From 6fe49ff1064461f8ca6de7b511640910c0fba140 Mon Sep 17 00:00:00 2001 From: projectSylas Date: Tue, 5 Oct 2021 02:17:34 +0000 Subject: [PATCH 01/31] =?UTF-8?q?=EC=83=81=EC=88=98=20G5=5FSEO=5FTITEL=5FW?= =?UTF-8?q?ORD=5FCUT=20=EC=9D=84=20G5=5FSEO=5FTITLE=5FWORD=5FCUT=20?= =?UTF-8?q?=EB=A1=9C=20=EC=88=98=EC=A0=95=20(sinbi=EB=8B=98,211005)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- config.php | 2 +- lib/uri.lib.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/config.php b/config.php index 2d568eb56..8ede1c127 100644 --- a/config.php +++ b/config.php @@ -158,7 +158,7 @@ define('G5_SPACE', 32); // 공백 define('G5_SPECIAL', 64); // 특수문자 // SEO TITLE 문단 길이 -define('G5_SEO_TITEL_WORD_CUT', 8); // SEO TITLE 문단 길이 +define('G5_SEO_TITLE_WORD_CUT', 8); // SEO TITLE 문단 길이 // 퍼미션 define('G5_DIR_PERMISSION', 0755); // 디렉토리 생성시 퍼미션 diff --git a/lib/uri.lib.php b/lib/uri.lib.php index 5561cd839..e1443ea8c 100644 --- a/lib/uri.lib.php +++ b/lib/uri.lib.php @@ -193,7 +193,7 @@ function correct_goto_url($url){ return $url; } -function generate_seo_title($string, $wordLimit=G5_SEO_TITEL_WORD_CUT){ +function generate_seo_title($string, $wordLimit=G5_SEO_TITLE_WORD_CUT){ $separator = '-'; if($wordLimit != 0){ From 650ea165230c55318a9f9ae8f79e78275934b9b6 Mon Sep 17 00:00:00 2001 From: kagla Date: Thu, 14 Oct 2021 14:42:49 +0900 Subject: [PATCH 02/31] =?UTF-8?q?shop=5Fis=5Ftaxsave=20=ED=95=A8=EC=88=98?= =?UTF-8?q?=EC=97=90=20$od=5Fpay=5Ftype=20=EB=B3=80=EC=88=98=EC=9D=98=20vb?= =?UTF-8?q?ank,=20transfer=20=EA=B0=80=20=EB=B0=94=EB=80=8C=EC=96=B4=20?= =?UTF-8?q?=EC=9E=88=EB=8A=94=20=EA=B2=83=EC=9D=84=20=EC=88=98=EC=A0=95=20?= =?UTF-8?q?(moons=EB=8B=98,211014)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- lib/shop.lib.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/shop.lib.php b/lib/shop.lib.php index faf569494..fc9331f6e 100644 --- a/lib/shop.lib.php +++ b/lib/shop.lib.php @@ -2455,9 +2455,9 @@ function shop_is_taxsave($od, $is_view_receipt=false){ if( $od['od_settle_case'] == '무통장' ){ $od_pay_type = 'account'; } else if ( $od['od_settle_case'] == '계좌이체' ) { - $od_pay_type = 'vbank'; - } else if ( $od['od_settle_case'] == '가상계좌' ) { $od_pay_type = 'transfer'; + } else if ( $od['od_settle_case'] == '가상계좌' ) { + $od_pay_type = 'vbank'; } if( $od_pay_type ) { From 24ba84d6f080bde8d73f4c49db67784f40a6abc5 Mon Sep 17 00:00:00 2001 From: kagla Date: Thu, 14 Oct 2021 14:49:20 +0900 Subject: [PATCH 03/31] =?UTF-8?q?KG=EC=9D=B4=EB=8B=88=EC=8B=9C=EC=8A=A4=20?= =?UTF-8?q?=EA=B0=80=EC=83=81=EA=B3=84=EC=A2=8C=20=EC=82=AC=EC=9A=A9?= =?UTF-8?q?=EC=8B=9C=20=EC=95=88=EB=82=B4=EB=AC=B8=EA=B5=AC=20=EC=A4=91=20?= =?UTF-8?q?=EA=B1=B0=EB=9E=98=EC=A1=B0=ED=9A=8C=EB=A5=BC=20=EA=B1=B0?= =?UTF-8?q?=EB=9E=98=EB=82=B4=EC=97=AD=EC=9C=BC=EB=A1=9C=20=EC=88=98?= =?UTF-8?q?=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- adm/shop_admin/configform.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/adm/shop_admin/configform.php b/adm/shop_admin/configform.php index 9cda6b00f..d34875e49 100644 --- a/adm/shop_admin/configform.php +++ b/adm/shop_admin/configform.php @@ -625,7 +625,7 @@ if(!$default['de_kakaopay_cancelpwd']){ KG이니시스 가상계좌 입금통보 URL - KG이니시스 관리자 > 거래조회 > 가상계좌 > 입금통보방식선택 > URL 수신 설정에 넣으셔야 상점에 자동으로 입금 통보됩니다."); ?> + KG이니시스 관리자 > 거래내역 > 가상계좌 > 입금통보방식선택 > URL 수신 설정에 넣으셔야 상점에 자동으로 입금 통보됩니다."); ?> /settle_inicis_common.php From 6dc462d7843bc09ccef08f1128cb4b445da1d6c9 Mon Sep 17 00:00:00 2001 From: kagla Date: Fri, 15 Oct 2021 16:04:17 +0900 Subject: [PATCH 04/31] =?UTF-8?q?(KVE-2021-0849)=20=ED=99=95=EC=9E=A5?= =?UTF-8?q?=EC=9E=90=20.phar=20=ED=8C=8C=EC=9D=BC=20=EC=97=85=EB=A1=9C?= =?UTF-8?q?=EB=93=9C=20=EC=B7=A8=EC=95=BD=EC=A0=90=20=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- bbs/qawrite_update.php | 2 +- bbs/write_update.php | 2 +- install/install_db.php | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/bbs/qawrite_update.php b/bbs/qawrite_update.php index 08c614e07..bf74ef3c7 100644 --- a/bbs/qawrite_update.php +++ b/bbs/qawrite_update.php @@ -217,7 +217,7 @@ for ($i=1; $i<=$upload_count; $i++) { $upload[$i]['filesize'] = $filesize; // 아래의 문자열이 들어간 파일은 -x 를 붙여서 웹경로를 알더라도 실행을 하지 못하도록 함 - $filename = preg_replace("/\.(php|pht|phtm|htm|cgi|pl|exe|jsp|asp|inc)/i", "$0-x", $filename); + $filename = preg_replace("/\.(php|pht|phtm|htm|cgi|pl|exe|jsp|asp|inc|phar)/i", "$0-x", $filename); shuffle($chars_array); $shuffle = implode('', $chars_array); diff --git a/bbs/write_update.php b/bbs/write_update.php index dbda388ef..f36c60add 100644 --- a/bbs/write_update.php +++ b/bbs/write_update.php @@ -561,7 +561,7 @@ if(isset($_FILES['bf_file']['name']) && is_array($_FILES['bf_file']['name'])) { $upload[$i]['filesize'] = $filesize; // 아래의 문자열이 들어간 파일은 -x 를 붙여서 웹경로를 알더라도 실행을 하지 못하도록 함 - $filename = preg_replace("/\.(php|pht|phtm|htm|cgi|pl|exe|jsp|asp|inc)/i", "$0-x", $filename); + $filename = preg_replace("/\.(php|pht|phtm|htm|cgi|pl|exe|jsp|asp|inc|phar)/i", "$0-x", $filename); shuffle($chars_array); $shuffle = implode('', $chars_array); diff --git a/install/install_db.php b/install/install_db.php index 60bdaccf0..09c6b96b6 100644 --- a/install/install_db.php +++ b/install/install_db.php @@ -632,10 +632,10 @@ fclose($f);
  • DB설정 파일 생성 완료 ()
    • + Order allow,deny Deny from all From 3a3434104c1b8a974f829b64d1dffcea3a6ad313 Mon Sep 17 00:00:00 2001 From: kagla Date: Fri, 15 Oct 2021 16:40:04 +0900 Subject: [PATCH 05/31] =?UTF-8?q?(KVE-2021-0755)=20=EB=A9=94=EB=89=B4?= =?UTF-8?q?=EC=9D=98=20=EB=A7=81=ED=81=AC=20=EA=B8=B0=EB=8A=A5=EC=9D=84=20?= =?UTF-8?q?=EC=9D=B4=EC=9A=A9=ED=95=9C=20XSS=20=EC=B7=A8=EC=95=BD=EC=A0=90?= =?UTF-8?q?=20=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- adm/menu_list_update.php | 1 + 1 file changed, 1 insertion(+) diff --git a/adm/menu_list_update.php b/adm/menu_list_update.php index f62ab4714..7c5e03141 100644 --- a/adm/menu_list_update.php +++ b/adm/menu_list_update.php @@ -26,6 +26,7 @@ for ($i=0; $i<$count; $i++) } $_POST['me_link'][$i] = is_array($_POST['me_link']) ? clean_xss_tags(clean_xss_attributes(preg_replace('/[ ]{2,}|[\t]/', '', $_POST['me_link'][$i]), 1)) : ''; + $_POST['me_link'][$i] = html_purifier($_POST['me_link'][$i]); $code = is_array($_POST['code']) ? strip_tags($_POST['code'][$i]) : ''; $me_name = is_array($_POST['me_name']) ? strip_tags($_POST['me_name'][$i]) : ''; From 9ada18ae56c959c553d8321d0110886d8e4aa1aa Mon Sep 17 00:00:00 2001 From: kagla Date: Mon, 18 Oct 2021 12:15:07 +0900 Subject: [PATCH 06/31] =?UTF-8?q?=EB=B2=84=EC=A0=84=205.4.17=20=EC=88=98?= =?UTF-8?q?=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- version.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/version.php b/version.php index e44e7b826..8fa1128b1 100644 --- a/version.php +++ b/version.php @@ -2,7 +2,7 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가 define('G5_VERSION', '그누보드5'); -define('G5_GNUBOARD_VER', '5.4.16'); +define('G5_GNUBOARD_VER', '5.4.17'); // 그누보드5.4.5.5 버전과 영카트5.4.5.5.1 버전을 합쳐서 그누보드5.4.6 버전에서 시작함 (kagla-210617) // G5_YOUNGCART_VER 이 상수를 사용하는 곳이 있으므로 주석 처리 해제함 // 그누보드5.4.6 이상 버전 부터는 영카트를 그누보드에 포함하여 배포하므로 영카트5의 버전은 의미가 없습니다. From de73f54959e76870faa438a7060dd93322f1b2f7 Mon Sep 17 00:00:00 2001 From: kagla Date: Tue, 19 Oct 2021 11:13:59 +0900 Subject: [PATCH 07/31] =?UTF-8?q?=EC=8B=A0=EC=9A=A9=EC=B9=B4=EB=93=9C=20?= =?UTF-8?q?=EA=B2=B0=EC=A0=9C=EC=B0=BD=EC=97=90=EC=84=9C=20=EB=84=A4?= =?UTF-8?q?=EC=9D=B4=EB=B2=84=ED=8E=98=EC=9D=B4=EB=A5=BC=20=EC=A7=80?= =?UTF-8?q?=EC=9B=90=ED=95=98=EB=AF=80=EB=A1=9C=20=EC=83=81=ED=92=88?= =?UTF-8?q?=EC=83=81=EC=84=B8=ED=8E=98=EC=9D=B4=EC=A7=80,=20=EC=9E=A5?= =?UTF-8?q?=EB=B0=94=EA=B5=AC=EB=8B=88=EC=97=90=EC=84=9C=20=EB=8D=94?= =?UTF-8?q?=EC=9D=B4=EC=83=81=20=EB=84=A4=EC=9D=B4=EB=B2=84=ED=8E=98?= =?UTF-8?q?=EC=9D=B4=20=EC=A7=81=EC=A0=91=EA=B2=B0=EC=A0=9C=EB=A5=BC=20?= =?UTF-8?q?=EC=A7=80=EC=9B=90=ED=95=98=EC=A7=80=20=EC=95=8A=EC=9D=8C?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- adm/shop_admin/configform.php | 2 ++ adm/shop_admin/configformupdate.php | 14 ++++++++------ shop.config.php | 4 ++++ shop/settle_naverpay.inc.php | 1 + 4 files changed, 15 insertions(+), 6 deletions(-) diff --git a/adm/shop_admin/configform.php b/adm/shop_admin/configform.php index d34875e49..2cc89e2fd 100644 --- a/adm/shop_admin/configform.php +++ b/adm/shop_admin/configform.php @@ -919,6 +919,7 @@ if(!$default['de_kakaopay_cancelpwd']){ + @@ -982,6 +983,7 @@ if(!