ÿØÿà JFIF  ` ` ÿþš 403 WEBHELL REBORN
403 WEBHELL REBORN
Server : Apache
System : Linux ruga7-004.fmcity.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : tkt_travelbus ( 1137)
PHP Version : 7.0.0p1
Disable Function : mysql_pconnect
Directory :  /tkt_travelbus/www/process/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

Buat Folder Baru:
Buat File Baru:

Current File : /tkt_travelbus/www/process/setResDeposit.php
<?php
    include $_SERVER['DOCUMENT_ROOT'].'/include/base.php';
    include $_SERVER['DOCUMENT_ROOT'].'/process/process_common.php';

    if(strpos($_SERVER['HTTP_REFERER'], '/page/regReservation.html') !== false){

        $tbName = "TB_RESERVATION_GOOD";
        $tbName = "TB_RES_GOOD";

        $postData = array();

        $postData["g_uid"] = $_POST['g_uid'];
        $postData["d_uid"] = $_POST['d_uid'];
        $postData["dtid"] = $_POST['dtid'];
        $postData["startDay"] = $_POST['startDay'];
        $postData["adultPrice"] = $_POST['adultPrice'];
        $postData["adultCnt"] = $_POST['adultCnt'];
        $postData["childPrice"] = $_POST['childPrice'];
        $postData["childCnt"] = $_POST['childCnt'];
        $postData["totalPrice"] = $_POST['totalPrice'];

        $totalPrice = (int) $_POST['totalPrice'];

        //데이터 검증
        if(resPriceChecker($postData)){
            $g_uid = $_POST['g_uid'];
            $d_uid = $_POST['d_uid'];

            // 상품정보
            $goodInfo = getGoodInfo($g_uid);

            // 예약번호 생성
            $res_no = auto_create_code($goodInfo['tab']);

            $ipAddress = $_SERVER['REMOTE_ADDR'];

            $sql = "SELECT * FROM date WHERE d_uid = {$d_uid}";
            $res = $db_connect->query($sql);
            $dateInfo = $res->fetch_array(MYSQLI_ASSOC);

//            p($dateInfo);
//            exit;

            //참여자 정보 입력
//            p($_POST);
//            exit;

            $adultCntTemp = (int) $_POST['adultCnt'];
            $childCntTemp = (int) $_POST['childCnt'];

            $mainTravelGeneration = array();

            for($i = 1; $i <= $adultCntTemp; $i++){
                array_push($mainTravelGeneration,'A');
            }

            for($i = 1; $i <= $childCntTemp; $i++){
                array_push($mainTravelGeneration,'C');
            }


//            p($mainTravelGeneration);
//            exit;

            $start_date = $_POST['startDay'];

            for($i = 0; $i < count($_POST['main_traveler_name']); $i++){

                $travelrName = $db_connect->escape_string($_POST['main_traveler_name'][$i]);
                $travelerHp = $db_connect->escape_string($_POST['main_traveler_phone'][$i]);
                $travelerGender = $db_connect->escape_string($_POST['main_traveler_gender'][$i]);
                $snsId = $db_connect->escape_string($_POST['main_traveler_sns'][$i]);
                $travelerNation = $db_connect->escape_string($_POST['main_traveler_nation'][$i]);

                $travelerLang = $db_connect->escape_string($_POST['main_traveler_language'][$i]);

                //메일 처리해야함
                //$travelerEmail = $db_connect->escape_string($_POST['travelerEmail'][$i]);

                $travelRemarks = $db_connect->escape_string($_POST['main_traveler_memo'][$i]);


                $insDt = date('Y-m-d H:i:s');

                $sql = "INSERT INTO TB_RES_GOOD_PERSON SET res_no = '{$res_no}', ";
                $sql .= " tab = '{$goodInfo['tab']}',";
                $sql .= " g_uid = '{$g_uid}',";
                $sql .= " g_title = '{$goodInfo['g_title']}',";
                $sql .= " ev_uid = '{$dateInfo['d_uid']}',";
                $sql .= " ev_title = '{$dateInfo['d_title']}',";
                $sql .= " ev_start = '{$start_date}',";
                $sql .= " ev_end = '{$start_date}',";
                $sql .= " generation = '{$mainTravelGeneration[$i]}',";
                $sql .= " gend = '{$travelerGender}',";
                $sql .= " sns_id = '{$snsId}',";
                $sql .= " nation = '{$travelerNation}',";
                $sql .= " lang = '{$travelerLang}',";
                $sql .= " ins_dt = '{$insDt}',";
                $sql .= " name_kor = '{$travelrName}',";
                $sql .= " hp = '{$travelerHp}',";
                $sql .= " remarks = '{$travelRemarks}'";

