diff --git a/lib/shop.lib.php b/lib/shop.lib.php index ce27d0114..7a4b3258a 100644 --- a/lib/shop.lib.php +++ b/lib/shop.lib.php @@ -2403,7 +2403,7 @@ function exists_inicis_shop_order($oid, $pp=array(), $od_time='', $od_ip='') //개인결제 if( $pp ) { $hash_data = md5($pp['pp_id'].$pp['pp_price'].$pp['pp_time']); - if( $hash_data == get_session('ss_personalpay_hash') ){ + if( $hash_data === get_session('ss_personalpay_hash') ){ // 개인결제번호제거 set_session('ss_personalpay_id', ''); set_session('ss_personalpay_hash', ''); diff --git a/shop/personalpayformupdate.php b/shop/personalpayformupdate.php index 0cc910fe6..e3e857c48 100644 --- a/shop/personalpayformupdate.php +++ b/shop/personalpayformupdate.php @@ -29,7 +29,7 @@ if($pp['pp_tno']) alert('이미 결제하신 개인결제 내역입니다.', $page_return_url); $hash_data = md5($pp_id.$good_mny.$pp['pp_time']); -if($pp_id != get_session('ss_personalpay_id') || $hash_data != get_session('ss_personalpay_hash')) +if($pp_id !== get_session('ss_personalpay_id') || $hash_data !== get_session('ss_personalpay_hash')) die('개인결제 정보가 올바르지 않습니다.'); // PG사의 가상계좌 또는 계좌이체의 자동 현금영수증 초기배열값