first commit 2

2026-06-11 18:47:38 +09:00
parent c768729ce6
commit 6f534e33a6
11095 changed files with 1595758 additions and 0 deletions
@@ -0,0 +1,69 @@
+<?php
+$sub_menu = '400400';
+include_once('./_common.php');
+
+check_admin_token();
+
+$od_shop_memo = isset($_POST['od_shop_memo']) ? strip_tags($_POST['od_shop_memo']) : '';
+$od_id = isset($_POST['od_id']) ? safe_replace_regex($_POST['od_id'], 'od_id') : '';
+
+$search = isset($_REQUEST['search']) ? get_search_string($_REQUEST['search']) : '';
+$sort1 = isset($_REQUEST['sort1']) ? clean_xss_tags($_REQUEST['sort1'], 1, 1) : '';
+$sort2 = isset($_REQUEST['sort2']) ? clean_xss_tags($_REQUEST['sort2'], 1, 1) : '';
+$sel_field = isset($_REQUEST['sel_field']) ? clean_xss_tags($_REQUEST['sel_field'], 1, 1) : '';
+
+if(isset($_POST['mod_type']) && $_POST['mod_type'] === 'info') {
+    $od_zip1   = isset($_POST['od_zip']) ? preg_replace('/[^0-9]/', '', substr($_POST['od_zip'], 0, 3)) : '';
+    $od_zip2   = isset($_POST['od_zip']) ? preg_replace('/[^0-9]/', '', substr($_POST['od_zip'], 3)) : '';
+    $od_b_zip1 = isset($_POST['od_b_zip']) ? preg_replace('/[^0-9]/', '', substr($_POST['od_b_zip'], 0, 3)) : '';
+    $od_b_zip2 = isset($_POST['od_b_zip']) ? preg_replace('/[^0-9]/', '', substr($_POST['od_b_zip'], 3)) : '';
+    $od_email = isset($_POST['od_email']) ? strip_tags(clean_xss_attributes($_POST['od_email'])) : '';
+    $od_name = isset($_POST['od_name']) ? clean_xss_tags($_POST['od_name'], 1, 1) : '';
+    $od_tel = isset($_POST['od_tel']) ? clean_xss_tags($_POST['od_tel'], 1, 1) : '';
+    $od_hp = isset($_POST['od_hp']) ? clean_xss_tags($_POST['od_hp'], 1, 1) : '';
+    $od_addr1 = isset($_POST['od_addr1']) ? clean_xss_tags($_POST['od_addr1'], 1, 1) : '';
+    $od_addr2 = isset($_POST['od_addr2']) ? clean_xss_tags($_POST['od_addr2'], 1, 1) : '';
+    $od_addr3 = isset($_POST['od_addr3']) ? clean_xss_tags($_POST['od_addr3'], 1, 1) : '';
+    $od_addr_jibeon = isset($_POST['od_addr_jibeon']) ? clean_xss_tags($_POST['od_addr_jibeon'], 1, 1) : '';
+    $od_b_name = isset($_POST['od_b_name']) ? clean_xss_tags($_POST['od_b_name'], 1, 1) : '';
+    $od_b_tel = isset($_POST['od_b_tel']) ? clean_xss_tags($_POST['od_b_tel'], 1, 1) : '';
+    $od_b_hp = isset($_POST['od_b_hp']) ? clean_xss_tags($_POST['od_b_hp'], 1, 1) : '';
+    $od_b_addr1 = isset($_POST['od_b_addr1']) ? clean_xss_tags($_POST['od_b_addr1'], 1, 1) : '';
+    $od_b_addr2 = isset($_POST['od_b_addr2']) ? clean_xss_tags($_POST['od_b_addr2'], 1, 1) : '';
+    $od_b_addr3 = isset($_POST['od_b_addr3']) ? clean_xss_tags($_POST['od_b_addr3'], 1, 1) : '';
+    $od_b_addr_jibeon = isset($_POST['od_b_addr_jibeon']) ? clean_xss_tags($_POST['od_b_addr_jibeon'], 1, 1) : '';
+    $od_hope_date = isset($_POST['od_hope_date']) ? clean_xss_tags($_POST['od_hope_date'], 1, 1) : '';
+
+    $sql = " update {$g5['g5_shop_order_table']}
+                set od_name = '$od_name',
+                    od_tel = '$od_tel',
+                    od_hp = '$od_hp',
+                    od_zip1 = '$od_zip1',
+                    od_zip2 = '$od_zip2',
+                    od_addr1 = '$od_addr1',
+                    od_addr2 = '$od_addr2',
+                    od_addr3 = '$od_addr3',
+                    od_addr_jibeon = '$od_addr_jibeon',
+                    od_email = '$od_email',
+                    od_b_name = '$od_b_name',
+                    od_b_tel = '$od_b_tel',
+                    od_b_hp = '$od_b_hp',
+                    od_b_zip1 = '$od_b_zip1',
+                    od_b_zip2 = '$od_b_zip2',
+                    od_b_addr1 = '$od_b_addr1',
+                    od_b_addr2 = '$od_b_addr2',
+                    od_b_addr3 = '$od_b_addr3',
+                    od_b_addr_jibeon = '$od_b_addr_jibeon' ";
+
+    if ($default['de_hope_date_use'])
+        $sql .= " , od_hope_date = '$od_hope_date' ";
+} else {
+    $sql = "update {$g5['g5_shop_order_table']}
+                set od_shop_memo = '$od_shop_memo' ";
+}
+$sql .= " where od_id = '$od_id' ";
+sql_query($sql);
+
+$qstr = "sort1=$sort1&amp;sort2=$sort2&amp;sel_field=$sel_field&amp;search=$search&amp;page=$page";
+
+goto_url("./orderform.php?od_id=$od_id&amp;$qstr");