From 68be1c1f8692d632fd90a6f9122983e5459561a1 Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Fri, 12 Jun 2026 10:58:09 +0000
Subject: [PATCH] =?UTF-8?q?=EB=82=98=EC=9D=B4=EC=8A=A4=ED=8E=98=EC=9D=B4?=
 =?UTF-8?q?=20=EB=B6=80=EB=B6=84=EC=B7=A8=EC=86=8C=20=EB=B0=8F=20=EC=B7=A8?=
 =?UTF-8?q?=EC=86=8C=EC=9D=91=EB=8B=B5=20=EA=B2=80=EC=A6=9D=20=EB=B3=B4?=
 =?UTF-8?q?=EA=B0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

(cherry picked from commit df0bfff88cdccc93dd6a8315c166e49a9bb03a5a)
---
 adm/shop_admin/orderpartcancel.php | 1 +
 shop/nicepay/cancel_process.php    | 3 +--
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/adm/shop_admin/orderpartcancel.php b/adm/shop_admin/orderpartcancel.php
index 35f2636a9..c03721bfc 100644
--- a/adm/shop_admin/orderpartcancel.php
+++ b/adm/shop_admin/orderpartcancel.php
@@ -29,6 +29,7 @@ $od_misu = abs($od['od_misu']);
 ?>
 
 <form name="forderpartcancel" method="post" action="./orderpartcancelupdate.php" onsubmit="return form_check(this);">
+<input type="hidden" name="token" value="<?php echo get_admin_token(); ?>">
 <input type="hidden" name="od_id" value="<?php echo $od_id; ?>">
 
 <div class="new_win">
diff --git a/shop/nicepay/cancel_process.php b/shop/nicepay/cancel_process.php
index 791778f93..7d2239700 100644
--- a/shop/nicepay/cancel_process.php
+++ b/shop/nicepay/cancel_process.php
@@ -76,9 +76,8 @@ try{
 		$responseCancelAmt = isset($result['CancelAmt']) ? $result['CancelAmt'] : $cancelAmt;
 		$responseSignature = isset($result['Signature']) ? $result['Signature'] : '';
 		$responseSignData = bin2hex(hash('sha256', $responseTid . $mid . $responseCancelAmt . $merchantKey, true));
-		$isCancelSuccess = ($result['ResultCode'] === '2001' || $result['ResultCode'] === '2211');
 
-		if (($isCancelSuccess || $responseSignature) && $responseSignature != $responseSignData) {
+		if ($responseSignature !== '' && $responseSignature != $responseSignData) {
 			$result['ResultCode'] = '9998';
 			$result['ResultMsg'] = '취소 응답 유효성 검증 실패';
 		}