if ( $LGD_HASHDATA2 == $LGD_HASHDATA ) { //해쉬값 검증이 성공이면
             }
 
             if($result) {
-                if($row['od_id'])
+                if(isset($row['od_id']) && $row['od_id'])
                     $od_id = $row['od_id'];
                 else
                     $od_id = $LGD_OID;

skin/latest/basic/style.css

@@ -7,7 +7,7 @@
 
 .lat ul {padding:10px 0}
 .lat li {position:relative;line-height:18px;border-bottom:1px solid #e5ecee;margin-bottom:10px}
-.lat li a {line-height:24px;font-weight:bold;font-size:1.2em;line-height:20px;vertical-align:middle}
+.lat li a {font-weight:bold;font-size:1.2em;line-height:20px;vertical-align:middle}
 .lat li a:hover {color:#3a8afd}
 .lat li .fa-heart {color:#ff0000}
 .lat li .fa-lock {display:inline-block;line-height:14px;width:16px;font-size:0.833em;color:#4f818c;background:#cbe3e8;text-align:center;border-radius:2px;font-size:12px;border:1px solid #cbe3e8;vertical-align:middle}

skin/member/basic/password_reset.skin.php

@@ -12,7 +12,8 @@ add_stylesheet('<link rel="stylesheet" href="' . $member_skin_url . '/style.css"
             <fieldset id="info_fs">
                 <p>새로운 비밀번호를 입력해주세요.</p>
                 <label for="mb_id" class="sound_only">아이디</label>
-                <input type="text" name="mb_id" id="mb_id" value="<?php echo $_POST['mb_id']; ?>" required class="required frm_input full_input" size="30" placeholder="아이디" readonly>
+                <br>
+                <b>회원 아이디 : <?php echo $_POST['mb_id']; ?></b>
                 <label for="mb_pw" class="sound_only">새 비밀번호<strong class="sound_only">필수</strong></label>
                 <input type="password" name="mb_password" id="mb_pw" required class="required frm_input full_input" size="30" placeholder="새 비밀번호">
                 <label for="mb_pw2" class="sound_only">새 비밀번호 확인<strong class="sound_only">필수</strong></label>

skin/member/basic/register_form.skin.php

@@ -53,6 +53,8 @@ if ($config['cf_cert_use'] && ($config['cf_cert_simple'] || $config['cf_cert_ipi
 	        <ul>
 				<li>
                     <?php 
+					$desc_name = '';
+					$desc_phone = '';
 	                if ($config['cf_cert_use']) {
                         $desc_name = '<span class="cert_desc"> 본인확인 시 자동입력</span>';
                         $desc_phone = '<span class="cert_desc"> 본인확인 시 자동입력</span>';

skin/shop/basic/list.10.skin.php

@@ -149,7 +149,7 @@ foreach((array) $list as $row){
 
 if ($i >= 1) echo "</ul>\n";
 
-if($i === 0) echo "<p class=\"sct_noitem\">등록된 상품이 없습니다.</p>\n";
+if ($i === 0) echo "<p class=\"sct_noitem\">등록된 상품이 없습니다.</p>\n";
 ?>
 <!-- } 상품진열 10 끝 -->
 
@@ -160,7 +160,7 @@ $(function (){
 		$(this).parent("div").children(".sct_sns_wrap").show();
 	});
     $('.sct_sns_bg, .sct_sns_cls').click(function(){
-	    $('.sct_sns_wrap').hide();
+        $('.sct_sns_wrap').hide();
 	});
 });			
 </script>

skin/shop/basic/list.30.skin.php

@@ -36,9 +36,9 @@ foreach((array) $list as $row){
     $list_right_pad = 10;
     $list_bottom_pad = 20;
     $list_left_pad = $this->img_width + 10;
-    $list_real_width = 360;
+    $list_real_width = 389;
-    $list_width = $list_real_width - $list_right_pad - $list_left_pad;
+    $list_width = $list_real_width;
-    $list_height = $this->img_height - $list_top_pad - $list_bottom_pad;
+    $list_height = $this->img_height;
 
     echo "<li class=\"sct_li{$sct_last}\" data-css=\"nocss\" style=\"padding:{$list_top_pad}px {$list_right_pad}px {$list_bottom_pad}px {$list_left_pad}px;width:{$list_width}px;height:{$list_height}px\">\n";
 
