상품 검색 후 리스트 정렬 시 q=값이 풀려버립니다. 채택완료

<?php

include_once('./_common.php');

 

define('IS_SHOP_SEARCH', true);

 

if (G5_IS_MOBILE) {

    include_once(G5_MSHOP_PATH.'/search.php');

    return;

}

 

$g5['title'] = "상품 검색 결과";

include_once('./_head.php');

 

// QUERY 문에 공통적으로 들어가는 내용

// 상품명에 검색어가 포한된것과 상품판매가능인것만

$sql_common = " from {$g5['g5_shop_item_table']} a, {$g5['g5_shop_category_table']} b ";

 

$where = array();

$where[] = " (a.ca_id = b.ca_id and a.it_use = 1 and b.ca_use = 1) ";

 

$search_all = true;

// 상세검색 이라면

if (isset($_GET['qname']) || isset($_GET['qexplan']) || isset($_GET['qid']) || isset($_GET['qbasic']))

    $search_all = false;

 

    $q = ($stx) ? $stx : $_GET['q'];

$qname   = isset($_GET['qname']) ? trim(clean_xss_tags($_GET['qname'])) : '';

$qexplan = isset($_GET['qexplan']) ? trim(clean_xss_tags($_GET['qexplan'])) : '';

$qid     = isset($_GET['qid']) ? trim(clean_xss_tags($_GET['qid'])) : '';

$qbasic  = isset($_GET['qbasic']) ? trim(clean_xss_tags($_GET['qbasic'])) : '';

$qcaid   = isset($_GET['qcaid']) ? preg_replace('#[^a-z0-9]#i', '', trim($_GET['qcaid'])) : '';

$qfrom   = isset($_GET['qfrom']) ? preg_replace('/[^0-9]/', '', trim($_GET['qfrom'])) : '';

$qto     = isset($_GET['qto']) ? preg_replace('/[^0-9]/', '', trim($_GET['qto'])) : '';

 

if (isset($_GET['qsort']))  {

    $qsort = trim($_GET['qsort']);

    $qsort = preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\s]/", "", $qsort);

} else {

    $qsort = '';

}

if (isset($_GET['qorder']))  {

    $qorder = preg_match("/^(asc|desc)$/i", $qorder) ? $qorder : '';

} else {

    $qorder = '';

}

 

if(!($qname || $qexplan || $qid || $qbasic))

    $search_all = true;

 

// 검색범위 checkbox 처리

$qname_check = false;

$qexplan_check = false;

$qid_check = false;

$qbasic_check = false;

 

if($search_all) {

    $qname_check = true;

    $qexplan_check = true;

    $qid_check = true;

    $qbasic_check = true;

} else {

    if($qname)

        $qname_check = true;

    if($qexplan)

        $qexplan_check = true;

    if($qid)

        $qid_check = true;

    if($qbasic)

        $qbasic_check = true;

}

 

if ($q) {

    $arr = explode(" ", $q);

    $detail_where = array();

    for ($i=0; $i<count($arr); $i++) {

        $word = trim($arr[$i]);

        if (!$word) continue;

 

        $concat = array();

        if ($search_all || $qname)

            $concat[] = "a.it_name";

        if ($search_all || $qexplan)

            $concat[] = "a.it_explan2";

        if ($search_all || $qid)

            $concat[] = "a.it_id";

        if ($search_all || $qbasic)

            $concat[] = "a.it_basic";

        $concat_fields = "concat(".implode(",' ',",$concat).")";

 

        $detail_where[] = $concat_fields." like '%$word%' ";

 

        // 인기검색어

        insert_popular($concat, $word);

    }

 

    $where[] = "(".implode(" and ", $detail_where).")";

}

 

if ($qcaid)

    $where[] = " a.ca_id like '$qcaid%' ";

 

if ($qfrom && $qto)

    $where[] = " a.it_price between '$qfrom' and '$qto' ";

 

$sql_where = " where " . implode(" and ", $where);

 

// 상품 출력순서가 있다면

$qsort  = strtolower($qsort);

$qorder = strtolower($qorder);

$order_by = "";

// 아래의 $qsort 필드만 정렬이 가능하게 하여 다른 필드로 하여금 유추해 볼수 없게함

if (($qsort == "it_sum_qty" || $qsort == "it_price" || $qsort == "it_use_avg" || $qsort == "it_use_cnt" || $qsort == "it_update_time") &&

