From 8ae41a2213072beab163eeac012fdc210ac666a2 Mon Sep 17 00:00:00 2001 From: chicpro Date: Thu, 22 Aug 2013 17:23:58 +0900 Subject: [PATCH] =?UTF-8?q?=EC=A3=BC=EB=AC=B8=20=EC=83=81=EC=84=B8?= =?UTF-8?q?=EB=B3=B4=EA=B8=B0=20url=EC=97=90=EC=84=9C=20uq=5Fid=20?= =?UTF-8?q?=EC=A0=9C=EA=B1=B0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- adm/shop_admin/orderlist.php | 4 +++- adm/shop_admin/orderlist2.php | 4 +++- mobile/shop/orderformupdate.php | 7 ++++--- mobile/shop/orderinquiry.php | 5 +++-- mobile/shop/orderinquiry.sub.php | 3 ++- mobile/shop/orderinquiryview.php | 7 +++---- shop/orderformupdate.php | 7 ++++--- shop/orderinquiry.php | 7 ++++--- shop/orderinquiry.sub.php | 3 ++- shop/orderinquiryview.php | 9 +++------ 10 files changed, 31 insertions(+), 25 deletions(-) diff --git a/adm/shop_admin/orderlist.php b/adm/shop_admin/orderlist.php index 25ef04b2a..a58152bb4 100644 --- a/adm/shop_admin/orderlist.php +++ b/adm/shop_admin/orderlist.php @@ -206,11 +206,13 @@ if ($search) // 검색렬일 때만 처음 버튼을 보여줌 $od_mobile = ''; if($lines[$i]['od_mobile']) $od_mobile = '(M)'; + + $uid = md5($lines[$i]['od_id'].$lines[$i]['od_time'].$lines[$i]['od_ip']); ?> - +
주문일시 diff --git a/adm/shop_admin/orderlist2.php b/adm/shop_admin/orderlist2.php index bd82048c5..e43cb3121 100644 --- a/adm/shop_admin/orderlist2.php +++ b/adm/shop_admin/orderlist2.php @@ -145,6 +145,8 @@ if ($search) // 검색렬일 때만 처음 버튼을 보여줌 $tot_receiptcancel += $row['receiptcancel']; $tot_couponamount += $row['couponamount']; $tot_misu += $row['misu']; + + $uid = md5($row['od_id'].$row['od_time'].$row['od_ip']); ?>
  • @@ -152,7 +154,7 @@ if ($search) // 검색렬일 때만 처음 버튼을 보여줌
    - +
    주문일시
    diff --git a/mobile/shop/orderformupdate.php b/mobile/shop/orderformupdate.php index 2d1164fa2..7e05dbc8c 100644 --- a/mobile/shop/orderformupdate.php +++ b/mobile/shop/orderformupdate.php @@ -595,8 +595,9 @@ if($default['de_sms_use'] && ($default['de_sms_use2'] || $default['de_sms_use3'] // SMS END -------------------------------------------------------- -// orderview 에서 사용하기 위해 tmp에 넣고 -set_session('ss_temp_uq_id', $uq_id); +// orderview 에서 사용하기 위해 session에 넣고 +$uid = md5($od_id.G4_TIME_YMDHIS.$REMOTE_ADDR); +set_session('ss_orderview_uid', $uid); // 주문번호제거 set_session('ss_order_uniqid', ''); @@ -605,5 +606,5 @@ set_session('ss_order_uniqid', ''); if (get_session('ss_direct')) set_session('ss_uq_direct', ''); -goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$od_id.'&uq_id='.$uq_id); +goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$od_id.'&uid='.$uid); ?> diff --git a/mobile/shop/orderinquiry.php b/mobile/shop/orderinquiry.php index 997e6a6cf..615b6cd30 100644 --- a/mobile/shop/orderinquiry.php +++ b/mobile/shop/orderinquiry.php @@ -46,8 +46,9 @@ if (!$is_member) $sql = " select od_id, uq_id from {$g4['shop_order_table']} where od_id = '$od_id' and od_pwd = '$od_pwd' "; $row = sql_fetch($sql); if ($row['od_id']) { - set_session("ss_uq_id_inquiry", $row['uq_id']); - goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$row['od_id'].'&uq_id='.$row['uq_id']); + $uid = md5($row['od_id'].$row['od_time'].$row['od_ip']); + set_session('ss_orderview_uid', $uid); + goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$row['od_id'].'&uid='.$uid); } } diff --git a/mobile/shop/orderinquiry.sub.php b/mobile/shop/orderinquiry.sub.php index e48b8cb84..c359b5c6c 100644 --- a/mobile/shop/orderinquiry.sub.php +++ b/mobile/shop/orderinquiry.sub.php @@ -29,12 +29,13 @@ $sql = " select a.od_id, $result = sql_query($sql); for ($i=0; $row=sql_fetch_array($result); $i++) { + $uid = md5($row['od_id'].$row['od_time'].$row['od_ip']); ?> - + () diff --git a/mobile/shop/orderinquiryview.php b/mobile/shop/orderinquiryview.php index fe9d382dc..fbeafd15b 100644 --- a/mobile/shop/orderinquiryview.php +++ b/mobile/shop/orderinquiryview.php @@ -6,14 +6,13 @@ $token = md5(uniqid(rand(), true)); set_session("ss_token", $token); if (!