diff --git a/adm/shop_admin/orderlist.php b/adm/shop_admin/orderlist.php
index 25ef04b2a..a58152bb4 100644
--- a/adm/shop_admin/orderlist.php
+++ b/adm/shop_admin/orderlist.php
@@ -206,11 +206,13 @@ if ($search) // 검색렬일 때만 처음 버튼을 보여줌
$od_mobile = '';
if($lines[$i]['od_mobile'])
$od_mobile = '(M)';
+
+ $uid = md5($lines[$i]['od_id'].$lines[$i]['od_time'].$lines[$i]['od_ip']);
?>
-
+
주문일시
diff --git a/adm/shop_admin/orderlist2.php b/adm/shop_admin/orderlist2.php
index bd82048c5..e43cb3121 100644
--- a/adm/shop_admin/orderlist2.php
+++ b/adm/shop_admin/orderlist2.php
@@ -145,6 +145,8 @@ if ($search) // 검색렬일 때만 처음 버튼을 보여줌
$tot_receiptcancel += $row['receiptcancel'];
$tot_couponamount += $row['couponamount'];
$tot_misu += $row['misu'];
+
+ $uid = md5($row['od_id'].$row['od_time'].$row['od_ip']);
?>
@@ -152,7 +154,7 @@ if ($search) // 검색렬일 때만 처음 버튼을 보여줌
-
-
+
- 주문일시
diff --git a/mobile/shop/orderformupdate.php b/mobile/shop/orderformupdate.php
index 2d1164fa2..7e05dbc8c 100644
--- a/mobile/shop/orderformupdate.php
+++ b/mobile/shop/orderformupdate.php
@@ -595,8 +595,9 @@ if($default['de_sms_use'] && ($default['de_sms_use2'] || $default['de_sms_use3']
// SMS END --------------------------------------------------------
-// orderview 에서 사용하기 위해 tmp에 넣고
-set_session('ss_temp_uq_id', $uq_id);
+// orderview 에서 사용하기 위해 session에 넣고
+$uid = md5($od_id.G4_TIME_YMDHIS.$REMOTE_ADDR);
+set_session('ss_orderview_uid', $uid);
// 주문번호제거
set_session('ss_order_uniqid', '');
@@ -605,5 +606,5 @@ set_session('ss_order_uniqid', '');
if (get_session('ss_direct'))
set_session('ss_uq_direct', '');
-goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$od_id.'&uq_id='.$uq_id);
+goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$od_id.'&uid='.$uid);
?>
diff --git a/mobile/shop/orderinquiry.php b/mobile/shop/orderinquiry.php
index 997e6a6cf..615b6cd30 100644
--- a/mobile/shop/orderinquiry.php
+++ b/mobile/shop/orderinquiry.php
@@ -46,8 +46,9 @@ if (!$is_member)
$sql = " select od_id, uq_id from {$g4['shop_order_table']} where od_id = '$od_id' and od_pwd = '$od_pwd' ";
$row = sql_fetch($sql);
if ($row['od_id']) {
- set_session("ss_uq_id_inquiry", $row['uq_id']);
- goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$row['od_id'].'&uq_id='.$row['uq_id']);
+ $uid = md5($row['od_id'].$row['od_time'].$row['od_ip']);
+ set_session('ss_orderview_uid', $uid);
+ goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$row['od_id'].'&uid='.$uid);
}
}
diff --git a/mobile/shop/orderinquiry.sub.php b/mobile/shop/orderinquiry.sub.php
index e48b8cb84..c359b5c6c 100644
--- a/mobile/shop/orderinquiry.sub.php
+++ b/mobile/shop/orderinquiry.sub.php
@@ -29,12 +29,13 @@ $sql = " select a.od_id,
$result = sql_query($sql);
for ($i=0; $row=sql_fetch_array($result); $i++)
{
+ $uid = md5($row['od_id'].$row['od_time'].$row['od_ip']);
?>
|
-
+
|
() |
|
diff --git a/mobile/shop/orderinquiryview.php b/mobile/shop/orderinquiryview.php
index fe9d382dc..fbeafd15b 100644
--- a/mobile/shop/orderinquiryview.php
+++ b/mobile/shop/orderinquiryview.php
@@ -6,14 +6,13 @@ $token = md5(uniqid(rand(), true));
set_session("ss_token", $token);
if (!$is_member) {
- if (get_session("ss_temp_uq_id") != $_GET['uq_id'])
+ if (get_session('ss_orderview_uid') != $_GET['uid'])
alert("직접 링크로는 주문서 조회가 불가합니다.\\n\\n주문조회 화면을 통하여 조회하시기 바랍니다.", G4_SHOP_URL);
}
-$sql = "select * from {$g4['shop_order_table']} where od_id = '$od_id' and uq_id = '$uq_id' ";
