From dfa16adf3113a5fc60fc0eab51655ec633829c6a Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Tue, 24 Sep 2024 16:03:42 +0900
Subject: [PATCH] =?UTF-8?q?KG=EC=9D=B4=EB=8B=88=EC=8B=9C=EC=8A=A4=20?=
 =?UTF-8?q?=ED=86=B5=ED=95=A9=EC=9D=B8=EC=A6=9D=209032=20=EC=A4=91?=
 =?UTF-8?q?=EB=B3=B5=EB=90=9C=20=EC=A3=BC=EB=AC=B8=20=EC=97=90=EB=9F=AC?=
 =?UTF-8?q?=EC=99=80=20=ED=9A=8C=EC=9B=90=EC=A0=95=EB=B3=B4=20=EC=B0=BE?=
 =?UTF-8?q?=EA=B8=B0=20=EC=98=A4=EB=A5=98=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 plugin/inicert/ini_find_result.php | 12 ++++++++++++
 plugin/inicert/ini_request.php     |  5 +++--
 2 files changed, 15 insertions(+), 2 deletions(-)

diff --git a/plugin/inicert/ini_find_result.php b/plugin/inicert/ini_find_result.php
index 5352f21f4..6a4f56e33 100644
--- a/plugin/inicert/ini_find_result.php
+++ b/plugin/inicert/ini_find_result.php
@@ -1,8 +1,12 @@
 <?php
 include_once('./_common.php');
+require_once (dirname(__FILE__) .'/libs/KISA_SEED_CBC.php');
+require_once (dirname(__FILE__) .'/libs/INILib.php');
 
 $txId = isset($_POST['txId']) ? clean_xss_tags($_POST['txId'], 1, 1) : '';
 $mid  = substr($txId, 6, 10);
+$SEEDKEY = isset($_POST['token']) ? clean_xss_tags($_POST['token'], 1, 1) : '';
+$SEEDIV = 'SASHOSTSIRIAS000';
 
 if ($txId && isset($_POST["resultCode"]) && $_POST["resultCode"] === "0000") {
 
@@ -41,6 +45,14 @@ if ($txId && isset($_POST["resultCode"]) && $_POST["resultCode"] === "0000") {
         $birth_day      = $res_data['userBirthday'];            // 생년월일
         $ci             = $res_data['userCi'];                  // CI           
 
+        if (defined('KGINICIS_USE_CERT_SEED') && KGINICIS_USE_CERT_SEED) {
+            // 개인정보SEED 암호화 된것을 복호화 합니다.
+            $user_name = decrypt_SEED($user_name, $SEEDKEY, $SEEDIV);
+            $phone_no = decrypt_SEED($phone_no, $SEEDKEY, $SEEDIV);
+            $birth_day = decrypt_SEED($birth_day, $SEEDKEY, $SEEDIV);
+            $ci = decrypt_SEED($ci, $SEEDKEY, $SEEDIV);
+        }
+        
         @insert_cert_history($member['mb_id'], 'inicis', $cert_type); // 인증성공 시 내역 기록
 
         if(!$phone_no)
diff --git a/plugin/inicert/ini_request.php b/plugin/inicert/ini_request.php
index d7f4c110d..c2ba00537 100644
--- a/plugin/inicert/ini_request.php
+++ b/plugin/inicert/ini_request.php
@@ -9,13 +9,14 @@ if(empty($max_cr_id)) $max_cr_id = 0;
 if($config['cf_cert_use'] == 2) { // 실서비스 일때
     $mid = 'SRA'.$config['cf_cert_kg_mid']; // 부여받은 MID(상점ID) 입력(영업담당자 문의)
     $apiKey = $config['cf_cert_kg_cd'];   // 부여받은 MID 에 대한 apiKey
-    $mTxId ='SIR_'.$max_cr_id;
+    $mTxId ='SIR_'.substr($max_cr_id.'_'.round(microtime(true) * 1000), 0, 16);
     certify_count_check($member['mb_id'], 'simple'); // 금일 인증시도 횟수 체크
 } else { // 테스트 일때
     $mid = "SRAiasTest";
     $apiKey = "43700dfd4c795fe9550853aef3b6aaf1";
-    $mTxId ='SIR_'.$max_cr_id;
+    $mTxId ='SIR_'.substr($max_cr_id.'_'.round(microtime(true) * 1000), 0, 16);
 }
+
 $reqSvcCd ='01';    // 요청구분코드 ["01":간편인증, "02":전자서명]
 $reservedMsg = (defined('KGINICIS_USE_CERT_SEED') && KGINICIS_USE_CERT_SEED) ? 'isUseToken=Y' : '';   // 결과조회 응답시 개인정보SEED 암호화 처리 요청