@@ -83,7 +83,7 @@ foreach((array) $list as $row){
         echo "<div class=\"sct_cost\">\n";
 
         if ($this->view_it_cust_price && $row['it_cust_price']) {
-           echo "<span class=\"sct_dict\">".display_price($row['it_cust_price'])."</span>\n";
+            echo "<span class=\"sct_dict\">".display_price($row['it_cust_price'])."</span>\n";
         }
 
         if ($this->view_it_price) {
@@ -114,4 +114,16 @@ if ($i >= 1) echo "</ul>\n";
 
 if($i == 0) echo "<p class=\"sct_noitem\">등록된 상품이 없습니다.</p>\n";
 ?>
-<!-- } 상품진열 12 끝 -->
+<!-- } 상품진열 30 끝 -->
+
+<script>
+//SNS 공유
+$(function (){
+	$(".btn_share").on("click", function() {
+		$(this).parent("div").children(".sct_sns_wrap").show();
+	});
+    $('.sct_sns_bg, .sct_sns_cls').click(function(){
+        $('.sct_sns_wrap').hide();
+	});
+});			
+</script>

skin/shop/basic/list.40.skin.php

@@ -9,22 +9,27 @@ add_stylesheet('<link rel="stylesheet" href="'.G5_SHOP_SKIN_URL.'/style.css">',
 
 <!-- 상품진열 40 시작 { -->
 <?php
-$i=0;
+$i = 0;
+
+$this->view_star = (method_exists($this, 'view_star')) ? $this->view_star : true;
+
 foreach((array) $list as $row){
-
     if( empty($row) ) continue;
-    $i++;
 
-    $item_link_href = shop_item_url($row['it_id']);
+    $item_link_href = shop_item_url($row['it_id']);     // 상품링크
-    $star_score = $row['it_use_avg'] ? (int) get_star($row['it_use_avg']) : '';
+    $star_score = $row['it_use_avg'] ? (int) get_star($row['it_use_avg']) : '';     //사용자후기 평균별점
+    $list_mod = $this->list_mod;    // 분류관리에서 1줄당 이미지 수 값 또는 파일에서 지정한 가로 수
+    $is_soldout = is_soldout($row['it_id'], true);   // 품절인지 체크
 
-    if ($list_mod >= 2) { // 1줄 이미지 : 2개 이상
+    $classes = array();
-        if ($i%$list_mod == 0) $sct_last = ' sct_last'; // 줄 마지막
+
-        else if ($i%$list_mod == 1) $sct_last = ' sct_clear'; // 줄 첫번째
+    $classes[] = 'col-row-'.$list_mod;
-        else $sct_last = '';
+
-    } else { // 1줄 이미지 : 1개
+    if( $i && ($i % $list_mod == 0) ){
-        $sct_last = ' sct_clear';
+        $classes[] = 'row-clear';
     }
+    
+    $i++;   // 변수 i 를 증가
 
     if ($i == 1) {
         if ($this->css) {
@@ -32,20 +37,13 @@ foreach((array) $list as $row){
         } else {
             echo "<ul class=\"sct sct_40\">\n";
         }
-   }
+    }
 
-    //$list_top_pad = 20;
+    echo "<li class=\"sct_li ".implode(' ', $classes)."\" data-css=\"nocss\" style=\"height:auto\">\n";
-    //$list_right_pad = 10;
+	echo "<div class=\"sct_img\">\n";
-    //$list_bottom_pad = 20;
-    //$list_left_pad = $this->img_width + 10;
-    //$list_real_width = 740;
-    //$list_width = $list_real_width - $list_right_pad - $list_left_pad;
-    //$list_height = $this->img_height - $list_top_pad - $list_bottom_pad;
-
-    echo "<li class=\"sct_li{$sct_last}\" data-css=\"nocss\">\n";
 
     if ($this->href) {
-        echo "<div class=\"sct_img\"><a href=\"{$item_link_href}\" class=\"sct_a\">\n";
+        echo "<a href=\"{$item_link_href}\">\n";
     }
 
     if ($this->view_it_img) {
@@ -53,19 +51,38 @@ foreach((array) $list as $row){
     }
 
     if ($this->href) {
-        echo "</a></div>\n";
+        echo "</a>\n";
     }
+    
+    if ( !$is_soldout ){    // 품절 상태가 아니면 출력합니다.
+        echo "<div class=\"sct_btn list-10-btn\">
+            <button type=\"button\" class=\"btn_cart sct_cart\" data-it_id=\"{$row['it_id']}\"><i class=\"fa fa-shopping-cart\" aria-hidden=\"true\"></i> 장바구니</button>\n";
+        echo "</div>\n";
+	}
 
