M72X2/X2/mobile/shop/inicis/pay_approval.php



<title>M72X2/X2/mobile/shop/inicis/pay_approval.php</title>


<div class="header">M72X2/X2/mobile/shop/inicis/pay_approval.php</div>
<pre>&lt;?php
include_once(&#039;./_common.php&#039;);
include_once(G5_MSHOP_PATH.&#039;/settle_inicis.inc.php&#039;);

// 세션 초기화
set_session(&#039;P_TID&#039;,  &#039;&#039;);
set_session(&#039;P_AMT&#039;,  &#039;&#039;);
set_session(&#039;P_HASH&#039;, &#039;&#039;);

$oid  = isset($_REQUEST[&#039;P_NOTI&#039;]) ? trim($_REQUEST[&#039;P_NOTI&#039;]) : &#039;&#039;;
$p_req_url = isset($_REQUEST[&#039;P_REQ_URL&#039;]) ? is_inicis_url_return(trim($_REQUEST[&#039;P_REQ_URL&#039;])) : &#039;&#039;;
$p_status = isset($_REQUEST[&#039;P_STATUS&#039;]) ? trim($_REQUEST[&#039;P_STATUS&#039;]) : &#039;&#039;;
$p_tid = isset($_REQUEST[&#039;P_TID&#039;]) ? trim($_REQUEST[&#039;P_TID&#039;]) : &#039;&#039;;
$p_rmesg1 = isset($_REQUEST[&#039;P_RMESG1&#039;]) ? trim($_REQUEST[&#039;P_RMESG1&#039;]) : &#039;&#039;;

if( ! $p_req_url || !preg_match(&#039;/^https\:\/\//i&#039;, $p_req_url)){
    alert(&quot;잘못된 요청 URL 입니다.&quot;);
}

$sql = &quot; select * from {$g5[&#039;g5_shop_order_data_table&#039;]} where od_id = &#039;$oid&#039; &quot;;
$row = sql_fetch($sql);

$data = isset($row[&#039;dt_data&#039;]) ? unserialize(base64_decode($row[&#039;dt_data&#039;])) : array();

if(isset($data[&#039;pp_id&#039;]) &amp;&amp; $data[&#039;pp_id&#039;]) {
    $order_action_url = G5_HTTPS_MSHOP_URL.&#039;/personalpayformupdate.php&#039;;
    $page_return_url  = G5_SHOP_URL.&#039;/personalpayform.php?pp_id=&#039;.$data[&#039;pp_id&#039;];
} else {
    $order_action_url = G5_HTTPS_MSHOP_URL.&#039;/orderformupdate.php&#039;;
    $page_return_url  = G5_SHOP_URL.&#039;/orderform.php&#039;;
    if(get_session(&#039;ss_direct&#039;))
        $page_return_url .= &#039;?sw_direct=1&#039;;

    // 장바구니가 비어있는가?
    if (get_session(&#039;ss_direct&#039;))
        $tmp_cart_id = get_session(&#039;ss_cart_direct&#039;);
    else
        $tmp_cart_id = get_session(&#039;ss_cart_id&#039;);

    if (get_cart_count($tmp_cart_id) == 0)// 장바구니에 담기
        alert(&#039;세션을 잃거나 다른 브라우저에서 데이터가 변경된 경우입니다. 장바구니 상태를 확인후에 다시 시도해 주세요.&#039;, G5_SHOP_URL.&#039;/cart.php&#039;);

    $error = &quot;&quot;;
    // 장바구니 상품 재고 검사
    $sql = &quot; select it_id,
                    ct_qty,
                    it_name,
                    io_id,
                    io_type,
                    ct_option
               from {$g5[&#039;g5_shop_cart_table&#039;]}
              where od_id = &#039;$tmp_cart_id&#039;
                and ct_select = &#039;1&#039; &quot;;
    $result = sql_query($sql);
    for ($i=0; $row=sql_fetch_array($result); $i++)
    {
        // 상품에 대한 현재고수량
        if($row[&#039;io_id&#039;]) {
            $it_stock_qty = (int)get_option_stock_qty($row[&#039;it_id&#039;], $row[&#039;io_id&#039;], $row[&#039;io_type&#039;]);
        } else {
            $it_stock_qty = (int)get_it_stock_qty($row[&#039;it_id&#039;]);
        }
        // 장바구니 수량이 재고수량보다 많다면 오류
        if ($row[&#039;ct_qty&#039;] &gt; $it_stock_qty)
            $error .= &quot;{$row[&#039;ct_option&#039;]} 의 재고수량이 부족합니다. 현재고수량 : $it_stock_qty 개\\n\\n&quot;;
    }