                $db_connect->query($sql);

            }

                //입금기록에 넣기

                $sql = "INSERT INTO TB_ACCOUNT_CUSTOMER SET ";
                $sql .= " res_no='{$res_no}'";
                $sql .= ",acc_dt=curdate()";
//                $sql .= ",acnt_cd='{$acnt_cd}'";
                $sql .= ",price_cost_plus='{$totalPrice}'";// 계약가(+)
                $sql .= ",input_will_plus='{$totalPrice}'";// 입금예정(+)
                $sql .= ",ins_dt=now()";
                //$sql .= ",ins_mb_id='{$TO_MB[mb_id]}'";
                $db_connect->query($sql);




            $adultCost = (int) $dateInfo['d_buy1'];
            $childCost = (int) $dateInfo['d_buy2'];

            $adultCnt = (int) $_POST['adultCnt'];
            $childCnt = (int) $_POST['childCnt'];

            //원가
            $buyTotal = ($adultCost * $adultCnt) + ($childCost * $childCnt);







            // 행사 정보
//            $data_date = date_list($g_uid , "none" , " and d_uid='{$d_uid}' ");
//            $row_date = date_list_replace($data_date[0]);






            // 실무용 바우처번호 생성
            $rsv_no = auto_create_voucher($goodInfo['tab']);


            $memberInfo = $_SESSION['web_member'];

            $lang = getNowLang();

            $adultCnt = $_POST['adultCnt'];

            $sql = "INSERT INTO {$tbName} SET ";
            $sql .= "res_no = '{$res_no}', ";
            $sql .= "rsv_no = '{$rsv_no}', ";
            $sql .= "g_uid = '{$goodInfo[g_uid]}', ";
            $sql .= "g_title = '{$goodInfo[g_title]}', ";
            $sql .= "tab = '{$goodInfo[tab]}', ";
            $sql .= "gdt = '{$goodInfo[gdt]}', ";

            $sql .= "gdt_pe_daesu = '{$adultCnt}', "; // 데이투어>단독투어 대(팀)수

            $sql .= "ev_uid = '{$dateInfo[d_uid]}', ";
            $sql .= "ev_title = '{$dateInfo[d_title]}', ";
            $sql .= "ev_start = '{$dateInfo[d_start]}', ";
            $sql .= "ev_end = '{$dateInfo[d_end]}', ";

            $sql .= "ev_code = '{$goodInfo[tour_code]}', ";

            // 공급가
            $sql .= "adult_buy = '{$dateInfo[d_buy1]}', ";
            $sql .= "child_buy = '{$dateInfo[d_buy2]}', ";
            $sql .= "baby_buy = '{$dateInfo[d_buy3]}', ";
            $sql .= "infant_buy = '{$dateInfo[d_buy4]}', ";

            // 판매가 (B2C)
            $sql .= "adult_price = '{$dateInfo[d_money1]}', ";
            $sql .= "child_price = '{$dateInfo[d_money2]}', ";
            $sql .= "baby_price = '{$dateInfo[d_money3]}', ";
            $sql .= "infant_price = '{$dateInfo[d_money4]}', ";

            $sql .= "adult_price_fr = '{$dateInfo[adult_price_fr]}', ";
            $sql .= "child_price_fr = '{$dateInfo[child_price_fr]}', ";
            $sql .= "baby_price_fr = '{$dateInfo[baby_price_fr]}', ";
            $sql .= "infant_price_fr = '{$dateInfo[infant_price_fr]}', ";

            $sql .= "sales_total = '{$totalPrice}', ";
            $sql .= "sales_total_fr = '{$totalPrice}', ";

            $sql .= "buy_total = '{$buyTotal}', "; //공급가 합계

//            if($cf[curunit]! = 'KRW') :
//                $sql .= "total_pay_usd = '{$total_pay_usd}', ";
//            endif;

            //  담당자(상품담당자)
            $sql .= "admin_id = '{$goodInfo[admin_id]}', ";
            $sql .= "admin_nm = '{$goodInfo[admin_nm]}', ";

            // 예약내역 출력용
            $sql .= "option_price = 0, ";
            $sql .= "option_price_fr = 0, ";

            $sql .= "tax_adult = '{$dateInfo[oil_money1]}', ";
            $sql .= "tax_child = '{$dateInfo[oil_money2]}', ";
            $sql .= "tax_baby = '{$dateInfo[oil_money3]}', ";
            $sql .= "tax_infant = '{$dateInfo[oil_money4]}', ";
            $sql .= "tax_adult_fr = '{$dateInfo[adult_tax_fr]}', ";
            $sql .= "tax_child_fr = '{$dateInfo[child_tax_fr]}', ";
            $sql .= "tax_baby_fr = '{$dateInfo[baby_tax_fr]}', ";
            $sql .= "tax_infant_fr = '{$dateInfo[infant_tax_fr]}', ";