+$sql = "select * from {$g4['shop_order_table']} where od_id = '$od_id' ";
$od = sql_fetch($sql);
-if (!$od['od_id']) {
- echo "$od_id $uq_id $MxIssueNO";
+if (!$od['od_id'] || (!$is_member && md5($od['od_id'].$od['od_time'].$od['od_ip']) != get_session('ss_orderview_uid'))) {
alert("조회하실 주문서가 없습니다.", G4_SHOP_URL);
}
diff --git a/shop/orderformupdate.php b/shop/orderformupdate.php
index 1bf61f68c..559bac2d0 100644
--- a/shop/orderformupdate.php
+++ b/shop/orderformupdate.php
@@ -589,8 +589,9 @@ if($default['de_sms_use'] && ($default['de_sms_use2'] || $default['de_sms_use3']
// SMS END --------------------------------------------------------
-// orderview 에서 사용하기 위해 tmp에 넣고
-set_session('ss_temp_uq_id', $uq_id);
+// orderview 에서 사용하기 위해 session에 넣고
+$uid = md5($od_id.G4_TIME_YMDHIS.$REMOTE_ADDR);
+set_session('ss_orderview_uid', $uid);
// 주문번호제거
set_session('ss_order_uniqid', '');
@@ -599,7 +600,7 @@ set_session('ss_order_uniqid', '');
if (get_session('ss_direct'))
set_session('ss_uq_direct', '');
-goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$od_id.'&uq_id='.$uq_id);
+goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$od_id.'&uid='.$uid);
?>
diff --git a/shop/orderinquiry.php b/shop/orderinquiry.php
index 3e3882993..27515afd3 100644
--- a/shop/orderinquiry.php
+++ b/shop/orderinquiry.php
@@ -48,11 +48,12 @@ $from_record = ($page - 1) * $rows; // 시작 열을 구함
// 비회원 주문확인의 경우 바로 주문서 상세조회로 이동
if (!$is_member)
{
- $sql = " select od_id, uq_id from {$g4['shop_order_table']} where od_id = '$od_id' and od_pwd = '$od_pwd' ";
+ $sql = " select od_id, od_time, od_ip from {$g4['shop_order_table']} where od_id = '$od_id' and od_pwd = '$od_pwd' ";
$row = sql_fetch($sql);
if ($row['od_id']) {
- set_session("ss_temp_uq_id", $row['uq_id']);
- goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$row['od_id'].'&uq_id='.$row['uq_id']);
+ $uid = md5($row['od_id'].$row['od_time'].$row['od_ip']);
+ set_session('ss_orderview_uid', $uid);
+ goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$row['od_id'].'&uid='.$uid);
}
}
diff --git a/shop/orderinquiry.sub.php b/shop/orderinquiry.sub.php
index 92d87b663..fb440b81c 100644
--- a/shop/orderinquiry.sub.php
+++ b/shop/orderinquiry.sub.php
@@ -32,12 +32,13 @@ $sql = " select a.od_id,
$result = sql_query($sql);
for ($i=0; $row=sql_fetch_array($result); $i++)
{
+ $uid = md5($row['od_id'].$row['od_time'].$row['od_ip']);
?>
|
-
+
|
() |
|
diff --git a/shop/orderinquiryview.php b/shop/orderinquiryview.php
index 72a43b751..0c469b55e 100644
--- a/shop/orderinquiryview.php
+++ b/shop/orderinquiryview.php
@@ -11,14 +11,13 @@ $token = md5(uniqid(rand(), true));
set_session("ss_token", $token);
if (!$is_member) {
- if (get_session("ss_temp_uq_id") != $_GET['uq_id'])
+ if (get_session('ss_orderview_uid') != $_GET['uid'])
alert("직접 링크로는 주문서 조회가 불가합니다.\\n\\n주문조회 화면을 통하여 조회하시기 바랍니다.", G4_SHOP_URL);
}
-$sql = "select * from {$g4['shop_order_table']} where od_id = '$od_id' and uq_id = '$uq_id' ";
+$sql = "select * from {$g4['shop_order_table']} where od_id = '$od_id' ";
$od = sql_fetch($sql);
-if (!$od['od_id']) {
- echo "$od_id $uq_id $MxIssueNO";
+if (!$od['od_id'] || (!$is_member && md5($od['od_id'].$od['od_time'].$od['od_ip']) != get_session('ss_orderview_uid'))) {
alert("조회하실 주문서가 없습니다.", G4_SHOP_URL);
}
@@ -32,8 +31,6 @@ if($rq['cnt'])
// 결제방법
$settle_case = $od['od_settle_case'];
-set_session('ss_temp_uq_id', $uq_id);
-
$g4['title'] = '주문상세내역';
include_once('./_head.php');
?>
|