    if($i == 0)
        alert(&#039;장바구니가 비어 있습니다.&#039;, G5_SHOP_URL.&#039;/cart.php&#039;);

    if ($error != &quot;&quot;)
    {
        $error .= &quot;결제진행이 중단 되었습니다.&quot;;
        alert($error, G5_SHOP_URL.&#039;/cart.php&#039;);
    }
}

if($p_status !== &#039;00&#039;) {
    alert(&#039;오류 : &#039;.iconv_utf8($p_rmesg1).&#039; 코드 : &#039;.$p_status, $page_return_url);
} else {
    $post_data = array(
        &#039;P_MID&#039; =&gt; $default[&#039;de_inicis_mid&#039;],
        &#039;P_TID&#039; =&gt; $p_tid
    );

    $ch = curl_init();
    curl_setopt($ch, CURLOPT_PORT, 443);
    curl_setopt($ch, CURLOPT_URL, $p_req_url);
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $post_data);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    $return = curl_exec($ch);

    if(!$return)
        alert(&#039;KG이니시스와 통신 오류로 결제등록 요청을 완료하지 못했습니다.\\n결제등록 요청을 다시 시도해 주십시오.&#039;, $page_return_url);

    // 결과를 배열로 변환
    parse_str($return, $ret);
    $PAY = array_map(&#039;trim&#039;, $ret);
    $PAY = array_map(&#039;strip_tags&#039;, $PAY);
    $PAY = array_map(&#039;get_search_string&#039;, $PAY);

    if($PAY[&#039;P_STATUS&#039;] != &#039;00&#039;)
        alert(&#039;오류 : &#039;.iconv_utf8($PAY[&#039;P_RMESG1&#039;]).&#039; 코드 : &#039;.$PAY[&#039;P_STATUS&#039;], $page_return_url);

    // TID, AMT 를 세션으로 주문완료 페이지 전달
    $hash = md5($PAY[&#039;P_TID&#039;].$PAY[&#039;P_MID&#039;].$PAY[&#039;P_AMT&#039;]);
    set_session(&#039;P_TID&#039;,  $PAY[&#039;P_TID&#039;]);
    set_session(&#039;P_AMT&#039;,  $PAY[&#039;P_AMT&#039;]);
    set_session(&#039;P_HASH&#039;, $hash);
}

$params = array();

//개인결제
if(isset($data[&#039;pp_id&#039;]) &amp;&amp; !empty($data[&#039;pp_id&#039;])) {
    // 개인결제 정보
    $pp_check = false;
    $sql = &quot; select * from {$g5[&#039;g5_shop_personalpay_table&#039;]} where pp_id = &#039;{$PAY[&#039;P_OID&#039;]}&#039; and pp_tno = &#039;{$PAY[&#039;P_TID&#039;]}&#039; and pp_use = &#039;1&#039; &quot;;
    $pp = sql_fetch($sql);

    if( !$pp[&#039;pp_tno&#039;] &amp;&amp; $data[&#039;pp_id&#039;] == $oid ){
        $res_cd = $PAY[&#039;P_STATUS&#039;];
        $pp_id = $oid;

        $exclude = array(&#039;res_cd&#039;, &#039;P_HASH&#039;, &#039;P_TYPE&#039;, &#039;P_AUTH_DT&#039;, &#039;P_VACT_BANK&#039;, &#039;LGD_PAYKEY&#039;, &#039;pp_id&#039;, &#039;good_mny&#039;, &#039;pp_name&#039;, &#039;pp_email&#039;, &#039;pp_hp&#039;, &#039;pp_settle_case&#039;);

        foreach($data as $key=&gt;$v) {
            if( !in_array($key, $exclude) ){
                $_POST[$key] = $params[$key] = clean_xss_tags(strip_tags($v));
            }
        }

        $good_mny = isset($PAY[&#039;P_AMT&#039;]) ? $PAY[&#039;P_AMT&#039;] : 0;
        $pp_name = addslashes(clean_xss_tags($data[&#039;pp_name&#039;]));
        $pp_email = addslashes(clean_xss_tags($data[&#039;pp_email&#039;]));
        $pp_hp = addslashes(clean_xss_tags($data[&#039;pp_hp&#039;]));
        $pp_settle_case = addslashes(clean_xss_tags($data[&#039;pp_settle_case&#039;]));