-    if ($this->view_it_icon) {
+	echo "<div class=\"cart-layer\"></div>\n";
-        echo "<div class=\"sct_icon\">".item_icon($row)."</div>\n";
+	
+	if ($this->view_it_icon) {
+        // 품절
+        if ($is_soldout) {
+            echo '<span class="shop_icon_soldout"><span class="soldout_txt">SOLD OUT</span></span>';
+        }
     }
-
+    echo "</div>\n";
+	
+	echo "<div class=\"sct_ct_wrap\">\n";
+    
+	// 사용후기 평점표시
+	if ($this->view_star && $star_score) {
+        echo "<div class=\"sct_star\"><span class=\"sound_only\">고객평점</span><img src=\"".G5_SHOP_URL."/img/s_star".$star_score.".png\" alt=\"별점 ".$star_score."점\" class=\"sit_star\"></div>\n";
+    }
+	
     if ($this->view_it_id) {
         echo "<div class=\"sct_id\">&lt;".stripslashes($row['it_id'])."&gt;</div>\n";
     }
 
     if ($this->href) {
-        echo "<div class=\"sct_txt\"><a href=\"{$item_link_href}\" class=\"sct_a\">\n";
+        echo "<div class=\"sct_txt\"><a href=\"{$item_link_href}\">\n";
     }
 
     if ($this->view_it_name) {
@@ -75,63 +92,74 @@ foreach((array) $list as $row){
     if ($this->href) {
         echo "</a></div>\n";
     }
-
+	
-    if ($this->view_it_basic && $row['it_basic']) {
+	if ($this->view_it_basic && $row['it_basic']) {
         echo "<div class=\"sct_basic\">".stripslashes($row['it_basic'])."</div>\n";
     }
 
-    if ($this->view_it_cust_price || $this->view_it_price) {
+    echo "<div class=\"sct_bottom\">\n";
 
-        echo "<div class=\"sct_cost\">\n";
+        if ($this->view_it_cust_price || $this->view_it_price) {
 
-        if ($this->view_it_cust_price && $row['it_cust_price']) {
+            echo "<div class=\"sct_cost\">\n";
-            echo "<span class=\"sct_dict\">".display_price($row['it_cust_price'])."</span>\n";
+            if ($this->view_it_price) {
+                echo display_price(get_price($row), $row['it_tel_inq'])."\n";
+            }
+            if ($this->view_it_cust_price && $row['it_cust_price']) {
+                echo "<span class=\"sct_dict\">".display_price($row['it_cust_price'])."</span>\n";
+            }
+            echo "</div>\n";
         }
-
+        
-        if ($this->view_it_price) {
+        // 위시리스트 + 공유 버튼 시작
-            echo display_price(get_price($row), $row['it_tel_inq'])."\n";
+        echo "<div class=\"sct_op_btn\">\n";
+        echo "<button type=\"button\" class=\"btn_wish\" data-it_id=\"{$row['it_id']}\"><span class=\"sound_only\">위시리스트</span><i class=\"fa fa-heart-o\" aria-hidden=\"true\"></i></button>\n";
+        if ($this->view_sns) {
+            echo "<button type=\"button\" class=\"btn_share\"><span class=\"sound_only\">공유하기</span><i class=\"fa fa-share-alt\" aria-hidden=\"true\"></i></button>\n";
         }
-
+        
-        echo "</div>\n";
+        echo "<div class=\"sct_sns_wrap\">";
-
+        if ($this->view_sns) {
-    }
+            $sns_top = $this->img_height + 10;
+            $sns_url  = $item_link_href;
+            $sns_title = get_text($row['it_name']).' | '.get_text($config['cf_title']);
+            echo "<div class=\"sct_sns\">";
+            echo "<h3>SNS 공유</h3>";
+            echo get_sns_share_link('facebook', $sns_url, $sns_title, G5_SHOP_SKIN_URL.'/img/facebook.png');
+            echo get_sns_share_link('twitter', $sns_url, $sns_title, G5_SHOP_SKIN_URL.'/img/twitter.png');
+            echo get_sns_share_link('googleplus', $sns_url, $sns_title, G5_SHOP_SKIN_URL.'/img/gplus.png');
+            echo "<button type=\"button\" class=\"sct_sns_cls\"><span class=\"sound_only\">닫기</span><i class=\"fa fa-times\" aria-hidden=\"true\"></i></button>";
+            echo "</div>\n";
+        }
+        echo "<div class=\"sct_sns_bg\"></div>";
+        echo "</div></div>\n";
+        // 위시리스트 + 공유 버튼 끝
 	
