ZIP/X2/adm.back/shop_admin/orderformupdate.php



<title>ZIP/X2/adm.back/shop_admin/orderformupdate.php</title>


<div class="header">ZIP/X2/adm.back/shop_admin/orderformupdate.php</div>
<pre>&lt;?php
$sub_menu = &#039;400400&#039;;
include_once(&#039;./_common.php&#039;);

check_admin_token();

$od_shop_memo = isset($_POST[&#039;od_shop_memo&#039;]) ? strip_tags($_POST[&#039;od_shop_memo&#039;]) : &#039;&#039;;
$od_id = isset($_POST[&#039;od_id&#039;]) ? safe_replace_regex($_POST[&#039;od_id&#039;], &#039;od_id&#039;) : &#039;&#039;;

$search = isset($_REQUEST[&#039;search&#039;]) ? get_search_string($_REQUEST[&#039;search&#039;]) : &#039;&#039;;
$sort1 = isset($_REQUEST[&#039;sort1&#039;]) ? clean_xss_tags($_REQUEST[&#039;sort1&#039;], 1, 1) : &#039;&#039;;
$sort2 = isset($_REQUEST[&#039;sort2&#039;]) ? clean_xss_tags($_REQUEST[&#039;sort2&#039;], 1, 1) : &#039;&#039;;
$sel_field = isset($_REQUEST[&#039;sel_field&#039;]) ? clean_xss_tags($_REQUEST[&#039;sel_field&#039;], 1, 1) : &#039;&#039;;

if(isset($_POST[&#039;mod_type&#039;]) &amp;&amp; $_POST[&#039;mod_type&#039;] === &#039;info&#039;) {
    $od_zip1   = isset($_POST[&#039;od_zip&#039;]) ? preg_replace(&#039;/[^0-9]/&#039;, &#039;&#039;, substr($_POST[&#039;od_zip&#039;], 0, 3)) : &#039;&#039;;
    $od_zip2   = isset($_POST[&#039;od_zip&#039;]) ? preg_replace(&#039;/[^0-9]/&#039;, &#039;&#039;, substr($_POST[&#039;od_zip&#039;], 3)) : &#039;&#039;;
    $od_b_zip1 = isset($_POST[&#039;od_b_zip&#039;]) ? preg_replace(&#039;/[^0-9]/&#039;, &#039;&#039;, substr($_POST[&#039;od_b_zip&#039;], 0, 3)) : &#039;&#039;;
    $od_b_zip2 = isset($_POST[&#039;od_b_zip&#039;]) ? preg_replace(&#039;/[^0-9]/&#039;, &#039;&#039;, substr($_POST[&#039;od_b_zip&#039;], 3)) : &#039;&#039;;
    $od_email = isset($_POST[&#039;od_email&#039;]) ? strip_tags(clean_xss_attributes($_POST[&#039;od_email&#039;])) : &#039;&#039;;
    $od_name = isset($_POST[&#039;od_name&#039;]) ? clean_xss_tags($_POST[&#039;od_name&#039;], 1, 1) : &#039;&#039;;
    $od_tel = isset($_POST[&#039;od_tel&#039;]) ? clean_xss_tags($_POST[&#039;od_tel&#039;], 1, 1) : &#039;&#039;;
    $od_hp = isset($_POST[&#039;od_hp&#039;]) ? clean_xss_tags($_POST[&#039;od_hp&#039;], 1, 1) : &#039;&#039;;
    $od_addr1 = isset($_POST[&#039;od_addr1&#039;]) ? clean_xss_tags($_POST[&#039;od_addr1&#039;], 1, 1) : &#039;&#039;;
    $od_addr2 = isset($_POST[&#039;od_addr2&#039;]) ? clean_xss_tags($_POST[&#039;od_addr2&#039;], 1, 1) : &#039;&#039;;
    $od_addr3 = isset($_POST[&#039;od_addr3&#039;]) ? clean_xss_tags($_POST[&#039;od_addr3&#039;], 1, 1) : &#039;&#039;;
    $od_addr_jibeon = isset($_POST[&#039;od_addr_jibeon&#039;]) ? clean_xss_tags($_POST[&#039;od_addr_jibeon&#039;], 1, 1) : &#039;&#039;;
    $od_b_name = isset($_POST[&#039;od_b_name&#039;]) ? clean_xss_tags($_POST[&#039;od_b_name&#039;], 1, 1) : &#039;&#039;;
    $od_b_tel = isset($_POST[&#039;od_b_tel&#039;]) ? clean_xss_tags($_POST[&#039;od_b_tel&#039;], 1, 1) : &#039;&#039;;
    $od_b_hp = isset($_POST[&#039;od_b_hp&#039;]) ? clean_xss_tags($_POST[&#039;od_b_hp&#039;], 1, 1) : &#039;&#039;;
    $od_b_addr1 = isset($_POST[&#039;od_b_addr1&#039;]) ? clean_xss_tags($_POST[&#039;od_b_addr1&#039;], 1, 1) : &#039;&#039;;
    $od_b_addr2 = isset($_POST[&#039;od_b_addr2&#039;]) ? clean_xss_tags($_POST[&#039;od_b_addr2&#039;], 1, 1) : &#039;&#039;;
    $od_b_addr3 = isset($_POST[&#039;od_b_addr3&#039;]) ? clean_xss_tags($_POST[&#039;od_b_addr3&#039;], 1, 1) : &#039;&#039;;
    $od_b_addr_jibeon = isset($_POST[&#039;od_b_addr_jibeon&#039;]) ? clean_xss_tags($_POST[&#039;od_b_addr_jibeon&#039;], 1, 1) : &#039;&#039;;
    $od_hope_date = isset($_POST[&#039;od_hope_date&#039;]) ? clean_xss_tags($_POST[&#039;od_hope_date&#039;], 1, 1) : &#039;&#039;;