    ($qorder == "asc" || $qorder == "desc")) {

    $order_by = ' order by ' . $qsort . ' ' . $qorder . ' , it_order, it_id desc';

}

 

// 총몇개 = 한줄에 몇개 * 몇줄

$items = $default['de_search_list_mod'] * $default['de_search_list_row'];

// 페이지가 없으면 첫 페이지 (1 페이지)

if ($page < 1) $page = 1;

// 시작 레코드 구함

$from_record = ($page - 1) * $items;

 

// 검색된 내용이 몇행인지를 얻는다

$sql = " select COUNT(*) as cnt $sql_common $sql_where ";

$row = sql_fetch($sql);

$total_count = $row['cnt'];

$total_page  = ceil($total_count / $items); // 전체 페이지 계산

 

$sql = " select b.ca_id, b.ca_name, count(*) as cnt $sql_common $sql_where group by b.ca_id order by b.ca_id ";

$result = sql_query($sql);

 

$categorys = array();

// 검색된 분류를 배열에 저장

while($row = sql_fetch_array($result)){

    $categorys[] = $row;

}

 

$q = get_text($q);

$search_skin = G5_SHOP_SKIN_PATH.'/search.skin.php';

 

$list_file = G5_SHOP_SKIN_PATH.'/'.$default['de_search_list_skin'];

if (file_exists($list_file) && is_include_path_check($list_file)) {

    define('G5_SHOP_CSS_URL', G5_SHOP_SKIN_URL);

    $list = new item_list($list_file, $default['de_search_list_mod'], $default['de_search_list_row'], $default['de_search_img_width'], $default['de_search_img_height']);

    $list->set_query(" select * $sql_common $sql_where {$order_by} limit $from_record, $items ");

}

 

if(!file_exists($search_skin)) {

    echo str_replace(G5_PATH.'/', '', $search_skin).' 스킨 파일이 존재하지 않습니다.';

} else {

    include_once($search_skin);

}

$stx=$q;

$tmp_gr_id = $gr_id;

 

if(!$sfl) $sfl = 'wr_subject||wr_content';

 

$search_table = Array();

$table_index = 0;

$write_pages = "";

$text_stx = "";

$srows = 0;

 

$stx = strip_tags($stx);

//$stx = preg_replace('/[[:punct:]]/u', '', $stx); // 특수문자 제거

$stx = get_search_string($stx); // 특수문자 제거

if ($stx) {

    $stx = preg_replace('/\//', '\/', trim($stx));

    $sop = strtolower($sop);

    if (!$sop || !($sop == 'and' || $sop == 'or')) $sop = 'and'; // 연산자 and , or

    $srows = isset($_GET['srows']) ? (int)preg_replace('#[^0-9]#', '', $_GET['srows']) : 10;

    if (!$srows) $srows = 10; // 한페이지에 출력하는 검색 행수

 

    $g5_search['tables'] = Array();

    $g5_search['read_level'] = Array();

    $sql = " select gr_id, bo_table, bo_read_level from {$g5['board_table']} where bo_use_search = 1 and bo_list_level <= '{$member['mb_level']}' ";

    if ($gr_id)

        $sql .= " and gr_id = '{$gr_id}' ";

    $onetable = isset($onetable) ? preg_replace('/[^a-z0-9_]/i', '', $onetable) : '';

    if ($onetable) // 하나의 게시판만 검색한다면

        $sql .= " and bo_table = '{$onetable}' ";

    $sql .= " order by bo_order, gr_id, bo_table ";

    $result = sql_query($sql);

    for ($i=0; $row=sql_fetch_array($result); $i++)

    {

        if ($is_admin != 'super')

        {

            // 그룹접근 사용에 대한 검색 차단

            $sql2 = " select gr_use_access, gr_admin from {$g5['group_table']} where gr_id = '{$row['gr_id']}' ";

            $row2 = sql_fetch($sql2);

            // 그룹접근을 사용한다면

            if ($row2['gr_use_access']) {

                // 그룹관리자가 있으며 현재 회원이 그룹관리자라면 통과

                if ($row2['gr_admin'] && $row2['gr_admin'] == $member['mb_id']) {

                    ;