$default['de_kakaopay_cancelpwd']){ + 에스크로 사용 diff --git a/adm/shop_admin/configformupdate.php b/adm/shop_admin/configformupdate.php index 3d31db95c..ae621cbf0 100644 --- a/adm/shop_admin/configformupdate.php +++ b/adm/shop_admin/configformupdate.php @@ -427,17 +427,19 @@ $sql = " update {$g5['g5_shop_default_table']} de_kakaopay_enckey = '{$de_kakaopay_enckey}', de_kakaopay_hashkey = '{$de_kakaopay_hashkey}', de_kakaopay_cancelpwd = '{$de_kakaopay_cancelpwd}', - de_naverpay_mid = '{$de_naverpay_mid}', - de_naverpay_cert_key = '{$de_naverpay_cert_key}', - de_naverpay_button_key = '{$de_naverpay_button_key}', - de_naverpay_test = '{$de_naverpay_test}', - de_naverpay_mb_id = '{$de_naverpay_mb_id}', - de_naverpay_sendcost = '{$de_naverpay_sendcost}', de_member_reg_coupon_use = '{$de_member_reg_coupon_use}', de_member_reg_coupon_term = '{$de_member_reg_coupon_term}', de_member_reg_coupon_price = '{$de_member_reg_coupon_price}', de_member_reg_coupon_minimum = '{$de_member_reg_coupon_minimum}' "; +if (defined('G5_SHOP_DIRECT_NAVERPAY') && G5_SHOP_DIRECT_NAVERPAY) { + $sql .= " ,de_naverpay_mid = '{$de_naverpay_mid}', + de_naverpay_cert_key = '{$de_naverpay_cert_key}', + de_naverpay_button_key = '{$de_naverpay_button_key}', + de_naverpay_test = '{$de_naverpay_test}', + de_naverpay_mb_id = '{$de_naverpay_mb_id}', + de_naverpay_sendcost = '{$de_naverpay_sendcost}' "; +} sql_query($sql); // 환경설정 > 포인트 사용 diff --git a/shop.config.php b/shop.config.php index bd219cdec..0b926680b 100644 --- a/shop.config.php +++ b/shop.config.php @@ -94,6 +94,10 @@ if(isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']=='on') { define('SHOP_TOSSPAYMENTS_CASHRECEIPT_TEST_JS', 'http://pgweb.tosspayments.com:7085/WEB_SERVER/js/receipt_link.js'); } +// 네이버페이를 신용카드 결제창에서 지원하고 있으므로 네이버에 직접신청하는 결제 기능을 미사용(false:기본설정) 합니다. (kagla,211019) +// 네이버에서 직접신청 결제를 사용(true)하시는 경우 모든 문제를 직접 해결해 주셔야 합니다. +define('G5_SHOP_DIRECT_NAVERPAY', false); // false 미사용(기본설정), true 사용 + /* // 주문상태 상수 define('G5_OD_STATUS_ORDER' , '입금확인중'); diff --git a/shop/settle_naverpay.inc.php b/shop/settle_naverpay.inc.php index 3fc9dd8b0..93c4b501b 100644 --- a/shop/settle_naverpay.inc.php +++ b/shop/settle_naverpay.inc.php @@ -1,5 +1,6 @@ Date: Fri, 22 Oct 2021 13:45:59 +0900 Subject: [PATCH 08/31] =?UTF-8?q?=EB=B9=84=EB=B0=80=20=EB=8C=93=EA=B8=80?= =?UTF-8?q?=20=EC=88=98=EC=A0=95=EC=8B=9C=20=EB=B9=84=EB=B0=80=EA=B8=80=20?= =?UTF-8?q?=ED=95=B4=EC=A0=9C=EA=B0=80=20=EB=90=98=EC=A7=80=20=EC=95=8A?= =?UTF-8?q?=EB=8A=94=20=EC=98=A4=EB=A5=98=EB=A5=BC=20=EC=88=98=EC=A0=95=20?= =?UTF-8?q?(=ED=95=9C=EB=B3=84=EC=95=84=EB=B9=A0=EB=8B=98,211022)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- bbs/write_comment_update.php | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/bbs/write_comment_update.php b/bbs/write_comment_update.php index 71e7c5c50..ed1984251 100644 --- a/bbs/write_comment_update.php +++ b/bbs/write_comment_update.php @@ -324,9 +324,7 @@ else if ($w == 'cu') // 댓글 수정 if (!$is_admin) $sql_ip = " , wr_ip = '{$_SERVER['REMOTE_ADDR']}' "; - $sql_secret = ""; - if ($wr_secret) - $sql_secret = " , wr_option = '$wr_secret' "; + $sql_secret = " , wr_option = '$wr_secret' "; $sql = " update $write_table set wr_subject = '$wr_subject', From 6148da1addd9a8e11651bfa64b4ccf5d03ec275a Mon Sep 17 00:00:00 2001 From: kagla Date: Thu, 21 Oct 2021 11:12:15 +0900 Subject: [PATCH 09/31] =?UTF-8?q?$BANK=5FCODE=20=EC=97=90=20=ED=86=A0?= =?UTF-8?q?=EC=8A=A4=EB=B1=85=ED=81=AC(92)=20=EC=B6=94=EA=B0=80?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- mobile/shop/settle_inicis.inc.php | 1 + shop/settle_inicis.inc.php | 1 + 2 files changed, 2 insertions(+) diff --git a/mobile/shop/settle_inicis.inc.php b/mobile/shop/settle_inicis.inc.php index b77f87151..503e165c7 100644 --- a/mobile/shop/settle_inicis.inc.php +++ b/mobile/shop/settle_inicis.inc.php @@ -54,6 +54,7 @@ $BANK_CODE = array( '88' => '신한은행', '89' => '케이뱅크', '90' => '카카오뱅크', + '92' => '토스뱅크', 'D1' => '동양종합금융증권', 'D2' => '현대증권', 'D3' => '미래에셋증권', diff --git a/shop/settle_inicis.inc.php b/shop/settle_inicis.inc.php index e63a9ab4c..8e502166f 100644 --- a/shop/settle_inicis.inc.php +++ b/shop/settle_inicis.inc.php @@ -102,6 +102,7 @@ $BANK_CODE = array( '88' => '신한은행', '89' => '케이뱅크', '90' => '카카오뱅크', + '92' => '토스뱅크', 'D1' => '동양종합금융증권', 'D2' => '현대증권', 'D3' => '미래에셋증권', From 413044ab06b6b9ec1041cf5793e6b8226669b6d5 Mon Sep 17 00:00:00 2001 From: kagla Date: Thu, 21 Oct 2021 11:16:49 +0900 Subject: [PATCH 10/31] =?UTF-8?q?=EC=9D=B4=ED=9B=84=20=EB=B2=84=EC=A0=84?= =?UTF-8?q?=EC=9D=98=20PHP=EC=97=90=EC=84=9C=EB=8A=94=20class=20=EC=97=90?= =?UTF-8?q?=20=EC=86=8D=ED=95=9C=20method(=ED=95=A8=EC=88=98)=20=EC=9D=B4?= =?UTF-8?q?=EB=A6=84=EC=9D=84=20class=20=EC=9D=B4=EB=A6=84=EA=B3=BC=20?= =?UTF-8?q?=EB=8F=99=EC=9D=BC=ED=95=98=EA=B2=8C=20=EB=A7=8C=EB=93=A4=20?= =?UTF-8?q?=EC=88=98=20=EC=97=86=EC=8A=B5=EB=8B=88=EB=8B=A4.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- shop/inicis/libs/sha256.inc.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/shop/inicis/libs/sha256.inc.php b/shop/inicis/libs/sha256.inc.php index e39cd63da..72386947b 100644 --- a/shop/inicis/libs/sha256.inc.php +++ b/shop/inicis/libs/sha256.inc.php @@ -73,7 +73,9 @@ if (!class_exists('nanoSha2')) var $platform; // Php 4 - 6 compatable constructor - function nanoSha2($toUpper = false) { + // PHP Deprecated: Methods with the same name as their class will not be constructors in a future version of PHP + // function nanoSha2($toUpper = false) { + function __construct($toUpper = false) { // Determine if the caller wants upper case or not. $this->toUpper = is_bool($toUpper) ? $toUpper From 6ee9b1fbf285a410b8d92b4689fc0d7ae6b4b637 Mon Sep 17 00:00:00 2001 From: projectSylas Date: Mon, 25 Oct 2021 01:22:50 +0000 Subject: [PATCH 11/31] =?UTF-8?q?PHP8=EC=97=90=EC=84=9C=20=EC=83=81?= =?UTF-8?q?=EB=8B=A8=20=ED=8C=8C=EC=9D=BC=20=EA=B2=BD=EB=A1=9C,=20?= =?UTF-8?q?=ED=95=98=EB=8B=A8=20=ED=8C=8C=EC=9D=BC=20=EA=B2=BD=EB=A1=9C?= =?UTF-8?q?=EA=B0=80=20=EC=97=86=EC=9D=84=EB=95=8C=20=EB=82=98=EC=98=A4?= =?UTF-8?q?=EB=8A=94=20=EC=98=A4=EB=A5=98=20=EC=88=98=EC=A0=95=20(?= =?UTF-8?q?=EB=A3=A8=EB=AF=B8=EC=A7=91=EC=82=AC=EB=8B=98,211025)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- bbs/board_head.php | 2 +- bbs/board_tail.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/bbs/board_head.php b/bbs/board_head.php index 96508e75d..2fb10c18c 100644 --- a/bbs/board_head.php +++ b/bbs/board_head.php @@ -7,7 +7,7 @@ if (G5_IS_MOBILE) { include_once(G5_BBS_PATH.'/_head.php'); echo html_purifier(stripslashes($board['bo_mobile_content_head'])); } else { - if(is_include_path_check($board['bo_include_head'])) { //파일경로 체크 + if($board['bo_include_head'] && is_include_path_check($board['bo_include_head'])) { //파일경로 체크 @include ($board['bo_include_head']); } else { //파일경로가 올바르지 않으면 기본파일을 가져옴 include_once(G5_BBS_PATH.'/_head.php'); diff --git a/bbs/board_tail.php b/bbs/board_tail.php index 9358c1b3f..87385e9fe 100644 --- a/bbs/board_tail.php +++ b/bbs/board_tail.php @@ -8,7 +8,7 @@ if (G5_IS_MOBILE) { include_once(G5_BBS_PATH.'/_tail.php'); } else { echo html_purifier(stripslashes($board['bo_content_tail'])); - if(is_include_path_check($board['bo_include_tail'])) { //파일경로 체크 + if($board['bo_include_tail'] && is_include_path_check($board['bo_include_tail'])) { //파일경로 체크 @include ($board['bo_include_tail']); } else { //파일경로가 올바르지 않으면 기본파일을 가져옴 include_once(G5_BBS_PATH.'/_tail.php'); From edb0b849d99d033d763d5b9da60b744ec6e44851 Mon Sep 17 00:00:00 2001 From: kagla Date: Mon, 25 Oct 2021 11:15:26 +0900 Subject: [PATCH 12/31] =?UTF-8?q?=EB=B2=84=EC=A0=84=205.4.18=20=EC=88=98?= =?UTF-8?q?=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- version.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/version.php b/version.php index 8fa1128b1..7224acd9a 100644 --- a/version.php +++ b/version.php @@ -2,7 +2,7 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가 define('G5_VERSION', '그누보드5'); -define('G5_GNUBOARD_VER', '5.4.17'); +define('G5_GNUBOARD_VER', '5.4.18'); // 그누보드5.4.5.5 버전과 영카트5.4.5.5.1 버전을 합쳐서 그누보드5.4.6 버전에서 시작함 (kagla-210617) // G5_YOUNGCART_VER 이 상수를 사용하는 곳이 있으므로 주석 처리 해제함 // 그누보드5.4.6 이상 버전 부터는 영카트를 그누보드에 포함하여 배포하므로 영카트5의 버전은 의미가 없습니다. From 7a054e1dbb0aa33c5496f3ba983c18f83ff67abd Mon Sep 17 00:00:00 2001 From: projectSylas Date: Thu, 11 Nov 2021 04:09:01 +0000 Subject: [PATCH 13/31] =?UTF-8?q?.gitignore=20=EC=97=90=20pma=20=EC=B6=94?