    $sql = &quot; update {$g5[&#039;g5_shop_order_table&#039;]}
                set od_name = &#039;$od_name&#039;,
                    od_tel = &#039;$od_tel&#039;,
                    od_hp = &#039;$od_hp&#039;,
                    od_zip1 = &#039;$od_zip1&#039;,
                    od_zip2 = &#039;$od_zip2&#039;,
                    od_addr1 = &#039;$od_addr1&#039;,
                    od_addr2 = &#039;$od_addr2&#039;,
                    od_addr3 = &#039;$od_addr3&#039;,
                    od_addr_jibeon = &#039;$od_addr_jibeon&#039;,
                    od_email = &#039;$od_email&#039;,
                    od_b_name = &#039;$od_b_name&#039;,
                    od_b_tel = &#039;$od_b_tel&#039;,
                    od_b_hp = &#039;$od_b_hp&#039;,
                    od_b_zip1 = &#039;$od_b_zip1&#039;,
                    od_b_zip2 = &#039;$od_b_zip2&#039;,
                    od_b_addr1 = &#039;$od_b_addr1&#039;,
                    od_b_addr2 = &#039;$od_b_addr2&#039;,
                    od_b_addr3 = &#039;$od_b_addr3&#039;,
                    od_b_addr_jibeon = &#039;$od_b_addr_jibeon&#039; &quot;;

    if ($default[&#039;de_hope_date_use&#039;])
        $sql .= &quot; , od_hope_date = &#039;$od_hope_date&#039; &quot;;
} else {
    $sql = &quot;update {$g5[&#039;g5_shop_order_table&#039;]}
                set od_shop_memo = &#039;$od_shop_memo&#039; &quot;;
}
$sql .= &quot; where od_id = &#039;$od_id&#039; &quot;;
sql_query($sql);

$qstr = &quot;sort1=$sort1&amp;amp;sort2=$sort2&amp;amp;sel_field=$sel_field&amp;amp;search=$search&amp;amp;page=$page&quot;;

goto_url(&quot;./orderform.php?od_id=$od_id&amp;amp;$qstr&quot;);</pre>