                } else {

                    $sql3 = " select count(*) as cnt from {$g5['group_member_table']} where gr_id = '{$row['gr_id']}' and mb_id = '{$member['mb_id']}' and mb_id <> '' ";

                    $row3 = sql_fetch($sql3);

                    if (!$row3['cnt'])

                        continue;

                }

            }

        }

        $g5_search['tables'][] = $row['bo_table'];

        $g5_search['read_level'][] = $row['bo_read_level'];

    }

 

    $op1 = '';

 

    // 검색어를 구분자로 나눈다. 여기서는 공백

    $s = explode(' ', strip_tags($stx));

   

    if( count($s) > 1 ){

        $s = array_slice($s, 0, 2);

        $stx = implode(' ', $s);

    }

 

    $text_stx = get_text(stripslashes($stx));

   

    $search_query = 'sfl='.urlencode($sfl).'&amp;stx='.urlencode($stx).'&amp;sop='.$sop;

 

    // 검색필드를 구분자로 나눈다. 여기서는 +

    $field = explode('||', trim($sfl));

 

    $str = '(';

    for ($i=0; $i<count($s); $i++) {

        if (trim($s[$i]) == '') continue;

 

        $search_str = $s[$i];

 

        // 인기검색어

        insert_popular($field, $search_str);

 

        $str .= $op1;

        $str .= "(";

 

        $op2 = '';

        // 필드의 수만큼 다중 필드 검색 가능 (필드1+필드2...)

        for ($k=0; $k<count($field); $k++) {

            $str .= $op2;

            switch ($field[$k]) {

                case 'mb_id' :

                case 'wr_name' :

                    $str .= "$field[$k] = '$s[$i]'";

                    break;

                case 'wr_subject' :

                case 'wr_content' :

                    if (preg_match("/[a-zA-Z]/", $search_str))

                        $str .= "INSTR(LOWER({$field[$k]}), LOWER('{$search_str}'))";

                    else

                        $str .= "INSTR({$field[$k]}, '{$search_str}')";

                    break;

                default :

                    $str .= "1=0"; // 항상 거짓

                    break;

            }

            $op2 = " or ";

        }

        $str .= ")";

 

        $op1 = " {$sop} ";

    }

    $str .= ")";

 

    $sql_search = $str;

 

    $str_board_list = "";

    $board_count = 0;

 

    $time1 = get_microtime();

 

    $total_count = 0;

    for ($i=0; $i<count($g5_search['tables']); $i++) {

        $tmp_write_table   = $g5['write_prefix'] . $g5_search['tables'][$i];

 

        $sql = " select wr_id from {$tmp_write_table} where {$sql_search} ";

        $result = sql_query($sql, false);

        $row['cnt'] = @sql_num_rows($result);

 

        $total_count += $row['cnt'];

        if ($row['cnt']) {

            $board_count++;

            $search_table[] = $g5_search['tables'][$i];

            $read_level[]   = $g5_search['read_level'][$i];

            $search_table_count[] = $total_count;

 

            $sql2 = " select bo_subject, bo_mobile_subject from {$g5['board_table']} where bo_table = '{$g5_search['tables'][$i]}' ";

            $row2 = sql_fetch($sql2);

            $sch_class = "";

            $sch_all = "";

            if ($onetable == $g5_search['tables'][$i]) $sch_class = "class=sch_on";

            else $sch_all = "class=sch_on";

            $str_board_list .= '<li><a href="'.$_SERVER['SCRIPT_NAME'].'?'.$search_query.'&amp;gr_id='.$gr_id.'&amp;onetable='.$g5_search['tables'][$i].'" '.$sch_class.'><strong>'.((G5_IS_MOBILE && $row2['bo_mobile_subject']) ? $row2['bo_mobile_subject'] : $row2['bo_subject']).'</strong><span class="cnt_cmt">'.$row['cnt'].'</span></a></li>';

        }

    }

 

    $rows = $srows;

    $total_page = ceil($total_count / $rows);  // 전체 페이지 계산

    if ($page < 1) { $page = 1; } // 페이지가 없으면 첫 페이지 (1 페이지)

    $from_record = ($page - 1) * $rows; // 시작 열을 구함

 

    for ($i=0; $i<count($search_table); $i++) {

        if ($from_record < $search_table_count[$i]) {

            $table_index = $i;