= =?UTF-8?q?=EA=B0=80?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .gitignore | 1 + 1 file changed, 1 insertion(+) diff --git a/.gitignore b/.gitignore index 940c403cd..6be4686a4 100644 --- a/.gitignore +++ b/.gitignore @@ -17,3 +17,4 @@ naver*.html initests01/ SIRsoft000/ config.php +pma/ From 8c8bb94d6890b2a4964582398cd316a0d65e480e Mon Sep 17 00:00:00 2001 From: kagla Date: Wed, 24 Nov 2021 15:26:47 +0900 Subject: [PATCH 14/31] =?UTF-8?q?=EC=A0=91=EC=86=8D=EC=9E=90=EB=A1=9C?= =?UTF-8?q?=EA=B7=B8=EA=B0=80=20=EC=97=86=EC=9D=84=EB=95=8C=20=EB=85=84?= =?UTF-8?q?=EB=8F=84=EA=B0=80=200=EB=B6=80=ED=84=B0=20=EC=8B=9C=EC=9E=91?= =?UTF-8?q?=ED=95=98=EB=8A=94=20=EA=B2=83=EC=9D=84=20=ED=98=84=EC=9E=AC?= =?UTF-8?q?=EB=85=84=EB=8F=84=EA=B0=80=20=EB=82=98=EC=98=A4=EB=8F=84?= =?UTF-8?q?=EB=A1=9D=20=EC=88=98=EC=A0=95=20(=EB=8B=A4=EC=98=A8=ED=85=8C?= =?UTF-8?q?=EB=A7=88=EB=8B=98,211115)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- adm/visit_delete.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/adm/visit_delete.php b/adm/visit_delete.php index 16390c3ee..24d4436df 100644 --- a/adm/visit_delete.php +++ b/adm/visit_delete.php @@ -13,6 +13,9 @@ $row = sql_fetch($sql); $min_year = (int)substr($row['min_date'], 0, 4); $now_year = (int)substr(G5_TIME_YMD, 0, 4); +if (!$min_year) { + $min_year = $now_year; +} ?>
    From d87802eb946e378a9810385acf27f3a8859cc282 Mon Sep 17 00:00:00 2001 From: kagla Date: Wed, 8 Dec 2021 10:38:18 +0900 Subject: [PATCH 15/31] =?UTF-8?q?(KVE-2021-1846)=20url=20=EA=B0=92?= =?UTF-8?q?=EC=97=90=20Line=20feed=EC=9D=B8=20"%0A"=20=EA=B0=92=EC=9D=84?= =?UTF-8?q?=20=EC=82=BD=EC=9E=85=ED=95=98=EC=97=AC=20=EC=A0=84=EC=86=A1?= =?UTF-8?q?=ED=95=98=EB=8A=94=20=EA=B2=BD=EC=9A=B0=20check=5Furl=5Fhost=20?= =?UTF-8?q?=ED=95=A8=EC=88=98=20=EC=9A=B0=ED=9A=8C=20=EC=B7=A8=EC=95=BD?= =?UTF-8?q?=EC=A0=90=20=EC=88=98=EC=A0=95=20(Pocas=EB=8B=98)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- lib/common.lib.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/common.lib.php b/lib/common.lib.php index b6bb9837c..8608ddd29 100644 --- a/lib/common.lib.php +++ b/lib/common.lib.php @@ -3299,7 +3299,7 @@ function check_url_host($url, $msg='', $return_url=G5_URL, $is_redirect=false) if(!$msg) $msg = 'url에 타 도메인을 지정할 수 없습니다.'; - $p = @parse_url($url); + $p = @parse_url(trim($url)); $host = preg_replace('/:[0-9]+$/', '', $_SERVER['HTTP_HOST']); $is_host_check = false; From 80a71fef56d4f69e8bac5cc7cd5d8b8b0b0a45bb Mon Sep 17 00:00:00 2001 From: kagla Date: Wed, 8 Dec 2021 12:28:24 +0900 Subject: [PATCH 16/31] =?UTF-8?q?=EC=84=A4=EC=B9=98=EC=8B=9C=20data/file/?= =?UTF-8?q?=20=EB=94=94=EB=A0=89=ED=86=A0=EB=A6=AC=EC=97=90=20=EA=B8=B0?= =?UTF-8?q?=EB=B3=B8=EA=B2=8C=EC=8B=9C=ED=8C=90=20=EB=94=94=EB=A0=89?= =?UTF-8?q?=ED=86=A0=EB=A6=AC(free,=20gallery,=20notice,=20qa)=EA=B0=80=20?= =?UTF-8?q?=EB=A7=8C=EB=93=A4=EC=96=B4=EC=A7=80=EC=A7=80=20=EC=95=8A?= =?UTF-8?q?=EB=8A=94=20=EC=98=A4=EB=A5=98=20=EC=88=98=EC=A0=95=20(?= =?UTF-8?q?=EC=9E=91=EC=9D=80=EB=B3=84=EB=8B=98,211206)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- install/install_db.php | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/install/install_db.php b/install/install_db.php index 09c6b96b6..b5ed70b38 100644 --- a/install/install_db.php +++ b/install/install_db.php @@ -529,6 +529,13 @@ for ($i=0; $i Date: Thu, 9 Dec 2021 10:45:48 +0900 Subject: [PATCH 17/31] =?UTF-8?q?url=EC=97=90=20=ED=83=80=EB=8F=84?= =?UTF-8?q?=EB=A9=94=EC=9D=B8=EC=9D=84=20=EC=A7=80=EC=A0=95=ED=95=A0=20?= =?UTF-8?q?=EC=88=98=20=EC=9E=88=EB=8A=94=20=EC=98=A4=EB=A5=98=20=EC=88=98?= =?UTF-8?q?=EC=A0=95=20(Pocas=EB=8B=98,211208)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- lib/common.lib.php | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/common.lib.php b/lib/common.lib.php index 8608ddd29..83ef9c3b0 100644 --- a/lib/common.lib.php +++ b/lib/common.lib.php @@ -3299,6 +3299,7 @@ function check_url_host($url, $msg='', $return_url=G5_URL, $is_redirect=false) if(!$msg) $msg = 'url에 타 도메인을 지정할 수 없습니다.'; + $url = urldecode($url); $p = @parse_url(trim($url)); $host = preg_replace('/:[0-9]+$/', '', $_SERVER['HTTP_HOST']); $is_host_check = false; From 796b6d9ab135048c334182c0f959e5a0c1dcbe16 Mon Sep 17 00:00:00 2001 From: kagla Date: Thu, 9 Dec 2021 10:48:40 +0900 Subject: [PATCH 18/31] =?UTF-8?q?=EB=B2=84=EC=A0=84=205.4.19=20=EC=88=98?= =?UTF-8?q?=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- version.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/version.php b/version.php index 7224acd9a..0cfde7b1f 100644 --- a/version.php +++ b/version.php @@ -2,7 +2,7 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가 define('G5_VERSION', '그누보드5'); -define('G5_GNUBOARD_VER', '5.4.18'); +define('G5_GNUBOARD_VER', '5.4.19'); // 그누보드5.4.5.5 버전과 영카트5.4.5.5.1 버전을 합쳐서 그누보드5.4.6 버전에서 시작함 (kagla-210617) // G5_YOUNGCART_VER 이 상수를 사용하는 곳이 있으므로 주석 처리 해제함 // 그누보드5.4.6 이상 버전 부터는 영카트를 그누보드에 포함하여 배포하므로 영카트5의 버전은 의미가 없습니다. From 2e81619ea87bc9c0b4a073d8df3c7693a6fdbf0d Mon Sep 17 00:00:00 2001 From: kagla Date: Tue, 14 Dec 2021 16:10:41 +0900 Subject: [PATCH 19/31] =?UTF-8?q?$kind=20=EB=B3=80=EC=88=98=EB=A5=BC=20?= =?UTF-8?q?=EC=9D=B4=EC=9A=A9=ED=95=9C=20XSS=20=EC=B7=A8=EC=95=BD=EC=A0=90?= =?UTF-8?q?=20=EC=88=98=EC=A0=95=20(Pocas=EB=8B=98,211214)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- bbs/memo.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/bbs/memo.php b/bbs/memo.php index 8dc446c13..86ffb7930 100644 --- a/bbs/memo.php +++ b/bbs/memo.php @@ -15,8 +15,10 @@ if ($kind == 'recv') $unkind = 'send'; else if ($kind == 'send') $unkind = 'recv'; -else +else { + $kind = clean_xss_tags(trim($kind)); alert(''.$kind .'값을 넘겨주세요.'); +} if ($page < 1) { $page = 1; } // 페이지가 없으면 첫 페이지 (1 페이지) From dfa677aadb9b224fc3b5d91c56abb49cf801c8e0 Mon Sep 17 00:00:00 2001 From: projectSylas Date: Wed, 15 Dec 2021 11:32:06 +0900 Subject: [PATCH 20/31] =?UTF-8?q?=EC=87=BC=ED=95=91=EB=AA=B0=20=EA=B2=80?= =?UTF-8?q?=EC=83=89=EC=8B=9C=20PC=EC=9D=98=20'=EC=A0=84=EC=B2=B4=EB=B6=84?= =?UTF-8?q?=EB=A5=98'=EA=B0=80=200=EC=9C=BC=EB=A1=9C=20=ED=91=9C=EC=8B=9C?= =?UTF-8?q?=EB=90=98=EB=8A=94=20=EC=98=A4=EB=A5=98=20=EC=88=98=EC=A0=95=20?= =?UTF-8?q?(=EC=BD=9C=EB=9D=BC=EC=8B=9C=EB=9F=AC=EB=8B=98,211215)=20?= =?UTF-8?q?=EC=A0=84=EC=B2=B4=EB=B6=84=EB=A5=98=EA=B0=80=20=EC=95=9E?= =?UTF-8?q?=EC=97=90=20=EB=82=98=EC=98=A4=EB=8F=84=EB=A1=9D=20=EC=88=98?= =?UTF-8?q?=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- mobile/skin/shop/basic/search.skin.php | 2 +- skin/shop/basic/search.skin.php | 2 +- theme/basic/mobile/skin/shop/basic/search.skin.php | 2 +- theme/basic/skin/shop/basic/search.skin.php | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/mobile/skin/shop/basic/search.skin.php b/mobile/skin/shop/basic/search.skin.php index 5bd7323c1..0f07cb3b6 100644 --- a/mobile/skin/shop/basic/search.skin.php +++ b/mobile/skin/shop/basic/search.skin.php @@ -44,12 +44,12 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
    diff --git a/skin/shop/basic/search.skin.php b/skin/shop/basic/search.skin.php index 5b05d53a7..66f624fa0 100644 --- a/skin/shop/basic/search.skin.php +++ b/skin/shop/basic/search.skin.php @@ -42,8 +42,8 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
      전체분류 ('.$total_count.')'.PHP_EOL; $total_cnt = 0; - echo '
    • 전체분류 ('.$total_cnt.')
      • '.PHP_EOL; foreach((array) $categorys as $row){ if( empty($row) ) continue; echo "
    • {$row['ca_name']} (".$row['cnt'].")
      • \n"; diff --git a/theme/basic/mobile/skin/shop/basic/search.skin.php b/theme/basic/mobile/skin/shop/basic/search.skin.php index 5bd7323c1..0f07cb3b6 100644 --- a/theme/basic/mobile/skin/shop/basic/search.skin.php +++ b/theme/basic/mobile/skin/shop/basic/search.skin.php @@ -44,12 +44,12 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
      diff --git a/theme/basic/skin/shop/basic/search.skin.php b/theme/basic/skin/shop/basic/search.skin.php index c20e9fcbe..e1cf4bace 100644 --- a/theme/basic/skin/shop/basic/search.skin.php +++ b/theme/basic/skin/shop/basic/search.skin.php @@ -42,8 +42,8 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
        전체분류 ('.$total_count.')'.PHP_EOL; $total_cnt = 0; - echo '
      • 전체분류 ('.$total_cnt.')
        • '.PHP_EOL; foreach((array) $categorys as $row){ if( empty($row) ) continue; echo "
      • {$row['ca_name']} (".$row['cnt'].")