-	echo "<div class=\"\">
+    echo "</div>";
-		<button type=\"button\" class=\"\" data-it_id=\"{$row['it_id']}\"><i class=\"fa fa-shopping-cart\" aria-hidden=\"true\"></i> 장바구니</button>\n";
+
+        if ($this->view_it_icon) {
+            echo "<div class=\"sit_icon_li\">".item_icon($row)."</div>\n";
+        }
+
 	echo "</div>\n";
 	
-	// 위시리스트 + 공유 버튼 시작
-	echo "<div class=\"sct_op_btn\">\n";
-	echo "<button type=\"button\" class=\"btn_wish\" data-it_id=\"{$row['it_id']}\"><span class=\"sound_only\">위시리스트</span><i class=\"fa fa-heart-o\" aria-hidden=\"true\"></i></button>\n";
-    if ($this->view_sns) {
-	    echo "<button type=\"button\" class=\"btn_share\"><span class=\"sound_only\">공유하기</span><i class=\"fa fa-share-alt\" aria-hidden=\"true\"></i></button>\n";
-    }
-	
-	echo "<div class=\"sct_sns_wrap\">";
-	if ($this->view_sns) {
-        $sns_top = $this->img_height + 10;
-        $sns_url  = $item_link_href;
-        $sns_title = get_text($row['it_name']).' | '.get_text($config['cf_title']);
-        echo "<div class=\"sct_sns\">";
-		echo "<h3>SNS 공유</h3>";
-        echo get_sns_share_link('facebook', $sns_url, $sns_title, G5_SHOP_SKIN_URL.'/img/facebook.png');
-        echo get_sns_share_link('twitter', $sns_url, $sns_title, G5_SHOP_SKIN_URL.'/img/twitter.png');
-        echo get_sns_share_link('googleplus', $sns_url, $sns_title, G5_SHOP_SKIN_URL.'/img/gplus.png');
-        echo "<button type=\"button\" class=\"sct_sns_cls\"><span class=\"sound_only\">닫기</span><i class=\"fa fa-times\" aria-hidden=\"true\"></i></button>";
-        echo "</div>\n";
-    }
-	echo "<div class=\"sct_sns_bg\"></div>";
-	echo "</div></div>\n";
-	// 위시리스트 + 공유 버튼 끝
-
-    // 관련상품
-    echo "<div class=\"sct_rel\">".relation_item($row['it_id'], 70, 0, 5)."</div>\n";
-
     echo "</li>\n";
 }
 
 if ($i >= 1) echo "</ul>\n";
 
-if($i == 0) echo "<p class=\"sct_noitem\">등록된 상품이 없습니다.</p>\n";
+if ($i === 0) echo "<p class=\"sct_noitem\">등록된 상품이 없습니다.</p>\n";
 ?>
-<!-- } 상품진열13 끝 -->
+<!-- } 상품진열 40 끝 -->
+
+<script>
+//SNS 공유
+$(function (){
+	$(".btn_share").on("click", function() {
+		$(this).parent("div").children(".sct_sns_wrap").show();
+	});
+    $('.sct_sns_bg, .sct_sns_cls').click(function(){
+        $('.sct_sns_wrap').hide();
+	});
+});			
+</script>

skin/shop/basic/listcategory3.skin.php

@@ -6,7 +6,7 @@ $exists = false;
 