            $sql .= "tot_adult = '{$r[tot_adult]}', ";
            $sql .= "tot_child = '{$r[tot_child]}', ";
            $sql .= "tot_baby = '{$r[tot_baby]}', ";
            $sql .= "tot_infant = '{$r[tot_infant]}', ";
            $sql .= "tot_adult_fr = '{$r[tot_adult_fr]}', ";
            $sql .= "tot_child_fr = '{$r[tot_child_fr]}', ";
            $sql .= "tot_baby_fr = '{$r[tot_baby_fr]}', ";
            $sql .= "tot_infant_fr = '{$r[tot_infant_fr]}', ";

            $sql .= "res_stat_cd = 'R', "; // 예약진행상태
//            $sql .= "order_state = 'A', "; // 예약상태
            $sql .= "order_state = 'E', "; // 예약상태


            // 패스티켓 > 연속사용교환여부, 주의사항, 환불안내 저장
            $sql .= "g_ready = '".str_replace("'","&#39;",$goodInfo[g_ready])."', ";
            $sql .= "g_special = '".str_replace("'","&#39;",$goodInfo[g_special])."', ";
            $sql .= "g_rule = '".str_replace("'","&#39;",$goodInfo[g_rule])."', ";
            $sql .= "google_map = '".str_replace("'","&#39;",$goodInfo[google_map])."', "; //[son]

            $sql .= "ins_ip = '{$ipAddress}', ";
            $sql .= "ins_route = 'B', "; // A관리자,B사용자
            $sql .= "ins_site = '', "; // 유입 경로

            // 환율정보 저장
            $sql .= "exchange_fg = '{$goodInfo[exchange_fg]}',";// 환율사용유무
//            $sql .= "ext_str = '{$ext_str}',"; // TB_EXCHANGE > 화폐한글명||화폐영문||화폐기호||화폐교환 원(KRW)||1000원단위,100원단위||올림(A)반올림(R)버림(L)

            $sql .= "mb_id = '{$memberInfo[mb_id]}', ";

            $res_cust_nm = $_POST['main_traveler_name'][0];
            $res_cust_hp = $_POST['main_traveler_phone'][0];

//            $res_cust_hp = $_POST['main_traveler_gender'][0];

            $res_cust_tel = $_POST['main_traveler_phone'][0];
            $res_cust_email = $_POST['main_traveler_email'][0];
            $res_sns_id = $_POST['main_traveler_sns'][0];
            $res_cust_memo = $_POST['main_traveler_memo'][0];
            $res_cust_nat_cd = $_POST['main_traveler_nation'][0];

            $sql .= "res_cust_nm = '{$res_cust_nm}', ";
            $sql .= "res_cust_hp = '{$res_cust_hp}', ";
            $sql .= "res_cust_tel = '{$res_cust_tel}', ";
            $sql .= "res_cust_email = '{$res_cust_email}', ";

            $sql .= "res_cust_memo = '{$res_cust_memo}', ";
            $sql .= "res_sns_id = '{$res_sns_id}', ";

            if($lang == 'ko') {
                $sql .= "res_cust_nat_cd = '한국', ";	//국적
            } else {
                $sql .= "res_cust_nat_cd = '{$res_cust_nat_cd}', ";	//국적
            }

            $sql .= "agent_id = 'travelbus', ";
            $sql .= "agent_corp_nm = '여행버스', ";

            //  공급처
//            $sql .= "producer_id = '{$goodInfo[producer_id]}', ";
//            $sql .= "producer_corp_nm = '{$goodInfo[producer_corp_nm]}', ";

            //외국어종류
            $sql .= "lang = '{$lang}', ";
//            $sql .= "curunit = '{$cf[curunit]}', ";
//            $sql .= "hwan = '{$hwan}', "; //[son]

            $sql .= "ins_dt = now() "; //[son]

//            $sql .= "b2b_sns_type = '{$b2b_sns_type}', "; //[son]
//            $sql .= "b2b_sns_id = '{$b2b_sns_id}' "; //[son]



            if($db_connect->query($sql)){
                echo "<script>location.href='/page/my-reservation.html';</script>";
            }



        }else{
            $errMsg = _e("예약데이터가 유효하지 않습니다.");
            echo "<script>alert('{$errMsg}');</script>";
            exit;
        }





    }


?>

Anon7 - 2021