        • \n"; From 72e041db1026f0fcbe49722ea2c731444392066e Mon Sep 17 00:00:00 2001 From: projectSylas Date: Tue, 21 Dec 2021 07:41:14 +0000 Subject: [PATCH 21/31] =?UTF-8?q?dlab=20:=20kgcert=EB=A5=BC=20inicert?= =?UTF-8?q?=EB=A1=9C=20=EC=88=98=EC=A0=95,=20=EB=AC=B8=EA=B5=AC=20kg=20->?= =?UTF-8?q?=20ini=EB=A1=9C=20=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- common.php | 4 ++-- config.php | 2 +- mobile/skin/member/basic/member_cert_refresh.skin.php | 2 +- mobile/skin/member/basic/password_lost.skin.php | 2 +- mobile/skin/member/basic/register_form.skin.php | 2 +- mobile/skin/social/social_register_member.skin.php | 2 +- plugin/{kgcert => inicert}/_common.php | 0 plugin/{kgcert => inicert}/kg_find_result.php | 6 +++--- plugin/{kgcert => inicert}/kg_request.php | 4 ++-- plugin/{kgcert => inicert}/kg_result.php | 9 ++++----- skin/member/basic/member_cert_refresh.skin.php | 2 +- skin/member/basic/password_lost.skin.php | 2 +- skin/member/basic/register_form.skin.php | 2 +- skin/social/social_register_member.skin.php | 2 +- .../skin/member/basic/member_cert_refresh.skin.php | 2 +- .../mobile/skin/member/basic/password_lost.skin.php | 2 +- .../mobile/skin/member/basic/register_form.skin.php | 2 +- .../basic/skin/member/basic/member_cert_refresh.skin.php | 2 +- theme/basic/skin/member/basic/password_lost.skin.php | 2 +- theme/basic/skin/member/basic/register_form.skin.php | 2 +- 20 files changed, 26 insertions(+), 27 deletions(-) rename plugin/{kgcert => inicert}/_common.php (100%) rename plugin/{kgcert => inicert}/kg_find_result.php (96%) rename plugin/{kgcert => inicert}/kg_request.php (97%) rename plugin/{kgcert => inicert}/kg_result.php (94%) diff --git a/common.php b/common.php index 0030015c3..5377de56b 100644 --- a/common.php +++ b/common.php @@ -299,8 +299,8 @@ if( !function_exists('shop_check_is_pay_page') ){ $mobile_dir.'/'.$shop_dir.'/lg/xpay_approval.php', $mobile_dir.'/'.$shop_dir.'/kcp/order_approval_form.php', $shop_dir.'/kakaopay/inicis_kk_return.php', // 이니시스 카카오페이 (SIRK 로 시작하는 아이디 전용) - $plugin_dir."/kgcert/kg_result.php", // 이니시스 통합인증 모듈 2021-09-10 http <-> https 간 세션 공유 문제로 인해 추가 - $plugin_dir."/kgcert/kg_find_result.php", // 이니시스 통합인증 모듈 2021-09-10 http <-> https 간 세션 공유 문제로 인해 추가 + $plugin_dir."/inicert/ini_result.php", // 이니시스 통합인증 모듈 2021-09-10 http <-> https 간 세션 공유 문제로 인해 추가 + $plugin_dir."/inicert/ini_find_result.php", // 이니시스 통합인증 모듈 2021-09-10 http <-> https 간 세션 공유 문제로 인해 추가 ); $server_script_name = str_replace('\\', '/', $_SERVER['SCRIPT_NAME']); diff --git a/config.php b/config.php index bb9324a76..70e334c3f 100644 --- a/config.php +++ b/config.php @@ -59,7 +59,7 @@ define('G5_MOBILE_DIR', 'mobile'); define('G5_OKNAME_DIR', 'okname'); define('G5_KCPCERT_DIR', 'kcpcert'); -define('G5_KGCERT_DIR', 'kgcert'); +define('G5_INICERT_DIR', 'inicert'); define('G5_LGXPAY_DIR', 'lgxpay'); define('G5_SNS_DIR', 'sns'); diff --git a/mobile/skin/member/basic/member_cert_refresh.skin.php b/mobile/skin/member/basic/member_cert_refresh.skin.php index a7ab202f1..1b72d56c0 100644 --- a/mobile/skin/member/basic/member_cert_refresh.skin.php +++ b/mobile/skin/member/basic/member_cert_refresh.skin.php @@ -85,7 +85,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] // 이니시스 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; diff --git a/mobile/skin/member/basic/password_lost.skin.php b/mobile/skin/member/basic/password_lost.skin.php index f2ee12720..f897f18b6 100644 --- a/mobile/skin/member/basic/password_lost.skin.php +++ b/mobile/skin/member/basic/password_lost.skin.php @@ -58,7 +58,7 @@ $(function() { // TOSS 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; diff --git a/mobile/skin/member/basic/register_form.skin.php b/mobile/skin/member/basic/register_form.skin.php index 15fcbaf78..e3b7212f1 100644 --- a/mobile/skin/member/basic/register_form.skin.php +++ b/mobile/skin/member/basic/register_form.skin.php @@ -295,7 +295,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] // 이니시스 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; diff --git a/mobile/skin/social/social_register_member.skin.php b/mobile/skin/social/social_register_member.skin.php index 38f6b3ae7..eebe401b5 100644 --- a/mobile/skin/social/social_register_member.skin.php +++ b/mobile/skin/social/social_register_member.skin.php @@ -219,7 +219,7 @@ $email_msg = $is_exists_email ? '등록할 이메일이 중복되었습니다. // 이니시스 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; diff --git a/plugin/kgcert/_common.php b/plugin/inicert/_common.php similarity index 100% rename from plugin/kgcert/_common.php rename to plugin/inicert/_common.php diff --git a/plugin/kgcert/kg_find_result.php b/plugin/inicert/kg_find_result.php similarity index 96% rename from plugin/kgcert/kg_find_result.php rename to plugin/inicert/kg_find_result.php index 7a0eb1c2f..420c57bd9 100644 --- a/plugin/kgcert/kg_find_result.php +++ b/plugin/inicert/kg_find_result.php @@ -29,15 +29,15 @@ if ($_POST["resultCode"] === "0000") { if($res_data['resultCode'] === "0000") { - @insert_cert_history($member['mb_id'], 'kg', 'sa'); // 인증성공 시 내역 기록 - $cert_type = 'sa'; // 인증타입 $cert_no = $res_data['txId']; // 이니시스 트랜잭션 ID $phone_no = $res_data['userPhone']; // 전화번호 $user_name = $res_data['userName']; // 이름 $birth_day = $res_data['userBirthday']; // 생년월일 $ci = $res_data['userCi']; // CI - + + @insert_cert_history($member['mb_id'], 'inicis', $cert_type); // 인증성공 시 내역 기록 + if(!$phone_no) alert_close("정상적인 인증이 아닙니다. 올바른 방법으로 이용해 주세요."); diff --git a/plugin/kgcert/kg_request.php b/plugin/inicert/kg_request.php similarity index 97% rename from plugin/kgcert/kg_request.php rename to plugin/inicert/kg_request.php index c875d661f..814f1e45c 100644 --- a/plugin/kgcert/kg_request.php +++ b/plugin/inicert/kg_request.php @@ -44,10 +44,10 @@ if($flgFixedUser == 'Y') { switch($_GET['pageType']) { case "register": - $resultPage = "/kg_result.php"; + $resultPage = "/ini_result.php"; break; case "find": - $resultPage = "/kg_find_result.php"; + $resultPage = "/ini_find_result.php"; break; default: alert_close('잘못된 접근입니다.'); diff --git a/plugin/kgcert/kg_result.php b/plugin/inicert/kg_result.php similarity index 94% rename from plugin/kgcert/kg_result.php rename to plugin/inicert/kg_result.php index 7c6d08e07..84472fba4 100644 --- a/plugin/kgcert/kg_result.php +++ b/plugin/inicert/kg_result.php @@ -31,16 +31,15 @@ if ($_POST["resultCode"] === "0000") { // echo $response; if($res_data['resultCode'] === "0000") { - - @insert_cert_history($member['mb_id'], 'kg', 'sa'); // 인증성공 시 내역 기록 - $cert_type = 'sa'; // 인증타입 $cert_no = $res_data['txId']; // 이니시스 트랜잭션 ID $phone_no = $res_data['userPhone']; // 전화번호 $user_name = $res_data['userName']; // 이름 $birth_day = $res_data['userBirthday']; // 생년월일 $ci = $res_data['userCi']; // CI - + + @insert_cert_history($member['mb_id'], 'inicis', $cert_type); // 인증성공 시 내역 기록 + if(!$phone_no) alert_close("정상적인 인증이 아닙니다. 올바른 방법으로 이용해 주세요."); @@ -51,7 +50,7 @@ if ($_POST["resultCode"] === "0000") { $sql = " select mb_id from {$g5['member_table']} where mb_id <> '{$member['mb_id']}' and mb_dupinfo = '{$mb_dupinfo}' "; $row = sql_fetch($sql); if (!empty($row['mb_id'])) { - alert_close("입력하신 본인확인 정보로 가입된 내역이 존재합니다.\\n회원아이디 : ".$row['mb_id']); + alert_close("입력하신 본인확인 정보로 이미 가입된 내역이 존재합니다.\\n회원아이디 : ".$row['mb_id']); } // hash 데이터 diff --git a/skin/member/basic/member_cert_refresh.skin.php b/skin/member/basic/member_cert_refresh.skin.php index 4300c7a7f..5ab081cd0 100644 --- a/skin/member/basic/member_cert_refresh.skin.php +++ b/skin/member/basic/member_cert_refresh.skin.php @@ -81,7 +81,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] // 이니시스 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; diff --git a/skin/member/basic/password_lost.skin.php b/skin/member/basic/password_lost.skin.php index a09329284..033907977 100644 --- a/skin/member/basic/password_lost.skin.php +++ b/skin/member/basic/password_lost.skin.php @@ -58,7 +58,7 @@ $(function() { // TOSS 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; diff --git a/skin/member/basic/register_form.skin.php b/skin/member/basic/register_form.skin.php index 5a4dd72b9..44682b42d 100644 --- a/skin/member/basic/register_form.skin.php +++ b/skin/member/basic/register_form.skin.php @@ -307,7 +307,7 @@ $(function() { // 이니시스 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; diff --git a/skin/social/social_register_member.skin.php b/skin/social/social_register_member.skin.php index 124d4f92d..2c9e0c660 100644 --- a/skin/social/social_register_member.skin.php +++ b/skin/social/social_register_member.skin.php @@ -220,7 +220,7 @@ $email_msg = $is_exists_email ? '등록할 이메일이 중복되었습니다. // 이니시스 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; diff --git a/theme/basic/mobile/skin/member/basic/member_cert_refresh.skin.php b/theme/basic/mobile/skin/member/basic/member_cert_refresh.skin.php index 673848e79..6376369dc 100644 --- a/theme/basic/mobile/skin/member/basic/member_cert_refresh.skin.php +++ b/theme/basic/mobile/skin/member/basic/member_cert_refresh.skin.php @@ -85,7 +85,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] // 이니시스 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; diff --git a/theme/basic/mobile/skin/member/basic/password_lost.skin.php b/theme/basic/mobile/skin/member/basic/password_lost.skin.php index a09329284..033907977 100644 --- a/theme/basic/mobile/skin/member/basic/password_lost.skin.php +++ b/theme/basic/mobile/skin/member/basic/password_lost.skin.php @@ -58,7 +58,7 @@ $(function() { // TOSS 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; diff --git a/theme/basic/mobile/skin/member/basic/register_form.skin.php b/theme/basic/mobile/skin/member/basic/register_form.skin.php index fa8a2cfce..0289ba005 100644 --- a/theme/basic/mobile/skin/member/basic/register_form.skin.php +++ b/theme/basic/mobile/skin/member/basic/register_form.skin.php @@ -294,7 +294,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] // 이니시스 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; diff --git a/theme/basic/skin/member/basic/member_cert_refresh.skin.php b/theme/basic/skin/member/basic/member_cert_refresh.skin.php index 4300c7a7f..5ab081cd0 100644 --- a/theme/basic/skin/member/basic/member_cert_refresh.skin.php +++ b/theme/basic/skin/member/basic/member_cert_refresh.skin.php @@ -81,7 +81,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] // 이니시스 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; diff --git a/theme/basic/skin/member/basic/password_lost.skin.php b/theme/basic/skin/member/basic/password_lost.skin.php index a09329284..033907977 100644 --- a/theme/basic/skin/member/basic/password_lost.skin.php +++ b/theme/basic/skin/member/basic/password_lost.skin.php @@ -58,7 +58,7 @@ $(function() { // TOSS 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; diff --git a/theme/basic/skin/member/basic/register_form.skin.php b/theme/basic/skin/member/basic/register_form.skin.php index ceae001a8..b05c5ad94 100644 --- a/theme/basic/skin/member/basic/register_form.skin.php +++ b/theme/basic/skin/member/basic/register_form.skin.php @@ -307,7 +307,7 @@ $(function() { // 이니시스 통합인증 - var url = "/kg_request.php"; + var url = "/ini_request.php"; var type = ""; var params = ""; var request_url = ""; From 26f6b802b71044dd807e770ded1bc449610dc9dc Mon Sep 17 00:00:00 2001 From: kagla Date: Wed, 22 Dec 2021 10:37:15 +0900 Subject: [PATCH 22/31] =?UTF-8?q?SMS5=20=EC=86=94=EB=A3=A8=EC=85=98=20?= =?UTF-8?q?=EC=84=A4=EC=B9=98=EC=8B=9C=20=EB=B6=88=ED=95=84=EC=9A=94?= =?UTF-8?q?=ED=95=9C=20=EB=B3=80=EC=88=98=20=EC=82=AD=EC=A0=9C=20(?= =?UTF-8?q?=EC=9E=91=EC=9D=80=EB=B3=84=EB=8B=98,211222)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- adm/sms_admin/install.php | 5 ----- 1 file changed, 5 deletions(-) diff --git a/adm/sms_admin/install.php b/adm/sms_admin/install.php index c5405c3d2..afd88fb83 100644 --- a/adm/sms_admin/install.php +++ b/adm/sms_admin/install.php @@ -61,11 +61,6 @@ for ($i=0; $idocument.getElementById('sms5_job_01').innerHTML='전체 테이블 생성 완료';"; flush(); usleep(50000); -$read_point = -1; -$write_point = 5; -$comment_point = 1; -$download_point = -20; - //------------------------------------------------------------------------------------------------- // config 테이블 설정 $sql = " insert into {$g5['sms5_book_group_table']} set bg_name='미분류'"; From f8480a41c8cf89c54b551204eb068fb3276d90c0 Mon Sep 17 00:00:00 2001 From: kagla Date: Wed, 22 Dec 2021 10:52:27 +0900 Subject: [PATCH 23/31] =?UTF-8?q?=EC=A4=91=EB=B3=B5=EB=90=9C=20=20?= =?UTF-8?q?=ED=83=9C=EA=B7=B8=20=ED=95=9C=EA=B0=9C=20=EC=82=AD=EC=A0=9C=20?= =?UTF-8?q?(=EA=B9=80=EC=B2=A0=EC=9A=A9=EB=8B=98,211222)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- skin/qa/basic/view.skin.php | 2 +- theme/basic/skin/qa/basic/view.skin.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/skin/qa/basic/view.skin.php b/skin/qa/basic/view.skin.php index a8db766a5..a47b8528d 100644 --- a/skin/qa/basic/view.skin.php +++ b/skin/qa/basic/view.skin.php @@ -123,7 +123,7 @@ add_stylesheet('', 0); diff --git a/theme/basic/skin/qa/basic/view.skin.php b/theme/basic/skin/qa/basic/view.skin.php index a8db766a5..a47b8528d 100644 --- a/theme/basic/skin/qa/basic/view.skin.php +++ b/theme/basic/skin/qa/basic/view.skin.php @@ -123,7 +123,7 @@ add_stylesheet('', 0); From 20c94e5b0af4bb4fa46972f57815857c904fb694 Mon Sep 17 00:00:00 2001 From: kagla Date: Tue, 14 Dec 2021 16:10:41 +0900 Subject: [PATCH 24/31] =?UTF-8?q?[=EB=B3=B4=EC=95=88=ED=8C=A8=EC=B9=98]=20?= =?UTF-8?q?$kind=20=EB=B3=80=EC=88=98=EB=A5=BC=20=EC=9D=B4=EC=9A=A9?= =?UTF-8?q?=ED=95=9C=20XSS=20=EC=B7=A8=EC=95=BD=EC=A0=90=20=EC=88=98?= =?UTF-8?q?=EC=A0=95=20(Pocas=EB=8B=98,211214)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- bbs/memo.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/bbs/memo.php b/bbs/memo.php index 8dc446c13..86ffb7930 100644 --- a/bbs/memo.php +++ b/bbs/memo.php @@ -15,8 +15,10 @@ if ($kind == 'recv') $unkind = 'send'; else if ($kind == 'send') $unkind = 'recv'; -else +else { + $kind = clean_xss_tags(trim($kind)); alert(''.$kind .'값을 넘겨주세요.'); +} if ($page < 1) { $page = 1; } // 페이지가 없으면 첫 페이지 (1 페이지) From a73967dd9a4218b7a75d58814fcc56c1290862bb Mon Sep 17 00:00:00 2001 From: kagla Date: Wed, 22 Dec 2021 11:05:18 +0900 Subject: [PATCH 25/31] =?UTF-8?q?=EB=B2=84=EC=A0=84=205.4.20=20=EC=88=98?= =?UTF-8?q?=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- version.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/version.php b/version.php index 0cfde7b1f..d52b1eabd 100644 --- a/version.php +++ b/version.php @@ -2,7 +2,7 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가 define('G5_VERSION', '그누보드5'); -define('G5_GNUBOARD_VER', '5.4.19'); +define('G5_GNUBOARD_VER', '5.4.20'); // 그누보드5.4.5.5 버전과 영카트5.4.5.5.1 버전을 합쳐서 그누보드5.4.6 버전에서 시작함 (kagla-210617) // G5_YOUNGCART_VER 이 상수를 사용하는 곳이 있으므로 주석 처리 해제함 // 그누보드5.4.6 이상 버전 부터는 영카트를 그누보드에 포함하여 배포하므로 영카트5의 버전은 의미가 없습니다. From 4305e6c8cc480febb45ca1432d0606c279c1a67a Mon Sep 17 00:00:00 2001 From: projectSylas Date: Wed, 22 Dec 2021 05:51:24 +0000 Subject: [PATCH 26/31] =?UTF-8?q?=ED=86=B5=ED=95=A9=EC=9D=B8=EC=A6=9D=20:?= =?UTF-8?q?=20kgcert=EB=A5=BC=20inicert=EB=A1=9C=20=EC=88=98=EC=A0=95,=20?= =?UTF-8?q?=EB=AC=B8=EA=B5=AC=20kg=20->=20ini=EB=A1=9C=20=EC=88=98?= =?UTF-8?q?=EC=A0=95=20=EA=B8=B0=EC=A1=B4=20=EC=9D=B8=EC=A6=9D=EB=B2=84?= =?UTF-8?q?=ED=8A=BC=20=EC=97=AC=EB=9F=AC=EA=B0=9C=20->=20=ED=86=B5?= =?UTF-8?q?=ED=95=A9=EC=9D=B8=EC=A6=9D=20=ED=95=98=EB=82=98=EB=A1=9C=20?= =?UTF-8?q?=ED=86=B5=ED=95=A9?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- config.php | 4 ++-- mobile/skin/member/basic/member_cert_refresh.skin.php | 6 +----- mobile/skin/member/basic/password_lost.skin.php | 6 +----- mobile/skin/member/basic/register_form.skin.php | 6 +----- mobile/skin/social/social_register_member.skin.php | 6 +----- plugin/inicert/{kg_find_result.php => ini_find_result.php} | 0 plugin/inicert/{kg_request.php => ini_request.php} | 4 +--- plugin/inicert/{kg_result.php => ini_result.php} | 4 ++-- skin/member/basic/member_cert_refresh.skin.php | 6 +----- skin/member/basic/password_lost.skin.php | 6 +----- skin/member/basic/register_form.skin.php | 6 +----- skin/social/social_register_member.skin.php | 6 +----- .../mobile/skin/member/basic/member_cert_refresh.skin.php | 6 +----- theme/basic/mobile/skin/member/basic/password_lost.skin.php | 6 +----- theme/basic/mobile/skin/member/basic/register_form.skin.php | 6 +----- theme/basic/skin/member/basic/member_cert_refresh.skin.php | 6 +----- theme/basic/skin/member/basic/password_lost.skin.php | 6 +----- theme/basic/skin/member/basic/register_form.skin.php | 6 +----- 18 files changed, 19 insertions(+), 77 deletions(-) rename plugin/inicert/{kg_find_result.php => ini_find_result.php} (100%) rename plugin/inicert/{kg_request.php => ini_request.php} (96%) rename plugin/inicert/{kg_result.php => ini_result.php} (99%) diff --git a/config.php b/config.php index 70e334c3f..9c67d04f2 100644 --- a/config.php +++ b/config.php @@ -98,7 +98,7 @@ define('G5_PLUGIN_URL', G5_URL.'/'.G5_PLUGIN_DIR); define('G5_EDITOR_URL', G5_PLUGIN_URL.'/'.G5_EDITOR_DIR); define('G5_OKNAME_URL', G5_PLUGIN_URL.'/'.G5_OKNAME_DIR); define('G5_KCPCERT_URL', G5_PLUGIN_URL.'/'.G5_KCPCERT_DIR); -define('G5_KGCERT_URL', G5_PLUGIN_URL.'/'.G5_KGCERT_DIR); +define('G5_INICERT_URL', G5_PLUGIN_URL.'/'.G5_INICERT_DIR); define('G5_LGXPAY_URL', G5_PLUGIN_URL.'/'.G5_LGXPAY_DIR); define('G5_SNS_URL', G5_PLUGIN_URL.'/'.G5_SNS_DIR); define('G5_SYNDI_URL', G5_PLUGIN_URL.'/'.G5_SYNDI_DIR); @@ -118,7 +118,7 @@ define('G5_EDITOR_PATH', G5_PLUGIN_PATH.'/'.G5_EDITOR_DIR); define('G5_OKNAME_PATH', G5_PLUGIN_PATH.'/'.G5_OKNAME_DIR); define('G5_KCPCERT_PATH', G5_PLUGIN_PATH.'/'.G5_KCPCERT_DIR); -define('G5_KGCERT_PATH', G5_PLUGIN_PATH.'/'.G5_KGCERT_DIR); +define('G5_INICERT_PATH', G5_PLUGIN_PATH.'/'.G5_INICERT_DIR); define('G5_LGXPAY_PATH', G5_PLUGIN_PATH.'/'.G5_LGXPAY_DIR); define('G5_SNS_PATH', G5_PLUGIN_PATH.'/'.G5_SNS_DIR); diff --git a/mobile/skin/member/basic/member_cert_refresh.skin.php b/mobile/skin/member/basic/member_cert_refresh.skin.php index 1b72d56c0..8ff6aae92 100644 --- a/mobile/skin/member/basic/member_cert_refresh.skin.php +++ b/mobile/skin/member/basic/member_cert_refresh.skin.php @@ -58,11 +58,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] if ($config['cf_cert_use']) { echo '
        '; if ($config['cf_cert_sa']) { - echo '' . PHP_EOL; - echo '' . PHP_EOL; - echo '' . PHP_EOL; - echo '' . PHP_EOL; - echo '' . PHP_EOL; + echo '' . PHP_EOL; } echo '
        '; echo '
