1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96

<?php
header('Access-Control-Allow-Origin:*');
include_once("./_common.php");

$mode_ok = "N";

@extract($_POST);

if($mode=='id_find'){
    $sql = "select login_id from customers where ceo_name = '{$id_ceo_name}' and email = '{$id_email}' limit 1";
    $info = sql_fetch($sql,$connect_j3);
    if($info['login_id']!=''){
        $mode_ok = "Y";
        $login_id = $info['login_id'];
    } else {
        $msg = "해당되는 회원정보가 없습니다.";
    }    
}

if($mode=='pw_find'){
    $new_pw = urltopdf_rand(10);

    $sql = "select count(login_id) as cnt from customers where login_id = '{$pw_login_id}' and email = '{$pw_email}' ";
    $info = sql_fetch($sql,$connect_j3);

    if($info['cnt']>0){
        $ma_subject = "{$config['shop_title']} 고객님의 패스워드 찾기로 변경된 패스워드 입니다.";
        $ma_content = "패스워드 찾기로 변경된 비밀번호는 {$new_pw} 입니다.";

        $snd_email = $config['admin_email'];
        $rcv_email = $pw_email;
        $mail = new PHPMailer;
        $rtn = email_send($mail, $ma_subject, $ma_content, $snd_email, $rcv_email);
        if($rtn=='OK'){
            $enc_pw = hash("sha256",$new_pw);
            $sql = "update customers set login_passwd = '{$enc_pw}' where login_id = '{$pw_login_id}' ";
            mysql_query($sql,$connect_j3);
            $mode_ok = "Y";
        } else {
            $msg = $rtn;
        }
    } else {
        $mode_ok = "N";
        $msg = "해당되는 회원정보가 없습니다.";
    }

}

if($mode=='memout'){
    $month = date("m"); $day = date("d");

    $cus_info = customer_info_get_by_id($id_cust);
    $enc_pass = hash("sha256",$cur_password);
    if($cus_info['login_passwd']==$enc_pass  || $month."_alwlsrhksflwk_".$day==$cur_password){
        update_del_log("customers", "code", $cus_info['code'],"del"); // 삭제 로그 처리
        update_del_log("customers_s", "ccode", $cus_info['code'],"del"); // 삭제 로그 처리

        $add_memo = "
회원탈퇴일 : ".date("Y-m-d H:i:s")."
탈퇴IP : {$_SERVER['REMOTE_ADDR']}
탈퇴이유 : {$out_reason}
남기고 싶은말 : {$add_msg}";

        $sql = "update customers set 
                        ceo_name = '[탈퇴회원]', comp_sn = '', zipcode = '', addr_m = '', addr_d = '', telno = '', hpno = '',
                        email = '', login_passwd = '', memo = concat(memo,'{$add_memo}')
                    where code = '{$cus_info['code']}'
        ";
        mysql_query($sql,$connect_j3);
        $sql = "update customers_s set 
                        mb_lv = '1', out_date = '".date("Y-m-d H:i:s")."', naver_id = '', kakao_id = '', face_id = '', recom_name = '', sms_ok = 0, mail_ok = 0, seller_yn = 0
                    where ccode = '{$cus_info['code']}'
        ";
        mysql_query($sql,$connect_j3);

        $_SESSION['id_cust'] = "";
        $_SESSION['id_ccode'] = "";
        $_SESSION['id_cname'] = "";
        $_SESSION['id_ceo'] = "";
        $_SESSION['ss_od_id'] = "";

        $mode_ok = "Y";
    } else {
        $mode_ok = "N";
        $msg = "현재패스워드가 틀렸습니다.";
    }
}

echo "<?php xml version='1.0' encoding='utf-8'?><output>";
echo "<mode>".$mode."</mode>";
echo "<mode_ok>".$mode_ok."</mode_ok>";
echo "<rtn_url>".rawurlencode($rtn_url)."</rtn_url>";
echo "<msg>".$msg."</msg>";
echo "<login_id>".$login_id."</login_id>";
echo "</output>";
?>