 $depth2_ca_id = substr($ca_id, 0, 2);
 
-$sql = " select ca_id, ca_name from {$g5['g5_shop_category_table']} where ca_id like '${depth2_ca_id}%' and length(ca_id) = 4 and ca_use = '1' order by ca_order, ca_id ";
+$sql = " select ca_id, ca_name from {$g5['g5_shop_category_table']} where ca_id like '{$depth2_ca_id}%' and length(ca_id) = 4 and ca_use = '1' order by ca_order, ca_id ";
 $result = sql_query($sql);
 while ($row=sql_fetch_array($result)) {
     if (preg_match("/^{$row['ca_id']}/", $ca_id))

skin/shop/basic/style.css

@@ -265,7 +265,7 @@
 .sct_40 .sct_a:focus, .sct_40 .sct_a:hover {text-decoration:none}
 
 .sct_40 .sct_img {text-align:center;float:left;margin-right:20px}
-.sct_40 .sct_img a {display:block}
+.sct_40 .sct_img a {display:block;position:relative;z-index: 9999;}
 .sct_40 .sct_cart {position:absolute;right:0;bottom:0;border:0;width:150px;padding:15px 0;background:#000;background:rgba(0,0,0,0.5);color:#fff;font-size:1em;font-weight:bold;z-index:99999}
 .sct_40 .list-10-btn .sct_cart{z-index:1;top:40px;right:10px;bottom:initial;padding:8px 0;width:140px;border:1px solid #1c70e9;background:#3a8afd;color:#fff;cursor:pointer;border-radius:3px}
 .sct_40 .list-10-btn .sct_cart:hover {background:#2375eb}

theme/basic/css/default.css

@@ -169,7 +169,7 @@ box-shadow:0 2px 5px rgba(0,0,0,0.2)}
 #container_wr {margin:0 auto;zoom:1}
 #aside {float:right;width:235px;padding:0;height:100%;margin:20px 0 20px 20px}
 
-#container {position:relative;float:left;min-height:500px;height:auto !important;margin:20px 0;height:500px;font-size:1em;width:930px;zoom:1}
+#container {position:relative;float:left;min-height:500px;height:auto !important;margin:20px 0;font-size:1em;width:930px;zoom:1}
 #container:after {display:block;visibility:hidden;clear:both;content:""}
 #container_title {font-size:1.333em;margin:0 auto;font-weight:bold}
 #container_title span {margin:0 auto 10px;display:block;line-height:30px}
@@ -273,7 +273,7 @@ a.btn_close {text-align:center;line-height:50px}
 a.btn_cancel {display:inline-block;background:#969696;color:#fff;text-decoration:none;vertical-align:middle}
 button.btn_cancel {display:inline-block;background:#969696;color:#fff;text-decoration:none;vertical-align:middle}
 .btn_cancel:hover {background:#aaa}
-a.btn_frmline, button.btn_frmline {display:inline-block;padding:0 25px;height:40px;border:0;background:#434a54;border-radius:3px;color:#fff;text-decoration:none;vertical-align:top} /* 우편번호검색버튼 등 */
+a.btn_frmline, button.btn_frmline {display:inline-block;width:128px;padding:0 5px;height:40px;border:0;background:#434a54;border-radius:3px;color:#fff;text-decoration:none;vertical-align:top} /* 우편번호검색버튼 등 */
 a.btn_frmline {}
 button.btn_frmline {font-size:1em}
 