        '; diff --git a/mobile/skin/member/basic/password_lost.skin.php b/mobile/skin/member/basic/password_lost.skin.php index f897f18b6..939e983b1 100644 --- a/mobile/skin/member/basic/password_lost.skin.php +++ b/mobile/skin/member/basic/password_lost.skin.php @@ -33,11 +33,7 @@ if($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] |

        본인인증으로 찾기

        - - - - - +
        diff --git a/mobile/skin/member/basic/register_form.skin.php b/mobile/skin/member/basic/register_form.skin.php index e3b7212f1..fc323c6f9 100644 --- a/mobile/skin/member/basic/register_form.skin.php +++ b/mobile/skin/member/basic/register_form.skin.php @@ -53,11 +53,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] 카카오 인증'.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; + echo ''.PHP_EOL; } if($config['cf_cert_hp']) echo ''.PHP_EOL; diff --git a/mobile/skin/social/social_register_member.skin.php b/mobile/skin/social/social_register_member.skin.php index eebe401b5..1039afcf5 100644 --- a/mobile/skin/social/social_register_member.skin.php +++ b/mobile/skin/social/social_register_member.skin.php @@ -109,11 +109,7 @@ $email_msg = $is_exists_email ? '등록할 이메일이 중복되었습니다. 카카오 인증'.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; + echo ''.PHP_EOL; } if ($config['cf_cert_hp']) echo '' . PHP_EOL; diff --git a/plugin/inicert/kg_find_result.php b/plugin/inicert/ini_find_result.php similarity index 100% rename from plugin/inicert/kg_find_result.php rename to plugin/inicert/ini_find_result.php diff --git a/plugin/inicert/kg_request.php b/plugin/inicert/ini_request.php similarity index 96% rename from plugin/inicert/kg_request.php rename to plugin/inicert/ini_request.php index 814f1e45c..90a384bca 100644 --- a/plugin/inicert/kg_request.php +++ b/plugin/inicert/ini_request.php @@ -1,8 +1,6 @@ diff --git a/plugin/inicert/kg_result.php b/plugin/inicert/ini_result.php similarity index 99% rename from plugin/inicert/kg_result.php rename to plugin/inicert/ini_result.php index 84472fba4..7342483b2 100644 --- a/plugin/inicert/kg_result.php +++ b/plugin/inicert/ini_result.php @@ -36,8 +36,8 @@ if ($_POST["resultCode"] === "0000") { $phone_no = $res_data['userPhone']; // 전화번호 $user_name = $res_data['userName']; // 이름 $birth_day = $res_data['userBirthday']; // 생년월일 - $ci = $res_data['userCi']; // CI - + $ci = $res_data['userCi']; // CI + print_r2($res_data);die; @insert_cert_history($member['mb_id'], 'inicis', $cert_type); // 인증성공 시 내역 기록 if(!$phone_no) diff --git a/skin/member/basic/member_cert_refresh.skin.php b/skin/member/basic/member_cert_refresh.skin.php index 5ab081cd0..0bd2d4318 100644 --- a/skin/member/basic/member_cert_refresh.skin.php +++ b/skin/member/basic/member_cert_refresh.skin.php @@ -54,11 +54,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] if ($config['cf_cert_use']) { echo '
        '; if ($config['cf_cert_sa']) { - echo '' . PHP_EOL; - echo '' . PHP_EOL; - echo '' . PHP_EOL; - echo '' . PHP_EOL; - echo '' . PHP_EOL; + echo '' . PHP_EOL; } echo '
        '; echo '
        '; diff --git a/skin/member/basic/password_lost.skin.php b/skin/member/basic/password_lost.skin.php index 033907977..d9ff06224 100644 --- a/skin/member/basic/password_lost.skin.php +++ b/skin/member/basic/password_lost.skin.php @@ -33,11 +33,7 @@ if($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] |

        본인인증으로 찾기

        - - - - - +
        diff --git a/skin/member/basic/register_form.skin.php b/skin/member/basic/register_form.skin.php index 44682b42d..a754de5e9 100644 --- a/skin/member/basic/register_form.skin.php +++ b/skin/member/basic/register_form.skin.php @@ -59,11 +59,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] 카카오 인증'.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; + echo ''.PHP_EOL; } if($config['cf_cert_hp']) echo ''.PHP_EOL; diff --git a/skin/social/social_register_member.skin.php b/skin/social/social_register_member.skin.php index 2c9e0c660..2d66ce6f7 100644 --- a/skin/social/social_register_member.skin.php +++ b/skin/social/social_register_member.skin.php @@ -102,11 +102,7 @@ $email_msg = $is_exists_email ? '등록할 이메일이 중복되었습니다. 카카오 인증'.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; + echo ''.PHP_EOL; } if ($config['cf_cert_hp']) echo '' . PHP_EOL; diff --git a/theme/basic/mobile/skin/member/basic/member_cert_refresh.skin.php b/theme/basic/mobile/skin/member/basic/member_cert_refresh.skin.php index 6376369dc..16cbc9da3 100644 --- a/theme/basic/mobile/skin/member/basic/member_cert_refresh.skin.php +++ b/theme/basic/mobile/skin/member/basic/member_cert_refresh.skin.php @@ -58,11 +58,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] if ($config['cf_cert_use']) { echo '
        '; if ($config['cf_cert_sa']) { - echo '' . PHP_EOL; - echo '' . PHP_EOL; - echo '' . PHP_EOL; - echo '' . PHP_EOL; - echo '' . PHP_EOL; + echo '' . PHP_EOL; } echo '
        '; echo '
        '; diff --git a/theme/basic/mobile/skin/member/basic/password_lost.skin.php b/theme/basic/mobile/skin/member/basic/password_lost.skin.php index 033907977..d9ff06224 100644 --- a/theme/basic/mobile/skin/member/basic/password_lost.skin.php +++ b/theme/basic/mobile/skin/member/basic/password_lost.skin.php @@ -33,11 +33,7 @@ if($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] |

        본인인증으로 찾기

        - - - - - +
        diff --git a/theme/basic/mobile/skin/member/basic/register_form.skin.php b/theme/basic/mobile/skin/member/basic/register_form.skin.php index 0289ba005..f0d1846bc 100644 --- a/theme/basic/mobile/skin/member/basic/register_form.skin.php +++ b/theme/basic/mobile/skin/member/basic/register_form.skin.php @@ -53,11 +53,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] 카카오 인증'.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; + echo ''.PHP_EOL; } if ($config['cf_cert_hp']) echo ''.PHP_EOL; diff --git a/theme/basic/skin/member/basic/member_cert_refresh.skin.php b/theme/basic/skin/member/basic/member_cert_refresh.skin.php index 5ab081cd0..0bd2d4318 100644 --- a/theme/basic/skin/member/basic/member_cert_refresh.skin.php +++ b/theme/basic/skin/member/basic/member_cert_refresh.skin.php @@ -54,11 +54,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] if ($config['cf_cert_use']) { echo '
        '; if ($config['cf_cert_sa']) { - echo '' . PHP_EOL; - echo '' . PHP_EOL; - echo '' . PHP_EOL; - echo '' . PHP_EOL; - echo '' . PHP_EOL; + echo '' . PHP_EOL; } echo '
        '; echo '
        '; diff --git a/theme/basic/skin/member/basic/password_lost.skin.php b/theme/basic/skin/member/basic/password_lost.skin.php index 033907977..d9ff06224 100644 --- a/theme/basic/skin/member/basic/password_lost.skin.php +++ b/theme/basic/skin/member/basic/password_lost.skin.php @@ -33,11 +33,7 @@ if($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] |

        본인인증으로 찾기

        - - - - - +
        diff --git a/theme/basic/skin/member/basic/register_form.skin.php b/theme/basic/skin/member/basic/register_form.skin.php index b05c5ad94..7365ba65e 100644 --- a/theme/basic/skin/member/basic/register_form.skin.php +++ b/theme/basic/skin/member/basic/register_form.skin.php @@ -59,11 +59,7 @@ if ($config['cf_cert_use'] && ($config['cf_cert_sa'] || $config['cf_cert_ipin'] 카카오 인증'.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; - echo ''.PHP_EOL; + echo ''.PHP_EOL; } if ($config['cf_cert_hp']) echo ''.PHP_EOL; From 0ba6f3d8617b62b5b0424ae331d462d5553bd42d Mon Sep 17 00:00:00 2001 From: projectSylas Date: Fri, 24 Dec 2021 08:01:20 +0000 Subject: [PATCH 27/31] =?UTF-8?q?=ED=86=B5=ED=95=A9=EC=9D=B8=EC=A6=9D=20:?= =?UTF-8?q?=20die=EC=BD=94=EB=93=9C=20=EC=A0=9C=EA=B1=B0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- plugin/inicert/ini_result.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/plugin/inicert/ini_result.php b/plugin/inicert/ini_result.php index 7342483b2..a2d9804c7 100644 --- a/plugin/inicert/ini_result.php +++ b/plugin/inicert/ini_result.php @@ -37,7 +37,7 @@ if ($_POST["resultCode"] === "0000") { $user_name = $res_data['userName']; // 이름 $birth_day = $res_data['userBirthday']; // 생년월일 $ci = $res_data['userCi']; // CI - print_r2($res_data);die; + @insert_cert_history($member['mb_id'], 'inicis', $cert_type); // 인증성공 시 내역 기록 if(!$phone_no) From ae29c976e645f79452f7b88917f116d460d5deea Mon Sep 17 00:00:00 2001 From: projectSylas Date: Tue, 4 Jan 2022 05:36:16 +0000 Subject: [PATCH 28/31] =?UTF-8?q?=ED=86=B5=ED=95=A9=EC=9D=B8=EC=A6=9D=20:?= =?UTF-8?q?=20=EC=9D=B4=EB=A6=84/=ED=95=B8=EB=93=9C=ED=8F=B0=20=EC=9D=B8?= =?UTF-8?q?=ED=92=8B=20=EB=B0=B8=EB=A5=98=20=EC=A1=B0=EC=9E=91=EC=8B=9C=20?= =?UTF-8?q?=ED=95=B4=EC=89=AC=EA=B0=92=20=EC=B2=B4=ED=81=AC=20=EB=A1=9C?= =?UTF-8?q?=EC=A7=81=20=EC=B6=94=EA=B0=80?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- bbs/member_cert_refresh_update.php | 20 ++++++++++++-------- bbs/register_form_update.php | 20 ++++++++++++-------- plugin/inicert/ini_result.php | 9 ++++++++- plugin/kcpcert/kcpcert_result.php | 2 +- plugin/lgxpay/AuthOnlyRes.php | 2 +- plugin/okname/hpcert2.php | 2 +- plugin/social/register_member_update.php | 19 ++++++++++++------- 7 files changed, 47 insertions(+), 27 deletions(-) diff --git a/bbs/member_cert_refresh_update.php b/bbs/member_cert_refresh_update.php index 3e9beac9c..39b4c9a9d 100644 --- a/bbs/member_cert_refresh_update.php +++ b/bbs/member_cert_refresh_update.php @@ -36,20 +36,24 @@ $md5_cert_no = get_session('ss_cert_no'); $cert_type = get_session('ss_cert_type'); if ($config['cf_cert_use'] && $cert_type && $md5_cert_no) { // 해시값이 같은 경우에만 본인확인 값을 저장한다. - if (get_session('ss_cert_hash') == md5($mb_name.