M72X2/X2/adm/point_update.php



<title>M72X2/X2/adm/point_update.php</title>


<div class="header">M72X2/X2/adm/point_update.php</div>
<pre>&lt;?php
$sub_menu = &quot;200200&quot;;
require_once &#039;./_common.php&#039;;

auth_check_menu($auth, $sub_menu, &#039;w&#039;);

check_admin_token();

$mb_id = isset($_POST[&#039;mb_id&#039;]) ? strip_tags(clean_xss_attributes($_POST[&#039;mb_id&#039;])) : &#039;&#039;;
$po_point = isset($_POST[&#039;po_point&#039;]) ? (int)strip_tags(clean_xss_attributes($_POST[&#039;po_point&#039;])) : 0;
$po_content = isset($_POST[&#039;po_content&#039;]) ? strip_tags(clean_xss_attributes($_POST[&#039;po_content&#039;])) : &#039;&#039;;
$expire = isset($_POST[&#039;po_expire_term&#039;]) ? preg_replace(&#039;/[^0-9]/&#039;, &#039;&#039;, $_POST[&#039;po_expire_term&#039;]) : &#039;&#039;;

$mb = get_member($mb_id);

if (!$mb[&#039;mb_id&#039;]) {
    alert(&#039;존재하는 회원아이디가 아닙니다.&#039;, &#039;./point_list.php?&#039; . $qstr);
}

if (($po_point &lt; 0) &amp;&amp; ($po_point * (-1) &gt; $mb[&#039;mb_point&#039;])) {
    alert(&#039;포인트를 깎는 경우 현재 포인트보다 작으면 안됩니다.&#039;, &#039;./point_list.php?&#039; . $qstr);
}

insert_point($mb_id, $po_point, $po_content, &#039;@passive&#039;, $mb_id, $member[&#039;mb_id&#039;] . &#039;-&#039; . uniqid(&#039;&#039;), $expire);

goto_url(&#039;./point_list.php?&#039; . $qstr);
</pre>