From 31891fb882b0bfb60e46d1a3f8da0f0d5a6af39f Mon Sep 17 00:00:00 2001
From: chicpro <chicpro@gmail.com>
Date: Wed, 7 May 2014 10:35:09 +0900
Subject: [PATCH] =?UTF-8?q?=EC=83=81=ED=92=88=EB=AC=B8=EC=9D=98=20?=
 =?UTF-8?q?=EC=82=AC=EC=9A=A9=ED=9B=84=EA=B8=B0=EC=97=90=EC=84=9C=20it=5Fi?=
 =?UTF-8?q?d=20=EC=B2=B4=ED=81=AC=20=EC=BD=94=EB=93=9C=20=EC=B6=94?=
 =?UTF-8?q?=EA=B0=80=20-=20=EB=BD=81=EC=8A=A4=EB=8B=98=20=EC=A0=9C?=
 =?UTF-8?q?=EC=95=88?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 mobile/shop/itemqaform.php  | 6 ++++++
 mobile/shop/itemuseform.php | 6 ++++++
 shop/itemqaform.php         | 6 ++++++
 shop/itemuseform.php        | 6 ++++++
 4 files changed, 24 insertions(+)

diff --git a/mobile/shop/itemqaform.php b/mobile/shop/itemqaform.php
index 2a0275618..d3cb23f75 100644
--- a/mobile/shop/itemqaform.php
+++ b/mobile/shop/itemqaform.php
@@ -10,6 +10,12 @@ $w     = trim($_REQUEST['w']);
 $it_id = trim($_REQUEST['it_id']);
 $iq_id = trim($_REQUEST['iq_id']);
 
+// 상품정보체크
+$sql = " select it_id from {$g5['g5_shop_item_table']} where it_id = '$it_id' ";
+$row = sql_fetch($sql);
+if(!$row['it_id'])
+    alert_close('상품정보가 존재하지 않습니다.');
+
 $chk_secret = '';
 
 if($w == '') {
diff --git a/mobile/shop/itemuseform.php b/mobile/shop/itemuseform.php
index 88f88c0be..445145f6c 100644
--- a/mobile/shop/itemuseform.php
+++ b/mobile/shop/itemuseform.php
@@ -10,6 +10,12 @@ $w     = trim($_REQUEST['w']);
 $it_id = trim($_REQUEST['it_id']);
 $is_id = trim($_REQUEST['is_id']);
 
+// 상품정보체크
+$sql = " select it_id from {$g5['g5_shop_item_table']} where it_id = '$it_id' ";
+$row = sql_fetch($sql);
+if(!$row['it_id'])
+    alert_close('상품정보가 존재하지 않습니다.');
+
 if ($w == "") {
     $is_score = 5;
 
diff --git a/shop/itemqaform.php b/shop/itemqaform.php
index 67a969db9..41b44ed78 100644
--- a/shop/itemqaform.php
+++ b/shop/itemqaform.php
@@ -16,6 +16,12 @@ $w     = trim($_REQUEST['w']);
 $it_id = trim($_REQUEST['it_id']);
 $iq_id = trim($_REQUEST['iq_id']);
 
+// 상품정보체크
+$sql = " select it_id from {$g5['g5_shop_item_table']} where it_id = '$it_id' ";
+$row = sql_fetch($sql);
+if(!$row['it_id'])
+    alert_close('상품정보가 존재하지 않습니다.');
+
 $chk_secret = '';
 
 if($w == '') {
diff --git a/shop/itemuseform.php b/shop/itemuseform.php
index ad2366603..148b2adaf 100644
--- a/shop/itemuseform.php
+++ b/shop/itemuseform.php
@@ -16,6 +16,12 @@ $w     = trim($_REQUEST['w']);
 $it_id = trim($_REQUEST['it_id']);
 $is_id = trim($_REQUEST['is_id']);
 
+// 상품정보체크
+$sql = " select it_id from {$g5['g5_shop_item_table']} where it_id = '$it_id' ";
+$row = sql_fetch($sql);
+if(!$row['it_id'])
+    alert_close('상품정보가 존재하지 않습니다.');
+
 if ($w == "") {
     $is_score = 5;