diff --git a/mobile/shop/inicis/pay_approval.php b/mobile/shop/inicis/pay_approval.php index 82e4eecaa..ea5ebd7f9 100644 --- a/mobile/shop/inicis/pay_approval.php +++ b/mobile/shop/inicis/pay_approval.php @@ -12,7 +12,7 @@ $oid = trim($_REQUEST['P_NOTI']); $sql = " select * from {$g5['g5_shop_order_data_table']} where od_id = '$oid' "; $row = sql_fetch($sql); -$data = unserialize($row['dt_data']); +$data = unserialize(base64_decode($row['dt_data'])); if(isset($data['pp_id']) && $data['pp_id']) { $order_action_url = G5_HTTPS_MSHOP_URL.'/personalpayformupdate.php'; diff --git a/mobile/shop/inicis/pay_return.php b/mobile/shop/inicis/pay_return.php index 09f3b7643..af1d36e98 100644 --- a/mobile/shop/inicis/pay_return.php +++ b/mobile/shop/inicis/pay_return.php @@ -10,7 +10,7 @@ set_session('P_HASH', ''); $sql = " select * from {$g5['g5_shop_order_data_table']} where od_id = '$oid' "; $row = sql_fetch($sql); -$data = unserialize($row['dt_data']); +$data = unserialize(base64_decode($row['dt_data'])); if(isset($data['pp_id']) && $data['pp_id']) { $order_action_url = G5_HTTPS_MSHOP_URL.'/personalpayformupdate.php'; diff --git a/mobile/shop/kcp/order_approval_form.php b/mobile/shop/kcp/order_approval_form.php index 07ecbbbe3..89d97b163 100644 --- a/mobile/shop/kcp/order_approval_form.php +++ b/mobile/shop/kcp/order_approval_form.php @@ -218,7 +218,7 @@ if($enc_data != '' && $enc_info != '' && $tran_cd != '') { $sql = " select * from {$g5['g5_shop_order_data_table']} where od_id = '$ordr_idxx' "; $row = sql_fetch($sql); - $data = unserialize($row['dt_data']); + $data = unserialize(base64_decode($row['dt_data'])); if(isset($data['pp_id']) && $data['pp_id']) { $order_action_url = G5_HTTPS_MSHOP_URL.'/personalpayformupdate.php'; diff --git a/mobile/shop/lg/returnurl.php b/mobile/shop/lg/returnurl.php index f37dec4fd..388695897 100644 --- a/mobile/shop/lg/returnurl.php +++ b/mobile/shop/lg/returnurl.php @@ -25,7 +25,7 @@ $LGD_OID = $payReqMap['LGD_OID']; $sql = " select * from {$g5['g5_shop_order_data_table']} where od_id = '$LGD_OID' "; $row = sql_fetch($sql); -$data = unserialize($row['dt_data']); +$data = unserialize(base64_decode($row['dt_data'])); if(isset($data['pp_id']) && $data['pp_id']) { $order_action_url = G5_HTTPS_MSHOP_URL.'/personalpayformupdate.php'; diff --git a/shop/ajax.orderdatasave.php b/shop/ajax.orderdatasave.php index 615723e3d..1a3d2c3e9 100644 --- a/shop/ajax.orderdatasave.php +++ b/shop/ajax.orderdatasave.php @@ -16,7 +16,7 @@ sql_query($sql); $_POST['sw_direct'] = get_session('ss_direct'); -$dt_data = serialize($_POST); +$dt_data = base64_encode(serialize($_POST)); // 동일한 주문번호가 있는지 체크 $sql = " select count(*) as cnt from {$g5['g5_shop_order_data_table']} where od_id = '$od_id' ";