From e120ed72e52ef17926ed249cfaf6e6505e0f6bc6 Mon Sep 17 00:00:00 2001
From: chicpro <chicpro@gmail.com>
Date: Thu, 27 Mar 2014 16:16:52 +0900
Subject: [PATCH] =?UTF-8?q?=EC=A3=BC=EB=AC=B8=EC=82=AD=EC=A0=9C=20?=
 =?UTF-8?q?=EC=98=A4=EB=A5=98=20=EC=88=98=EC=A0=95=20-=20=EA=B9=80?=
 =?UTF-8?q?=EC=B2=98=EB=A1=9C=EB=8B=98=20=EC=A0=9C=EB=B3=B4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/shop_admin/orderlistdelete.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/adm/shop_admin/orderlistdelete.php b/adm/shop_admin/orderlistdelete.php
index bbddb16f5..09d2aff75 100644
--- a/adm/shop_admin/orderlistdelete.php
+++ b/adm/shop_admin/orderlistdelete.php
@@ -15,7 +15,7 @@ for ($i=0; $i<count($_POST['chk']); $i++)
 
     $data = serialize($od);
 
-    $sql = " insert {$g5['g5_shop_order_delete_table']} set de_key = '$od_id', de_data = '$data', mb_id = '{$member['mb_id']}', de_ip = '{$_SERVER['REMOTE_ADDR']}', de_datetime = '".G5_TIME_YMDHIS."' ";
+    $sql = " insert {$g5['g5_shop_order_delete_table']} set de_key = '$od_id', de_data = '".addslashes($data)."', mb_id = '{$member['mb_id']}', de_ip = '{$_SERVER['REMOTE_ADDR']}', de_datetime = '".G5_TIME_YMDHIS."' ";
     sql_query($sql, true);
 
     $sql = " delete from {$g5['g5_shop_order_table']} where od_id = '$od_id' ";