        $_POST[&#039;P_HASH&#039;] = $hash;
        $_POST[&#039;P_AUTH_NO&#039;] = isset($PAY[&#039;P_AUTH_NO&#039;]) ? $PAY[&#039;P_AUTH_NO&#039;] : &#039;&#039;;
        $_POST[&#039;pp_id&#039;] = isset($PAY[&#039;P_OID&#039;]) ? $PAY[&#039;P_OID&#039;] : &#039;&#039;;
        $_POST[&#039;good_mny&#039;] = isset($PAY[&#039;P_AMT&#039;]) ? $PAY[&#039;P_AMT&#039;] : 0;

        $_POST[&#039;P_TYPE&#039;] = isset($PAY[&#039;P_TYPE&#039;]) ? $PAY[&#039;P_TYPE&#039;] : &#039;&#039;;
        $_POST[&#039;P_AUTH_DT&#039;] = isset($PAY[&#039;P_AUTH_DT&#039;]) ? $PAY[&#039;P_AUTH_DT&#039;] : &#039;&#039;;
        $_POST[&#039;P_HPP_CORP&#039;] = isset($PAY[&#039;P_HPP_CORP&#039;]) ? $PAY[&#039;P_HPP_CORP&#039;] : &#039;&#039;;
        $_POST[&#039;P_APPL_NUM&#039;] = isset($PAY[&#039;P_APPL_NUM&#039;]) ? $PAY[&#039;P_APPL_NUM&#039;] : &#039;&#039;;
        $_POST[&#039;P_VACT_NUM&#039;] = isset($PAY[&#039;P_VACT_NUM&#039;]) ? $PAY[&#039;P_VACT_NUM&#039;] : &#039;&#039;;
        $_POST[&#039;P_VACT_NAME&#039;] = isset($PAY[&#039;P_VACT_NAME&#039;]) ? iconv_utf8($PAY[&#039;P_VACT_NAME&#039;]) : &#039;&#039;;
        $_POST[&#039;P_VACT_BANK&#039;] = (isset($PAY[&#039;P_VACT_BANK_CODE&#039;]) &amp;&amp; isset($BANK_CODE[$PAY[&#039;P_VACT_BANK_CODE&#039;]])) ? $BANK_CODE[$PAY[&#039;P_VACT_BANK_CODE&#039;]] : &#039;&#039;;
        $_POST[&#039;P_CARD_ISSUER&#039;] = isset($CARD_CODE[$PAY[&#039;P_CARD_ISSUER_CODE&#039;]]) ? $CARD_CODE[$PAY[&#039;P_CARD_ISSUER_CODE&#039;]] : &#039;&#039;;
        $_POST[&#039;P_UNAME&#039;] = isset($PAY[&#039;P_UNAME&#039;]) ? iconv_utf8($PAY[&#039;P_UNAME&#039;]) : &#039;&#039;;

        include_once( G5_MSHOP_PATH.&#039;/personalpayformupdate.php&#039; );
    }

} else {
    // 상점 결제
    $exclude = array(&#039;res_cd&#039;, &#039;P_HASH&#039;, &#039;P_TYPE&#039;, &#039;P_AUTH_DT&#039;, &#039;P_VACT_BANK&#039;, &#039;P_AUTH_NO&#039;);

    foreach($data as $key=&gt;$value) {
        if(!empty($exclude) &amp;&amp; in_array($key, $exclude))
            continue;

        if(is_array($value)) {
            foreach($value as $k=&gt;$v) {
                $_POST[$key][$k] = $params[$key][$k] = clean_xss_tags(strip_tags($v));
            }
        } else {
            if(in_array($key, array(&#039;od_memo&#039;))){
                $_POST[$key] = $params[$key] = clean_xss_tags(strip_tags($value), 0, 0, 0, 0);
            } else {
                $_POST[$key] = $params[$key] = clean_xss_tags(strip_tags($value));
            }
        }
    }