$cert_type.get_session('ss_cert_birth').$md5_cert_no)) { - $sql_certify .= " mb_hp = '{$mb_hp}' "; + if ($cert_type == 'ipin' && get_session('ss_cert_hash') == md5($mb_name.$cert_type.get_session('ss_cert_birth').$md5_cert_no)) { // 아이핀일때 hash 값 체크 hp미포함 + $sql_certify .= " , mb_hp = '{$mb_hp}' "; + $sql_certify .= " , mb_certify = '{$cert_type}' "; + $sql_certify .= " , mb_adult = '".get_session('ss_cert_adult')."' "; + $sql_certify .= " , mb_birth = '".get_session('ss_cert_birth')."' "; + $sql_certify .= " , mb_sex = '".get_session+('ss_cert_sex')."' "; + $sql_certify .= " , mb_dupinfo = '".get_session('ss_cert_dupinfo')."' "; + $sql_certify .= " , mb_name = '{$mb_name}' "; + } else if($cert_type != 'ipin' && get_session('ss_cert_hash') == md5($mb_name.$cert_type.get_session('ss_cert_birth').$mb_hp.$md5_cert_no)) { // 통합인증, 휴대폰일때 hash 값 체크 hp포함 + $sql_certify .= " , mb_hp = '{$mb_hp}' "; $sql_certify .= " , mb_certify = '{$cert_type}' "; $sql_certify .= " , mb_adult = '".get_session('ss_cert_adult')."' "; $sql_certify .= " , mb_birth = '".get_session('ss_cert_birth')."' "; $sql_certify .= " , mb_sex = '".get_session('ss_cert_sex')."' "; $sql_certify .= " , mb_dupinfo = '".get_session('ss_cert_dupinfo')."' "; $sql_certify .= " , mb_name = '{$mb_name}' "; - } else { - $sql_certify .= " mb_hp = '{$mb_hp}' "; - $sql_certify .= " , mb_certify = '' "; - $sql_certify .= " , mb_adult = 0 "; - $sql_certify .= " , mb_birth = '' "; - $sql_certify .= " , mb_sex = '' "; + }else { + alert('본인인증된 정보와 입력된 회원정보가 일치하지않습니다. 다시시도 해주세요'); } } else { if (get_session("ss_reg_mb_name") != $mb_name || get_session("ss_reg_mb_hp") != $mb_hp) { diff --git a/bbs/register_form_update.php b/bbs/register_form_update.php index 972dff0a8..8955520dd 100644 --- a/bbs/register_form_update.php +++ b/bbs/register_form_update.php @@ -176,7 +176,16 @@ $md5_cert_no = get_session('ss_cert_no'); $cert_type = get_session('ss_cert_type'); if ($config['cf_cert_use'] && $cert_type && $md5_cert_no) { // 해시값이 같은 경우에만 본인확인 값을 저장한다. - if (get_session('ss_cert_hash') == md5($mb_name.$cert_type.get_session('ss_cert_birth').$md5_cert_no)) { + if ($cert_type == 'ipin' && get_session('ss_cert_hash') == md5($mb_name.$cert_type.get_session('ss_cert_birth').$md5_cert_no)) { // 아이핀일때 hash 값 체크 hp미포함 + $sql_certify .= " , mb_hp = '{$mb_hp}' "; + $sql_certify .= " , mb_certify = '{$cert_type}' "; + $sql_certify .= " , mb_adult = '".get_session('ss_cert_adult')."' "; + $sql_certify .= " , mb_birth = '".get_session('ss_cert_birth')."' "; + $sql_certify .= " , mb_sex = '".get_session+('ss_cert_sex')."' "; + $sql_certify .= " , mb_dupinfo = '".get_session('ss_cert_dupinfo')."' "; + if($w == 'u') + $sql_certify .= " , mb_name = '{$mb_name}' "; + } else if($cert_type != 'ipin' && get_session('ss_cert_hash') == md5($mb_name.$cert_type.get_session('ss_cert_birth').$mb_hp.$md5_cert_no)) { // 통합인증, 휴대폰일때 hash 값 체크 hp포함 $sql_certify .= " , mb_hp = '{$mb_hp}' "; $sql_certify .= " , mb_certify = '{$cert_type}' "; $sql_certify .= " , mb_adult = '".get_session('ss_cert_adult')."' "; @@ -185,12 +194,8 @@ if ($config['cf_cert_use'] && $cert_type && $md5_cert_no) { $sql_certify .= " , mb_dupinfo = '".get_session('ss_cert_dupinfo')."' "; if($w == 'u') $sql_certify .= " , mb_name = '{$mb_name}' "; - } else { - $sql_certify .= " , mb_hp = '{$mb_hp}' "; - $sql_certify .= " , mb_certify = '' "; - $sql_certify .= " , mb_adult = 0 "; - $sql_certify .= " , mb_birth = '' "; - $sql_certify .= " , mb_sex = '' "; + }else { + alert('본인인증된 정보와 입력된 회원정보가 일치하지않습니다. 다시시도 해주세요'); } } else { if (get_session("ss_reg_mb_name") != $mb_name || get_session("ss_reg_mb_hp") != $mb_hp) { @@ -202,7 +207,6 @@ if ($config['cf_cert_use'] && $cert_type && $md5_cert_no) { } } //=============================================================== - if ($w == '') { $sql = " insert into {$g5['member_table']} set mb_id = '{$mb_id}', diff --git a/plugin/inicert/ini_result.php b/plugin/inicert/ini_result.php index a2d9804c7..ffe924505 100644 --- a/plugin/inicert/ini_result.php +++ b/plugin/inicert/ini_result.php @@ -46,6 +46,13 @@ if ($_POST["resultCode"] === "0000") { $md5_ci = md5($ci . $ci); $phone_no = hyphen_hp_number($phone_no); $mb_dupinfo = $md5_ci; + + // $sql = " select mb_dupinfo from {$g5['member_table']} where mb_id = '{$member['mb_id']}'"; + // $row = sql_fetch($sql); + + // if (!empty($row['mb_dupinfo'])) { + // if($row['mb_dupinfo'] != $mb_dupinfo) alert_close("해당 계정은 이미 다른명의로 본인인증 되어있는 계정입니다."); + // } $sql = " select mb_id from {$g5['member_table']} where mb_id <> '{$member['mb_id']}' and mb_dupinfo = '{$mb_dupinfo}' "; $row = sql_fetch($sql); @@ -56,7 +63,7 @@ if ($_POST["resultCode"] === "0000") { // hash 데이터 $md5_cert_no = md5($cert_no); - $hash_data = md5($user_name.$cert_type.$birth_day.$md5_cert_no); + $hash_data = md5($user_name.$cert_type.$birth_day.$phone_no.$md5_cert_no); // 성인인증결과 $adult_day = date("Ymd", strtotime("-19 years", G5_SERVER_TIME)); diff --git a/plugin/kcpcert/kcpcert_result.php b/plugin/kcpcert/kcpcert_result.php index 814993dee..100223fa9 100644 --- a/plugin/kcpcert/kcpcert_result.php +++ b/plugin/kcpcert/kcpcert_result.php @@ -160,7 +160,7 @@ if( $cert_enc_use == "Y" ) // hash 데이터 $cert_type = 'hp'; $md5_cert_no = md5($cert_no); - $hash_data = md5($user_name.$cert_type.$birth_day.$md5_cert_no); + $hash_data = md5($user_name.$cert_type.$birth_day.$phone_no.$md5_cert_no); // 성인인증결과 $adult_day = date("Ymd", strtotime("-19 years", G5_SERVER_TIME)); diff --git a/plugin/lgxpay/AuthOnlyRes.php b/plugin/lgxpay/AuthOnlyRes.php index f09d8c13d..6f202e3a3 100644 --- a/plugin/lgxpay/AuthOnlyRes.php +++ b/plugin/lgxpay/AuthOnlyRes.php @@ -140,7 +140,7 @@ if ($xpay->TX()) { // hash 데이터 $cert_type = 'hp'; $md5_cert_no = md5($cert_no); - $hash_data = md5($user_name.$cert_type.$birth_day.$md5_cert_no); + $hash_data = md5($user_name.$cert_type.$birth_day.$phone_no.$md5_cert_no); // 성인인증결과 $adult_day = date("Ymd", strtotime("-19 years", G5_SERVER_TIME)); diff --git a/plugin/okname/hpcert2.php b/plugin/okname/hpcert2.php index 26ca27601..ada63f818 100644 --- a/plugin/okname/hpcert2.php +++ b/plugin/okname/hpcert2.php @@ -123,7 +123,7 @@ if (!empty($row['mb_id'])) { // hash 데이터 $cert_type = 'hp'; $md5_cert_no = md5($req_num); -$hash_data = md5($mb_name.$cert_type.$mb_birth.$md5_cert_no); +$hash_data = md5($mb_name.$cert_type.$mb_birth.$phone_no.$md5_cert_no); // 성인인증결과 $adult_day = date("Ymd", strtotime("-19 years", G5_SERVER_TIME)); diff --git a/plugin/social/register_member_update.php b/plugin/social/register_member_update.php index 8502704f4..61dc7bb83 100644 --- a/plugin/social/register_member_update.php +++ b/plugin/social/register_member_update.php @@ -117,7 +117,16 @@ if($config['cf_cert_use']) { $cert_type = get_session('ss_cert_type'); if ($config['cf_cert_use'] && $cert_type && $md5_cert_no) { // 해시값이 같은 경우에만 본인확인 값을 저장한다. - if (get_session('ss_cert_hash') == md5($mb_name.$cert_type.get_session('ss_cert_birth').$md5_cert_no)) { + if ($cert_type == 'ipin' && get_session('ss_cert_hash') == md5($mb_name.$cert_type.get_session('ss_cert_birth').$md5_cert_no)) { // 아이핀일때 hash 값 체크 hp미포함 + $sql_certify .= " , mb_hp = '{$mb_hp}' "; + $sql_certify .= " , mb_certify = '{$cert_type}' "; + $sql_certify .= " , mb_adult = '".get_session('ss_cert_adult')."' "; + $sql_certify .= " , mb_birth = '".get_session('ss_cert_birth')."' "; + $sql_certify .= " , mb_sex = '".get_session+('ss_cert_sex')."' "; + $sql_certify .= " , mb_dupinfo = '".get_session('ss_cert_dupinfo')."' "; + if($w == 'u') + $sql_certify .= " , mb_name = '{$mb_name}' "; + } else if($cert_type != 'ipin' && get_session('ss_cert_hash') == md5($mb_name.$cert_type.get_session('ss_cert_birth').$mb_hp.$md5_cert_no)) { // 통합인증, 휴대폰일때 hash 값 체크 hp포함 $sql_certify .= " , mb_hp = '{$mb_hp}' "; $sql_certify .= " , mb_certify = '{$cert_type}' "; $sql_certify .= " , mb_adult = '".get_session('ss_cert_adult')."' "; @@ -126,12 +135,8 @@ if($config['cf_cert_use']) { $sql_certify .= " , mb_dupinfo = '".get_session('ss_cert_dupinfo')."' "; if($w == 'u') $sql_certify .= " , mb_name = '{$mb_name}' "; - } else { - $sql_certify .= " , mb_hp = '{$mb_hp}' "; - $sql_certify .= " , mb_certify = '' "; - $sql_certify .= " , mb_adult = 0 "; - $sql_certify .= " , mb_birth = '' "; - $sql_certify .= " , mb_sex = '' "; + }else { + alert('본인인증된 정보와 개인정보가 일치하지않습니다. 다시시도 해주세요'); } } else { if (get_session("ss_reg_mb_name") != $mb_name || get_session("ss_reg_mb_hp") != $mb_hp) { From 033924f011a36fbe0f34398e4e389c100fe4b6b4 Mon Sep 17 00:00:00 2001 From: projectSylas Date: Tue, 4 Jan 2022 05:37:31 +0000 Subject: [PATCH 29/31] =?UTF-8?q?BBS=20:=20=EA=B2=8C=EC=8B=9C=ED=8C=90?= =?UTF-8?q?=EC=97=90=EC=84=9C=20=EB=B3=B8=EC=9D=B8=ED=99=95=EC=9D=B8=20?= =?UTF-8?q?=EB=AF=B8=EC=82=AC=EC=9A=A9=EC=8B=9C=20=EB=B9=84=ED=9A=8C?= =?UTF-8?q?=EC=9B=90=EC=9C=BC=EB=A1=9C=20=EC=A0=91=EA=B7=BC=ED=95=98?= =?UTF-8?q?=EB=A9=B4=20=EC=A0=91=EA=B7=BC=20=EB=B6=88=EA=B0=80=EB=8A=A5?= =?UTF-8?q?=ED=95=98=EB=8D=98=20=EC=9D=B4=EC=8A=88=20=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- bbs/board.php | 12 ++++++------ bbs/write.php | 10 +++++----- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/bbs/board.php b/bbs/board.php index 1820a765a..94f0bac22 100644 --- a/bbs/board.php +++ b/bbs/board.php @@ -55,13 +55,13 @@ if ((isset($wr_id) && $wr_id) || (isset($wr_seo_title) && $wr_seo_title)) { } // 본인확인을 사용한다면 - if ($config['cf_cert_use'] && !