thisgunandClaude Opus 4.8
935ea84c7c
- 쿠폰/희망배송일/검색어/계정/결제 콜백 등 입력값을 SQL 컨텍스트에 맞게 재처리 - dt_data·PG 응답 등 비-GPC 값과 소셜 provider 입력 정제 보완 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
45 lines
1.4 KiB
PHP
45 lines
1.4 KiB
PHP
<?php
|
|
$sub_menu = "200300";
|
|
require_once './_common.php';
|
|
|
|
if ($w == 'u' || $w == 'd') {
|
|
check_demo();
|
|
}
|
|
|
|
auth_check_menu($auth, $sub_menu, 'w');
|
|
|
|
check_admin_token();
|
|
|
|
$ma_id = isset($_POST['ma_id']) ? (int) $_POST['ma_id'] : 0;
|
|
$ma_subject = isset($_POST['ma_subject']) ? addslashes(strip_tags(clean_xss_attributes(stripslashes($_POST['ma_subject'])))) : '';
|
|
$ma_content = isset($_POST['ma_content']) ? $_POST['ma_content'] : '';
|
|
|
|
if ($w == '') {
|
|
$sql = " insert {$g5['mail_table']}
|
|
set ma_subject = '{$ma_subject}',
|
|
ma_content = '{$ma_content}',
|
|
ma_time = '" . G5_TIME_YMDHIS . "',
|
|
ma_ip = '{$_SERVER['REMOTE_ADDR']}' ";
|
|
sql_query($sql);
|
|
|
|
$ma_id = sql_insert_id();
|
|
run_event('admin_mail_created', $ma_id);
|
|
|
|
} elseif ($w == 'u') {
|
|
$sql = " update {$g5['mail_table']}
|
|
set ma_subject = '{$ma_subject}',
|
|
ma_content = '{$ma_content}',
|
|
ma_time = '" . G5_TIME_YMDHIS . "',
|
|
ma_ip = '{$_SERVER['REMOTE_ADDR']}'
|
|
where ma_id = '{$ma_id}' ";
|
|
sql_query($sql);
|
|
run_event('admin_mail_updated', $ma_id);
|
|
|
|
} elseif ($w == 'd') {
|
|
$sql = " delete from {$g5['mail_table']} where ma_id = '{$ma_id}' ";
|
|
sql_query($sql);
|
|
run_event('admin_mail_deleted', $ma_id);
|
|
}
|
|
|
|
goto_url('./mail_list.php');
|