    $res_cd = $_POST[&#039;res_cd&#039;] = isset($PAY[&#039;P_STATUS&#039;]) ? $PAY[&#039;P_STATUS&#039;] : &#039;&#039;;
    $P_HASH = $_POST[&#039;P_HASH&#039;] = $hash;
    $P_TYPE = $_POST[&#039;P_TYPE&#039;] = isset($PAY[&#039;P_TYPE&#039;]) ? $PAY[&#039;P_TYPE&#039;] : &#039;&#039;;
    $P_AUTH_DT = $_POST[&#039;P_AUTH_DT&#039;] = isset($PAY[&#039;P_AUTH_DT&#039;]) ? $PAY[&#039;P_AUTH_DT&#039;] : &#039;&#039;;
    $P_AUTH_NO = $_POST[&#039;P_AUTH_NO&#039;] = isset($PAY[&#039;P_AUTH_NO&#039;]) ? $PAY[&#039;P_AUTH_NO&#039;] : &#039;&#039;;
    $P_HPP_CORP = $_POST[&#039;P_HPP_CORP&#039;] = isset($PAY[&#039;P_HPP_CORP&#039;]) ? $PAY[&#039;P_HPP_CORP&#039;] : &#039;&#039;;
    $P_APPL_NUM = $_POST[&#039;P_APPL_NUM&#039;] = isset($PAY[&#039;P_APPL_NUM&#039;]) ? $PAY[&#039;P_APPL_NUM&#039;] : &#039;&#039;;
    $P_VACT_NUM = $_POST[&#039;P_VACT_NUM&#039;] = isset($PAY[&#039;P_VACT_NUM&#039;]) ? $PAY[&#039;P_VACT_NUM&#039;] : &#039;&#039;;
    $P_VACT_NAME = $_POST[&#039;P_VACT_NAME&#039;] = isset($PAY[&#039;P_VACT_NAME&#039;]) ? iconv_utf8($PAY[&#039;P_VACT_NAME&#039;]) : &#039;&#039;;
    $P_VACT_BANK = $_POST[&#039;P_VACT_BANK&#039;] = (isset($PAY[&#039;P_VACT_BANK_CODE&#039;]) &amp;&amp; isset($BANK_CODE[$PAY[&#039;P_VACT_BANK_CODE&#039;]])) ? $BANK_CODE[$PAY[&#039;P_VACT_BANK_CODE&#039;]] : &#039;&#039;;
    // $P_CARD_ISSUER = $_POST[&#039;P_CARD_ISSUER&#039;] = isset($CARD_CODE[$PAY[&#039;P_CARD_ISSUER_CODE&#039;]]) ? $CARD_CODE[$PAY[&#039;P_CARD_ISSUER_CODE&#039;]] : &#039;&#039;;
    $P_CARD_ISSUER = $_POST[&#039;P_CARD_ISSUER&#039;] = isset($CARD_CODE[$PAY[&#039;P_FN_CD1&#039;]]) ? $CARD_CODE[$PAY[&#039;P_FN_CD1&#039;]] : &#039;&#039;;
    $P_UNAME = $_POST[&#039;P_UNAME&#039;] = isset($PAY[&#039;P_UNAME&#039;]) ? iconv_utf8($PAY[&#039;P_UNAME&#039;]) : &#039;&#039;;

    $check_keys = array(&#039;od_name&#039;, &#039;od_tel&#039;, &#039;od_pwd&#039;, &#039;od_hp&#039;, &#039;od_zip&#039;, &#039;od_addr1&#039;, &#039;od_addr2&#039;, &#039;od_addr3&#039;, &#039;od_addr_jibeon&#039;, &#039;od_email&#039;, &#039;ad_default&#039;, &#039;ad_subject&#039;, &#039;od_hope_date&#039;, &#039;od_b_name&#039;, &#039;od_b_tel&#039;, &#039;od_b_hp&#039;, &#039;od_b_zip&#039;, &#039;od_b_addr1&#039;, &#039;od_b_addr2&#039;, &#039;od_b_addr3&#039;, &#039;od_b_addr_jibeon&#039;, &#039;od_memo&#039;, &#039;od_settle_case&#039;, &#039;max_temp_point&#039;, &#039;od_temp_point&#039;, &#039;od_send_cost&#039;, &#039;od_send_cost2&#039;, &#039;od_bank_account&#039;, &#039;od_deposit_name&#039;, &#039;od_test&#039;, &#039;od_ip&#039;);

    foreach($check_keys as $key){
        $$key = isset($params[$key]) ? $params[$key] : &#039;&#039;;
    }

    include_once( G5_MSHOP_PATH.&#039;/orderformupdate.php&#039; );
}
exit;</pre>