false, 'message' => 'μ•Œ 수 μ—†λŠ” 였λ₯˜κ°€ λ°œμƒν–ˆμŠ΅λ‹ˆλ‹€.' ]; try { // POST 데이터가 μ—†μœΌλ©΄ 였λ₯˜ 처리 if ($_SERVER['REQUEST_METHOD'] !== 'POST') { throw new Exception('잘λͺ»λœ μš”μ²­ λ°©μ‹μž…λ‹ˆλ‹€.'); } $contact_subject = isset($_POST['contact_subject']) ? trim($_POST['contact_subject']) : ''; $contact_name = isset($_POST['contact_name']) ? trim($_POST['contact_name']) : ''; $contact_hp = isset($_POST['contact_hp']) ? trim($_POST['contact_hp']) : ''; $contact_zip = isset($_POST['contact_zip']) ? trim($_POST['contact_zip']) : ''; $contact_addr1 = isset($_POST['contact_addr1']) ? trim($_POST['contact_addr1']) : ''; $contact_addr2 = isset($_POST['contact_addr2']) ? trim($_POST['contact_addr2']) : ''; $contact_message = isset($_POST['contact_message']) ? trim($_POST['contact_message']) : ''; if (empty($contact_name) || empty($contact_hp) || empty($contact_message)) { throw new Exception('ν•„μˆ˜ μž…λ ₯ ν•­λͺ©μ΄ λˆ„λ½λ˜μ—ˆμŠ΅λ‹ˆλ‹€.'); } // SQL Injection λ°©μ§€λ₯Ό μœ„ν•΄ escaping $contact_subject = sql_real_escape_string($contact_subject); $contact_name = sql_real_escape_string($contact_name); $contact_hp = sql_real_escape_string($contact_hp); $contact_zip = sql_real_escape_string($contact_zip); $contact_addr1 = sql_real_escape_string($contact_addr1); $contact_addr2 = sql_real_escape_string($contact_addr2); $contact_message = sql_real_escape_string($contact_message); $sql = " INSERT INTO {$g5['contact_inquiry_table']} SET contact_subject = '{$contact_subject}', contact_name = '{$contact_name}', contact_hp = '{$contact_hp}', contact_zip = '{$contact_zip}', contact_addr1 = '{$contact_addr1}', contact_addr2 = '{$contact_addr2}', contact_message = '{$contact_message}', created_at = '" . G5_TIME_YMDHIS . "', status = 'new' "; // ν…Œμ΄λΈ” 쑴재 μ—¬λΆ€ 확인 (ν…Œμ΄λΈ”μ΄ μ—†μ–΄μ„œ μ—λŸ¬λ‚˜λŠ” 경우 λ°©μ§€) $table_check = sql_query(" DESCRIBE {$g5['contact_inquiry_table']} ", false); if (!$table_check) { // ν…Œμ΄λΈ”μ΄ μ—†μœΌλ©΄ μžλ™ 생성 μ‹œλ„ $create_sql = " CREATE TABLE IF NOT EXISTS `{$g5['contact_inquiry_table']}` ( `id` int(11) NOT NULL AUTO_INCREMENT, `contact_subject` varchar(255) NOT NULL DEFAULT '' COMMENT '문의 ν•­λͺ© (μ£Όκ±°ν˜•νƒœ λ“±)', `contact_name` varchar(255) NOT NULL DEFAULT '' COMMENT '이름', `contact_hp` varchar(255) NOT NULL DEFAULT '' COMMENT 'μ—°λ½μ²˜', `contact_zip` varchar(10) NOT NULL DEFAULT '' COMMENT '우편번호', `contact_addr1` varchar(255) NOT NULL DEFAULT '' COMMENT 'κΈ°λ³Έ μ£Όμ†Œ', `contact_addr2` varchar(255) NOT NULL DEFAULT '' COMMENT '상세 μ£Όμ†Œ', `contact_message` text NOT NULL COMMENT '문의 λ‚΄μš©', `created_at` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT 'μž‘μ„±μΌ', `status` varchar(20) NOT NULL DEFAULT 'new' COMMENT 'μƒνƒœ (new, read, done)', PRIMARY KEY (`id`) ) ENGINE=MyISAM DEFAULT CHARSET=utf8 COMMENT='상담 문의 λ‚΄μ—­'; "; sql_query($create_sql); } if (sql_query($sql)) { $response['success'] = true; $response['message'] = '상담 신청이 μ„±κ³΅μ μœΌλ‘œ μ €μž₯λ˜μ—ˆμŠ΅λ‹ˆλ‹€.'; } else { throw new Exception('λ°μ΄ν„°λ² μ΄μŠ€ μ €μž₯ 쀑 였λ₯˜κ°€ λ°œμƒν–ˆμŠ΅λ‹ˆλ‹€.'); } } catch (Exception $e) { $response['message'] = $e->getMessage(); } // 버퍼 λΉ„μš°κΈ° (ν˜Ήμ‹œ λͺ¨λ₯Ό κ³΅λ°±μ΄λ‚˜ κ²½κ³  λ©”μ‹œμ§€ 제거) ob_clean(); header('Content-Type: application/json'); echo json_encode($response); exit; ?>