diff --git a/adm/shop_admin/itemform.php b/adm/shop_admin/itemform.php index f76bbc76f..2b90ffc16 100644 --- a/adm/shop_admin/itemform.php +++ b/adm/shop_admin/itemform.php @@ -582,7 +582,7 @@ $(function(){ 상품선택옵션
- + 옵션명과 옵션항목에 따옴표(\', ")는 입력할 수 없습니다.'); ?> @@ -740,7 +740,7 @@ $(function(){
상품선택옵션 입력
상품추가옵션
- + 옵션명과 옵션항목에 따옴표(\', ")는 입력할 수 없습니다.'); ?> diff --git a/adm/shop_admin/itemoption.php b/adm/shop_admin/itemoption.php index 98cef6300..a078a46c4 100644 --- a/adm/shop_admin/itemoption.php +++ b/adm/shop_admin/itemoption.php @@ -14,13 +14,13 @@ if($it['it_id']) { if(mysql_num_rows($result)) $po_run = true; } else if(!empty($_POST)) { - $opt1_subject = trim($_POST['opt1_subject']); - $opt2_subject = trim($_POST['opt2_subject']); - $opt3_subject = trim($_POST['opt3_subject']); + $opt1_subject = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['opt1_subject']))); + $opt2_subject = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['opt2_subject']))); + $opt3_subject = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['opt3_subject']))); - $opt1_val = trim($_POST['opt1']); - $opt2_val = trim($_POST['opt2']); - $opt3_val = trim($_POST['opt3']); + $opt1_val = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['opt1']))); + $opt2_val = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['opt2']))); + $opt3_val = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['opt3']))); if(!$opt1_subject || !$opt1_val) { echo '옵션1과 옵션1 항목을 입력해 주십시오.'; diff --git a/adm/shop_admin/itemsupply.php b/adm/shop_admin/itemsupply.php index 41b8e32bc..4b018e980 100644 --- a/adm/shop_admin/itemsupply.php +++ b/adm/shop_admin/itemsupply.php @@ -84,12 +84,12 @@ if($ps_run) { } // for } else { for($i=0; $i<$subject_count; $i++) { - $spl_subject = trim($_POST['subject'][$i]); - $spl_val = explode(',', trim($_POST['supply'][$i])); + $spl_subject = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['subject'][$i]))); + $spl_val = explode(',', preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['supply'][$i])))); $spl_count = count($spl_val); for($j=0; $j<$spl_count; $j++) { - $spl = trim($spl_val[$j]); + $spl = strip_tags(trim($spl_val[$j])); if($spl_subject && $spl) { $spl_id = $spl_subject.chr(30).$spl; $spl_price = 0;
상품추가옵션 입력