$is_admin) { + if ($board['bo_use_cert'] != '' && $config['cf_cert_use'] && !$is_admin) { // 인증된 회원만 가능 - if (empty($board['bo_use_cert']) && $is_guest) { + if ($is_guest) { alert('이 게시판은 본인확인 하신 회원님만 글읽기가 가능합니다.\\n\\n회원이시라면 로그인 후 이용해 보십시오.', G5_BBS_URL.'/login.php?wr_id='.$wr_id.$qstr.'&url='.urlencode(get_pretty_url($bo_table, $wr_id, $qstr))); } - if (!empty($board['bo_use_cert']) && strlen($member['mb_dupinfo']) == 64 && $member['mb_certify']) { // 본인 인증 된 계정 중에서 di로 저장 되었을 경우에만 + if (strlen($member['mb_dupinfo']) == 64 && $member['mb_certify']) { // 본인 인증 된 계정 중에서 di로 저장 되었을 경우에만 goto_url(G5_BBS_URL."/member_cert_refresh.php"); } @@ -144,13 +144,13 @@ if ((isset($wr_id) && $wr_id) || (isset($wr_seo_title) && $wr_seo_title)) { } // 본인확인을 사용한다면 - if ($config['cf_cert_use'] && !$is_admin) { + if ($board['bo_use_cert'] != '' && $config['cf_cert_use'] && !$is_admin) { // 인증된 회원만 가능 - if (empty($board['bo_use_cert']) && $is_guest) { + if ($is_guest) { alert('이 게시판은 본인확인 하신 회원님만 글읽기가 가능합니다.\\n\\n회원이시라면 로그인 후 이용해 보십시오.', G5_BBS_URL.'/login.php?wr_id='.$wr_id.$qstr.'&url='.urlencode(get_pretty_url($bo_table, $wr_id, $qstr))); } - if (!empty($board['bo_use_cert']) && strlen($member['mb_dupinfo']) == 64 && $member['mb_certify']) { // 본인 인증 된 계정 중에서 di로 저장 되었을 경우에만 + if (strlen($member['mb_dupinfo']) == 64 && $member['mb_certify']) { // 본인 인증 된 계정 중에서 di로 저장 되었을 경우에만 goto_url(G5_BBS_URL."/member_cert_refresh.php"); } diff --git a/bbs/write.php b/bbs/write.php index bcec21532..364a5a282 100644 --- a/bbs/write.php +++ b/bbs/write.php @@ -187,18 +187,18 @@ if (!empty($group['gr_use_access'])) { } // 본인확인을 사용한다면 -if ($config['cf_cert_use'] && !$is_admin) { +if ($board['bo_use_cert'] != '' && $config['cf_cert_use'] && !$is_admin) { // 인증된 회원만 가능 - if (empty($board['bo_use_cert']) && $is_guest) { - alert('이 게시판은 본인확인 하신 회원님만 글읽기가 가능합니다.\\n\\n회원이시라면 로그인 후 이용해 보십시오.', G5_BBS_URL.'/login.php?wr_id='.$wr_id.$qstr.'&url='.urlencode(get_pretty_url($bo_table, $wr_id, $qstr))); + if ($is_guest) { + alert('이 게시판은 본인확인 하신 회원님만 글쓰기가 가능합니다.\\n\\n회원이시라면 로그인 후 이용해 보십시오.', G5_BBS_URL.'/login.php?wr_id='.$wr_id.$qstr.'&url='.urlencode(get_pretty_url($bo_table, $wr_id, $qstr))); } - if (!empty($board['bo_use_cert']) && strlen($member['mb_dupinfo']) == 64 && $member['mb_certify']) { // 본인 인증 된 계정 중에서 di로 저장 되었을 경우에만 + if (strlen($member['mb_dupinfo']) == 64 && $member['mb_certify']) { // 본인 인증 된 계정 중에서 di로 저장 되었을 경우에만 goto_url(G5_BBS_URL."/member_cert_refresh.php"); } if ($board['bo_use_cert'] == 'cert' && !$member['mb_certify']) { - alert('이 게시판은 본인확인 하신 회원님만 글읽기가 가능합니다.\\n\\n회원정보 수정에서 본인확인을 해주시기 바랍니다.', G5_URL); + alert('이 게시판은 본인확인 하신 회원님만 글쓰기가 가능합니다.\\n\\n회원정보 수정에서 본인확인을 해주시기 바랍니다.', G5_URL); } if ($board['bo_use_cert'] == 'adult' && !$member['mb_adult']) { From 9aa5d237a79eaaf23a503bdd784ccdda51b3ed6d Mon Sep 17 00:00:00 2001 From: projectSylas Date: Tue, 4 Jan 2022 05:38:25 +0000 Subject: [PATCH 30/31] =?UTF-8?q?=ED=9A=8C=EC=9B=90=EA=B4=80=EB=A6=AC=20:?= =?UTF-8?q?=20=ED=9A=8C=EC=9B=90=20=EC=82=AD=EC=A0=9C=EC=8B=9C=20=EB=B3=B8?= =?UTF-8?q?=EC=9D=B8=EC=9D=B8=EC=A6=9D=20=EA=B4=80=EB=A0=A8=20=EC=A0=95?= =?UTF-8?q?=EB=B3=B4=20=EC=A0=9C=EA=B1=B0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- lib/common.lib.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/common.lib.php b/lib/common.lib.php index 1ab9fc1a6..c88d5dbc4 100644 --- a/lib/common.lib.php +++ b/lib/common.lib.php @@ -3182,7 +3182,7 @@ function member_delete($mb_id) } // 회원자료는 정보만 없앤 후 아이디는 보관하여 다른 사람이 사용하지 못하도록 함 : 061025 - $sql = " update {$g5['member_table']} set mb_password = '', mb_level = 1, mb_email = '', mb_homepage = '', mb_tel = '', mb_hp = '', mb_zip1 = '', mb_zip2 = '', mb_addr1 = '', mb_addr2 = '', mb_addr3 = '', mb_point = 0, mb_profile = '', mb_birth = '', mb_sex = '', mb_signature = '', mb_memo = '".date('Ymd', G5_SERVER_TIME)." 삭제함\n".sql_real_escape_string($mb['mb_memo'])."' where mb_id = '{$mb_id}' "; + $sql = " update {$g5['member_table']} set mb_password = '', mb_level = 1, mb_email = '', mb_homepage = '', mb_tel = '', mb_hp = '', mb_zip1 = '', mb_zip2 = '', mb_addr1 = '', mb_addr2 = '', mb_addr3 = '', mb_point = 0, mb_profile = '', mb_birth = '', mb_sex = '', mb_signature = '', mb_memo = '".date('Ymd', G5_SERVER_TIME)." 삭제함\n".sql_real_escape_string($mb['mb_memo'])."',mb_certify = '', mb_adult = 0, mb_dupinfo = '' where mb_id = '{$mb_id}' "; sql_query($sql); From 8bdf80e38cc01a9c3348e3d74ff0d0aef912b583 Mon Sep 17 00:00:00 2001 From: projectSylas Date: Wed, 5 Jan 2022 01:50:57 +0000 Subject: [PATCH 31/31] =?UTF-8?q?=EB=B3=B8=EC=9D=B8=EC=9D=B8=EC=A6=9D=20:?= =?UTF-8?q?=20=EB=B3=B8=EC=9D=B8=EC=9D=B4=EC=95=84=EB=8B=8C=20=ED=83=80?= =?UTF-8?q?=EC=9D=B8=EC=9D=B4=20=EC=9D=B8=EC=A6=9D=ED=95=A0=EB=95=8C=20?= =?UTF-8?q?=EB=AA=85=EC=9D=98=EA=B0=80=20=EB=B3=80=EA=B2=BD=EB=90=98?= =?UTF-8?q?=EC=A7=80=20=EB=AA=BB=ED=95=98=EA=B2=8C=20=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- plugin/inicert/ini_result.php | 13 +++++-------- plugin/kcpcert/kcpcert_result.php | 5 +++++ plugin/lgxpay/AuthOnlyRes.php | 5 +++++ plugin/okname/hpcert2.php | 5 +++++ plugin/okname/ipin2.php | 5 +++++ 5 files changed, 25 insertions(+), 8 deletions(-) diff --git a/plugin/inicert/ini_result.php b/plugin/inicert/ini_result.php index ffe924505..46850d055 100644 --- a/plugin/inicert/ini_result.php +++ b/plugin/inicert/ini_result.php @@ -43,16 +43,13 @@ if ($_POST["resultCode"] === "0000") { if(!$phone_no) alert_close("정상적인 인증이 아닙니다. 올바른 방법으로 이용해 주세요."); - $md5_ci = md5($ci . $ci); + $mb_dupinfo = md5($ci . $ci); $phone_no = hyphen_hp_number($phone_no); - $mb_dupinfo = $md5_ci; - - // $sql = " select mb_dupinfo from {$g5['member_table']} where mb_id = '{$member['mb_id']}'"; - // $row = sql_fetch($sql); - // if (!empty($row['mb_dupinfo'])) { - // if($row['mb_dupinfo'] != $mb_dupinfo) alert_close("해당 계정은 이미 다른명의로 본인인증 되어있는 계정입니다."); - // } + // 명의 변경 체크 + if (!empty($member['mb_certify']) && !empty($member['mb_dupinfo']) && strlen($member['mb_dupinfo']) != 64) { // 이미 인증된 계정중에 dupinfo가 di(64 length)가 아닐때 + if($member['mb_dupinfo'] != $mb_dupinfo) alert_close("해당 계정은 이미 다른명의로 본인인증 되어있는 계정입니다."); + } $sql = " select mb_id from {$g5['member_table']} where mb_id <> '{$member['mb_id']}' and mb_dupinfo = '{$mb_dupinfo}' "; $row = sql_fetch($sql); diff --git a/plugin/kcpcert/kcpcert_result.php b/plugin/kcpcert/kcpcert_result.php index 100223fa9..2b8816327 100644 --- a/plugin/kcpcert/kcpcert_result.php +++ b/plugin/kcpcert/kcpcert_result.php @@ -151,6 +151,11 @@ if( $cert_enc_use == "Y" ) $phone_no = hyphen_hp_number($phone_no); $mb_dupinfo = md5($ci.$ci); + // 명의 변경 체크 + if (!empty($member['mb_certify']) && !empty($member['mb_dupinfo']) && strlen($member['mb_dupinfo']) != 64) { // 이미 인증된 계정중에 dupinfo가 di(64 length)가 아닐때 + if($member['mb_dupinfo'] != $mb_dupinfo) alert_close("해당 계정은 이미 다른명의로 본인인증 되어있는 계정입니다."); + } + $sql = " select mb_id from {$g5['member_table']} where mb_id <> '{$member['mb_id']}' and mb_dupinfo = '{$mb_dupinfo}' "; $row = sql_fetch($sql); if (!empty($row['mb_id'])) { diff --git a/plugin/lgxpay/AuthOnlyRes.php b/plugin/lgxpay/AuthOnlyRes.php index 6f202e3a3..31c02eca7 100644 --- a/plugin/lgxpay/AuthOnlyRes.php +++ b/plugin/lgxpay/AuthOnlyRes.php @@ -129,6 +129,11 @@ if ($xpay->TX()) { $phone_no = hyphen_hp_number($phone_no); $mb_dupinfo = md5($ci.$ci); + // 명의 변경 체크 + if (!empty($member['mb_certify']) && !empty($member['mb_dupinfo']) && strlen($member['mb_dupinfo']) != 64) { // 이미 인증된 계정중에 dupinfo가 di(64 length)가 아닐때 + if($member['mb_dupinfo'] != $mb_dupinfo) alert_close("해당 계정은 이미 다른명의로 본인인증 되어있는 계정입니다."); + } + if($mb_dupinfo) { $sql = " select mb_id from {$g5['member_table']} where mb_id <> '{$member['mb_id']}' and mb_dupinfo = '{$mb_dupinfo}' "; $row = sql_fetch($sql); diff --git a/plugin/okname/hpcert2.php b/plugin/okname/hpcert2.php index ada63f818..4b0230ce2 100644 --- a/plugin/okname/hpcert2.php +++ b/plugin/okname/hpcert2.php @@ -113,6 +113,11 @@ $ci = $field[5]; $mb_dupinfo = md5($ci.$ci); // 통합인증 추가 후 ci로 변경 $phone_no = hyphen_hp_number($req_num); +// 명의 변경 체크 +if (!empty($member['mb_certify']) && !empty($member['mb_dupinfo']) && strlen($member['mb_dupinfo']) != 64) { // 이미 인증된 계정중에 dupinfo가 di(64 length)가 아닐때 + if($member['mb_dupinfo'] != $mb_dupinfo) alert_close("해당 계정은 이미 다른명의로 본인인증 되어있는 계정입니다."); +} + // 중복정보 체크 $sql = " select mb_id from {$g5['member_table']} where mb_id <> '{$member['mb_id']}' and mb_dupinfo = '{$mb_dupinfo}' "; $row = sql_fetch($sql); diff --git a/plugin/okname/ipin2.php b/plugin/okname/ipin2.php index deb7bd09b..5f6f63d35 100644 --- a/plugin/okname/ipin2.php +++ b/plugin/okname/ipin2.php @@ -88,6 +88,11 @@ if(!empty($field[1])) { // 아이핀은 리턴받는 ci 데이터가 두가지 } $mb_dupinfo = md5($ci.$ci); // 통합인증 추가 후 ci로 변경 +// 명의 변경 체크 +if (!empty($member['mb_certify']) && !empty($member['mb_dupinfo']) && strlen($member['mb_dupinfo']) != 64) { // 이미 인증된 계정중에 dupinfo가 di(64 length)가 아닐때 + if($member['mb_dupinfo'] != $mb_dupinfo) alert_close("해당 계정은 이미 다른명의로 본인인증 되어있는 계정입니다."); +} + // 중복정보 체크 $sql = " select mb_id from {$g5['member_table']} where mb_id <> '{$member['mb_id']}' and mb_dupinfo = '{$mb_dupinfo}' "; $row = sql_fetch($sql);