KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 DAV/2 PHP/5.2.17
System : Linux localhost 2.6.18-419.el5 #1 SMP Fri Feb 24 22:47:42 UTC 2017 x86_64
User : nobody ( 99)
PHP Version : 5.2.17
Disable Function : NONE
Directory :  /home/queenjbs/www/event/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /home/queenjbs/www/event/event2_proc.php
<?include "$DOCUMENT_ROOT/conf/conf_dir.php";?>

<meta http-equiv='Content-Type' content='text/html; charset=UTF-8' />

<?
/*
echo"id : $sessionIDX <Br>";
echo"id : $sessionID <Br>";
echo"goodname : $goodname <Br>";
echo"price : $price";
*/
if($sessionIDX && $goodname && $price){
	$orderstep =1; //1 : 경매대기,2 : 경매당첨,6 : 경매취소
	$res = Get_dbres("select username,email from user where id = '$sessionIDX'");
	$row	= mysql_fetch_array($res);
	$username = mb_convert_kana($row[username], "rs", "utf-8");

	$resub = Get_dbres("select * from user_profiles where user_id = '$sessionIDX'");
	$rows	= mysql_fetch_array($resub);
	$tel = mb_convert_kana($rows[tel], "a", "utf-8");
	$o_zip =  mb_convert_kana($rows[zip1], "a", "utf-8")."-".mb_convert_kana($rows[zip2], "a", "utf-8");
	$juso	= $rows[juso];
	
	

	$query = "INSERT INTO `jyjsite`.`AUCTION_EVENT` 
	(`no`, `orderstep`, `goodsuid`, `price`, `mbruid`, `member_id`, `o_name`, `o_email`, `o_tel`, `o_zip`, `o_addr`,`d_regis`) 
	VALUES 
	(NULL, '$orderstep', '$goodname', '$price', '$sessionIDX', '$sessionID', '$username', '$row[email]', '$tel', '$o_zip', '$juso', now());";
	
	$result = mysql_query($query,$db_con);

	echo "<script>alert('入力した金額に正常参加できました。');parent.location.href='/event/event2.html';</script>";
}else{
	echo "<script>alert('情報が正しくありません。もう一度入力お願いします。');parent.location.href='/event/event2.html';</script>";
}
?>

Anon7 - 2021