$is_member) { - if (get_session("ss_temp_uq_id") != $_GET['uq_id']) + if (get_session('ss_orderview_uid') != $_GET['uid']) alert("직접 링크로는 주문서 조회가 불가합니다.\\n\\n주문조회 화면을 통하여 조회하시기 바랍니다.", G4_SHOP_URL); } -$sql = "select * from {$g4['shop_order_table']} where od_id = '$od_id' and uq_id = '$uq_id' "; +$sql = "select * from {$g4['shop_order_table']} where od_id = '$od_id' "; $od = sql_fetch($sql); -if (!$od['od_id']) { - echo "$od_id $uq_id $MxIssueNO"; +if (!$od['od_id'] || (!$is_member && md5($od['od_id'].$od['od_time'].$od['od_ip']) != get_session('ss_orderview_uid'))) { alert("조회하실 주문서가 없습니다.", G4_SHOP_URL); } diff --git a/shop/orderformupdate.php b/shop/orderformupdate.php index 1bf61f68c..559bac2d0 100644 --- a/shop/orderformupdate.php +++ b/shop/orderformupdate.php @@ -589,8 +589,9 @@ if($default['de_sms_use'] && ($default['de_sms_use2'] || $default['de_sms_use3'] // SMS END -------------------------------------------------------- -// orderview 에서 사용하기 위해 tmp에 넣고 -set_session('ss_temp_uq_id', $uq_id); +// orderview 에서 사용하기 위해 session에 넣고 +$uid = md5($od_id.G4_TIME_YMDHIS.$REMOTE_ADDR); +set_session('ss_orderview_uid', $uid); // 주문번호제거 set_session('ss_order_uniqid', ''); @@ -599,7 +600,7 @@ set_session('ss_order_uniqid', ''); if (get_session('ss_direct')) set_session('ss_uq_direct', ''); -goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$od_id.'&uq_id='.$uq_id); +goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$od_id.'&uid='.$uid); ?> diff --git a/shop/orderinquiry.php b/shop/orderinquiry.php index 3e3882993..27515afd3 100644 --- a/shop/orderinquiry.php +++ b/shop/orderinquiry.php @@ -48,11 +48,12 @@ $from_record = ($page - 1) * $rows; // 시작 열을 구함 // 비회원 주문확인의 경우 바로 주문서 상세조회로 이동 if (!$is_member) { - $sql = " select od_id, uq_id from {$g4['shop_order_table']} where od_id = '$od_id' and od_pwd = '$od_pwd' "; + $sql = " select od_id, od_time, od_ip from {$g4['shop_order_table']} where od_id = '$od_id' and od_pwd = '$od_pwd' "; $row = sql_fetch($sql); if ($row['od_id']) { - set_session("ss_temp_uq_id", $row['uq_id']); - goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$row['od_id'].'&uq_id='.$row['uq_id']); + $uid = md5($row['od_id'].$row['od_time'].$row['od_ip']); + set_session('ss_orderview_uid', $uid); + goto_url(G4_SHOP_URL.'/orderinquiryview.php?od_id='.$row['od_id'].'&uid='.$uid); } } diff --git a/shop/orderinquiry.sub.php b/shop/orderinquiry.sub.php index 92d87b663..fb440b81c 100644 --- a/shop/orderinquiry.sub.php +++ b/shop/orderinquiry.sub.php @@ -32,12 +32,13 @@ $sql = " select a.od_id, $result = sql_query($sql); for ($i=0; $row=sql_fetch_array($result); $i++) { + $uid = md5($row['od_id'].$row['od_time'].$row['od_ip']); ?> - + () diff --git a/shop/orderinquiryview.php b/shop/orderinquiryview.php index 72a43b751..0c469b55e 100644 --- a/shop/orderinquiryview.php +++ b/shop/orderinquiryview.php @@ -11,14 +11,13 @@ $token = md5(uniqid(rand(), true)); set_session("ss_token", $token); if (!$is_member) { - if (get_session("ss_temp_uq_id") != $_GET['uq_id']) + if (get_session('ss_orderview_uid') != $_GET['uid']) alert("직접 링크로는 주문서 조회가 불가합니다.\\n\\n주문조회 화면을 통하여 조회하시기 바랍니다.", G4_SHOP_URL); } -$sql = "select * from {$g4['shop_order_table']} where od_id = '$od_id' and uq_id = '$uq_id' "; +$sql = "select * from {$g4['shop_order_table']} where od_id = '$od_id' "; $od = sql_fetch($sql); -if (!$od['od_id']) { - echo "$od_id $uq_id $MxIssueNO"; +if (!$od['od_id'] || (!$is_member && md5($od['od_id'].$od['od_time'].$od['od_ip']) != get_session('ss_orderview_uid'))) { alert("조회하실 주문서가 없습니다.", G4_SHOP_URL); } @@ -32,8 +31,6 @@ if($rq['cnt']) // 결제방법 $settle_case = $od['od_settle_case']; -set_session('ss_temp_uq_id', $uq_id); - $g4['title'] = '주문상세내역'; include_once('./_head.php'); ?>