GNU/shop/itemoption.php



<title>GNU/shop/itemoption.php</title>


<div class="header">GNU/shop/itemoption.php</div>
<pre>&lt;?php
include_once(&#039;./_common.php&#039;);

$pattern = &#039;#[/\&#039;\&quot;%=*\#\(\)\|\+\&amp;\!\$~\{\}\[\]`;:\?\^\,]#&#039;;

$it_id  = isset($_POST[&#039;it_id&#039;]) ? preg_replace($pattern, &#039;&#039;, $_POST[&#039;it_id&#039;]) : &#039;&#039;;
//$opt_id = isset($_POST[&#039;opt_id&#039;]) ? preg_replace($pattern, &#039;&#039;, $_POST[&#039;opt_id&#039;]) : &#039;&#039;;
$opt_id = isset($_POST[&#039;opt_id&#039;]) ? addslashes(sql_real_escape_string(preg_replace(G5_OPTION_ID_FILTER, &#039;&#039;, $_POST[&#039;opt_id&#039;]))) : &#039;&#039;;
$idx    = isset($_POST[&#039;idx&#039;]) ? preg_replace(&#039;#[^0-9]#&#039;, &#039;&#039;, $_POST[&#039;idx&#039;]) : 0;
$sel_count = isset($_POST[&#039;sel_count&#039;]) ? preg_replace(&#039;#[^0-9]#&#039;, &#039;&#039;, $_POST[&#039;sel_count&#039;]) : 0;
$op_title = isset($_POST[&#039;op_title&#039;]) ? strip_tags($_POST[&#039;op_title&#039;]) : &#039;&#039;;

$it = get_shop_item($it_id, true);

if( !$it ){
    die(&#039;&#039;);
}

/*
옵션명 비슷한 부분 오류 수정
수정자 : IT FOR ONE
수정 내용 : and io_id like &#039;$opt_id%&#039; =&gt; and io_id like &#039;$opt_id&quot;.chr(30).&quot;&#039;
*/
$sql = &quot; select * from {$g5[&#039;g5_shop_item_option_table&#039;]}
                where io_type = &#039;0&#039;
                  and it_id = &#039;$it_id&#039;
                  and io_use = &#039;1&#039;
                  and io_id like &#039;$opt_id&quot;.chr(30).&quot;%&#039;
                order by io_no asc &quot;;
$result = sql_query($sql);

$option_title = &#039;선택&#039;;

if( $op_title &amp;&amp; ($op_title !== $option_title) &amp;&amp; $it[&#039;it_option_subject&#039;] ){
    $array_tmps = explode(&#039;,&#039;, $it[&#039;it_option_subject&#039;]);
    if( isset($array_tmps[$idx+1]) &amp;&amp; $array_tmps[$idx+1] ){
        $option_title = $array_tmps[$idx+1];
    }
}

$str = &#039;&lt;option value=&quot;&quot;&gt;&#039;.$option_title.&#039;&lt;/option&gt;&#039;;
$opt = array();

for($i=0; $row=sql_fetch_array($result); $i++) {
    $val = explode(chr(30), $row[&#039;io_id&#039;]);
    $key = $idx + 1;

    if(!strlen($val[$key]))
        continue;

    $continue = false;
    foreach($opt as $v) {
        if(strval($v) === strval($val[$key])) {
            $continue = true;
            break;
        }
    }
    if($continue)
        continue;

    $opt[] = strval($val[$key]);

    if($key + 1 &lt; $sel_count) {
        $str .= PHP_EOL.&#039;&lt;option value=&quot;&#039;.$val[$key].&#039;&quot;&gt;&#039;.$val[$key].&#039;&lt;/option&gt;&#039;;
    } else {
        if($row[&#039;io_price&#039;] &gt;= 0)
            $price = &#039;&amp;nbsp;&amp;nbsp;+ &#039;.number_format($row[&#039;io_price&#039;]).&#039;원&#039;;
        else
            $price = &#039;&amp;nbsp;&amp;nbsp; &#039;.number_format($row[&#039;io_price&#039;]).&#039;원&#039;;

        $io_stock_qty = get_option_stock_qty($it_id, $row[&#039;io_id&#039;], $row[&#039;io_type&#039;]);

        if($io_stock_qty &lt; 1)
            $soldout = &#039;&amp;nbsp;&amp;nbsp;[품절]&#039;;
        else
            $soldout = &#039;&#039;;

        $str .= PHP_EOL.&#039;&lt;option value=&quot;&#039;.$val[$key].&#039;,&#039;.$row[&#039;io_price&#039;].&#039;,&#039;.$io_stock_qty.&#039;&quot;&gt;&#039;.$val[$key].$price.$soldout.&#039;&lt;/option&gt;&#039;;
    }
}

echo $str;</pre>