theme/basic/css/default_shop.css

@@ -329,7 +329,7 @@ a.btn_close {text-align:center;line-height:50px}
 a.btn_cancel {display:inline-block;background:#969696;color:#fff;text-decoration:none;vertical-align:middle}
 button.btn_cancel {display:inline-block;background:#969696;color:#fff;text-decoration:none;vertical-align:middle}
 .btn_cancel:hover {background:#aaa}
-a.btn_frmline, button.btn_frmline {display:inline-block;padding:0 25px;height:40px;border:0;background:#434a54;border-radius:3px;color:#fff;text-decoration:none;vertical-align:top} /* 우편번호검색버튼 등 */
+a.btn_frmline, button.btn_frmline {display:inline-block;width:128px;padding:0 5px;height:40px;border:0;background:#434a54;border-radius:3px;color:#fff;text-decoration:none;vertical-align:top} /* 우편번호검색버튼 등 */
 a.btn_frmline {}
 button.btn_frmline {font-size:1em}
 a.btn_frmline {line-height:24px}
@@ -743,7 +743,7 @@ box-shadow: 1px 2px 2px #eee;}
 #sod_frm_taker .tbl_frm01 .choice_place input[type="radio"] + label span {top:7px}
 #sod_frm_taker .tbl_frm01 .choice_place input,
 #sod_frm_taker .tbl_frm01 .choice_place label {margin-left:10px}
-#sod_frm_taker .tbl_frm01 .btn_frmline {width:80px;height:30px;line-height:28px;background:#fff;border:1px solid #d4d6db;color:#606060;text-align:center;float:right}
+#sod_frm_taker .tbl_frm01 .btn_frmline {padding:0;width:80px;height:30px;line-height:28px;background:#fff;border:1px solid #d4d6db;color:#606060;text-align:center;float:right}
 
 #sod_frm_taker .tbl_frm01 td input {width:100%}
 #sod_frm_taker .tbl_frm01 td .addr input {width:20%}

theme/basic/head.sub.php

@@ -37,7 +37,7 @@ header("Pragma: no-cache"); // HTTP/1.0
 <meta charset="utf-8">
 <?php
 if (G5_IS_MOBILE) {
-    echo '<meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=0,maximum-scale=10,user-scalable=yes">'.PHP_EOL;
+    echo '<meta name="viewport" id="meta_viewport" content="width=device-width,initial-scale=1.0,minimum-scale=0,maximum-scale=10">'.PHP_EOL;
     echo '<meta name="HandheldFriendly" content="true">'.PHP_EOL;
     echo '<meta name="format-detection" content="telephone=no">'.PHP_EOL;
 } else {

theme/basic/mobile/skin/member/basic/password_reset.skin.php

@@ -12,7 +12,8 @@ add_stylesheet('<link rel="stylesheet" href="' . $member_skin_url . '/style.css"
             <fieldset id="info_fs">
                 <p>새로운 비밀번호를 입력해주세요.</p>
                 <label for="mb_id" class="sound_only">아이디</label>
-                <input type="text" name="mb_id" id="mb_id" value="<?php echo $_POST['mb_id']; ?>" required class="required frm_input full_input" size="30" placeholder="아이디" readonly>
+                <br>
+                <b>회원 아이디 : <?php echo $_POST['mb_id']; ?></b>
                 <label for="mb_pw" class="sound_only">새 비밀번호<strong class="sound_only">필수</strong></label>
                 <input type="password" name="mb_password" id="mb_pw" required class="required frm_input full_input" size="30" placeholder="새 비밀번호">
                 <label for="mb_pw2" class="sound_only">새 비밀번호 확인<strong class="sound_only">필수</strong></label>

theme/basic/mobile/skin/member/basic/register_form.skin.php

@@ -47,6 +47,8 @@ if ($config['cf_cert_use'] && ($config['cf_cert_simple'] || $config['cf_cert_ipi
         <ul>
             <li>
                 <?php 
+                $desc_name = '';
+                $desc_phone = '';
 	            if ($config['cf_cert_use']) {
                     $desc_name = ' - 본인확인 시 자동입력';
                     $desc_phone = ' - 본인확인 시 자동입력';

theme/basic/skin/latest/basic/style.css

@@ -7,7 +7,7 @@
 
 .lat ul {padding:10px 0}
 .lat li {position:relative;line-height:18px;border-bottom:1px solid #e5ecee;margin-bottom:10px}
-.lat li a {line-height:24px;font-weight:bold;font-size:1.2em;line-height:20px;vertical-align:middle}
+.lat li a {font-weight:bold;font-size:1.2em;line-height:20px;vertical-align:middle}
 .lat li a:hover {color:#3a8afd}
 .lat li .fa-heart {color:#ff0000}
 .lat li .fa-lock {display:inline-block;line-height:14px;width:16px;font-size:0.833em;color:#4f818c;background:#cbe3e8;text-align:center;border-radius:2px;font-size:12px;border:1px solid #cbe3e8;vertical-align:middle}

theme/basic/skin/member/basic/password_reset.skin.php

@@ -12,7 +12,8 @@ add_stylesheet('<link rel="stylesheet" href="' . $member_skin_url . '/style.css"
             <fieldset id="info_fs">
                 <p>새로운 비밀번호를 입력해주세요.</p>
                 <label for="mb_id" class="sound_only">아이디</label>
-                <input type="text" name="mb_id" id="mb_id" value="<?php echo $_POST['mb_id']; ?>" required class="required frm_input full_input" size="30" placeholder="아이디" readonly>
+                <br>
+                <b>회원 아이디 : <?php echo $_POST['mb_id']; ?></b>
                 <label for="mb_pw" class="sound_only">새 비밀번호<strong class="sound_only">필수</strong></label>
                 <input type="password" name="mb_password" id="mb_pw" required class="required frm_input full_input" size="30" placeholder="새 비밀번호">
                 <label for="mb_pw2" class="sound_only">새 비밀번호 확인<strong class="sound_only">필수</strong></label>

theme/basic/skin/member/basic/register_form.skin.php

@@ -53,7 +53,9 @@ if ($config['cf_cert_use'] && ($config['cf_cert_simple'] || $config['cf_cert_ipi
 	        <ul>
 				<li>
                     <?php 
-	                if ($config['cf_cert_use']) {
+					$desc_name = '';
+					$desc_phone = '';
+					if ($config['cf_cert_use']) {
                         $desc_name = '<span class="cert_desc"> 본인확인 시 자동입력</span>';
                         $desc_phone = '<span class="cert_desc"> 본인확인 시 자동입력</span>';
     

theme/basic/skin/shop/basic/listcategory3.skin.php

@@ -6,7 +6,7 @@ $exists = false;
 
 $depth2_ca_id = substr($ca_id, 0, 2);
 
-$sql = " select ca_id, ca_name from {$g5['g5_shop_category_table']} where ca_id like '${depth2_ca_id}%' and length(ca_id) = 4 and ca_use = '1' order by ca_order, ca_id ";
+$sql = " select ca_id, ca_name from {$g5['g5_shop_category_table']} where ca_id like '{$depth2_ca_id}%' and length(ca_id) = 4 and ca_use = '1' order by ca_order, ca_id ";
 $result = sql_query($sql);
 while ($row=sql_fetch_array($result)) {
     if (preg_match("/^{$row['ca_id']}/", $ca_id))

theme/basic/skin/shop/basic/style.css

@@ -266,7 +266,7 @@
 .sct_40 .sct_a:focus, .sct_40 .sct_a:hover {text-decoration:none}
 
 .sct_40 .sct_img {text-align:center;float:left;margin-right:20px}
-.sct_40 .sct_img a {display:block}
+.sct_40 .sct_img a {display:block;position:relative;z-index: 9999;}
 .sct_40 .sct_cart {position:absolute;right:0;bottom:0;border:0;width:150px;padding:15px 0;background:#000;background:rgba(0,0,0,0.5);color:#fff;font-size:1em;font-weight:bold;z-index:99999}
 .sct_40 .list-10-btn .sct_cart{z-index:1;top:40px;right:10px;bottom:initial;padding:8px 0;width:140px;border:1px solid #1c70e9;background:#3a8afd;color:#fff;cursor:pointer;border-radius:3px}
 .sct_40 .list-10-btn .sct_cart:hover {background:#2375eb}

version.php

@@ -2,7 +2,7 @@
 if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
 
 define('G5_VERSION', '그누보드5');
-define('G5_GNUBOARD_VER', '5.5.3.1');
+define('G5_GNUBOARD_VER', '5.5.7.2');
 // 그누보드5.4.5.5 버전과 영카트5.4.5.5.1 버전을 합쳐서 그누보드5.4.6 버전에서 시작함 (kagla-210617)
 // G5_YOUNGCART_VER 이 상수를 사용하는 곳이 있으므로 주석 처리 해제함
 // 그누보드5.4.6 이상 버전 부터는 영카트를 그누보드에 포함하여 배포하므로 영카트5의 버전은 의미가 없습니다.