            $from_record = $from_record - ($i > 0 ? $search_table_count[$i-1] : 0);

            break;

        }

    }

 

    $bo_subject = array();

    $list = array();

 

    $k=0;

    for ($idx=$table_index; $idx<count($search_table); $idx++) {

        $sql = " select bo_subject, bo_mobile_subject from {$g5['board_table']} where bo_table = '{$search_table[$idx]}' ";

        $row = sql_fetch($sql);

        $bo_subject[$idx] = ((G5_IS_MOBILE && $row['bo_mobile_subject']) ? $row['bo_mobile_subject'] : $row['bo_subject']);

 

        $tmp_write_table = $g5['write_prefix'] . $search_table[$idx];

 

        $sql = " select * from {$tmp_write_table} where {$sql_search} order by wr_id desc limit {$from_record}, {$rows} ";

        $result = sql_query($sql);

        for ($i=0; $row=sql_fetch_array($result); $i++) {

            // 검색어까지 링크되면 게시판 부하가 일어남

            $list[$idx][$i] = $row;

            $list[$idx][$i]['href'] = get_pretty_url($search_table[$idx], $row['wr_parent']);

 

            if ($row['wr_is_comment'])

            {

                $sql2 = " select wr_subject, wr_option from {$tmp_write_table} where wr_id = '{$row['wr_parent']}' ";

                $row2 = sql_fetch($sql2);

                //$row['wr_subject'] = $row2['wr_subject'];

                $row['wr_subject'] = get_text($row2['wr_subject']);

            }

 

            // 비밀글은 검색 불가

            if (strstr($row['wr_option'].(isset($row2['wr_option']) ? $row2['wr_option'] : ''), 'secret'))

                $row['wr_content'] = '[비밀글 입니다.]';

 

            $subject = get_text($row['wr_subject']);

            if (strstr($sfl, 'wr_subject'))

                $subject = search_font($stx, $subject);

 

            if ($read_level[$idx] <= $member['mb_level'])

            {

                //$content = cut_str(get_text(strip_tags($row['wr_content'])), 300, "…");

                $content = strip_tags($row['wr_content']);

                $content = get_text($content, 1);

                $content = strip_tags($content);

                $content = str_replace('&nbsp;', '', $content);

                $content = cut_str($content, 300, "…");

 

                if (strstr($sfl, 'wr_content'))

                    $content = search_font($stx, $content);

            }

            else

                $content = '';

 

            $list[$idx][$i]['subject'] = $subject;

            $list[$idx][$i]['content'] = $content;

            $list[$idx][$i]['name'] = get_sideview($row['mb_id'], get_text(cut_str($row['wr_name'], $config['cf_cut_name'])), $row['wr_email'], $row['wr_homepage']);

 

            $k++;

            if ($k >= $rows)

                break;

        }

        sql_free_result($result);

 

        if ($k >= $rows)

            break;

 

        $from_record = 0;

    }

 

    $write_pages = get_paging(G5_IS_MOBILE ? $config['cf_mobile_pages'] : $config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME'].'?'.$search_query.'&amp;gr_id='.$gr_id.'&amp;srows='.$srows.'&amp;onetable='.$onetable.'&amp;page=');

}

 

$group_select = '<label for="gr_id" class="sound_only">게시판 그룹선택</label><select name="gr_id" id="gr_id" class="select"><option value="">전체 분류';

$sql = " select gr_id, gr_subject from {$g5['group_table']} order by gr_id ";

$result = sql_query($sql);

for ($i=0; $row=sql_fetch_array($result); $i++)

    $group_select .= "<option value=\"".$row['gr_id']."\"".get_selected($gr_id, $row['gr_id']).">".$row['gr_subject']."</option>";

$group_select .= '</select>';

 

if (!$sfl) $sfl = 'wr_subject';

if (!$sop) $sop = 'or';

 

include_once($search_skin_path.'/search.total.skin.php');

include_once('./_tail.php');

<?php

if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가

?>

<?php if ($is_admin) {  //관리자이면 ?>

    <div class="sit_admin"><a href="<?php echo G5_ADMIN_URL; ?>/shop_admin/configform.php#anc_scf_etc" class="btn_admin btn"><i class="fa fa-cog fa-spin fa-fw"></i><span class="sound_only">검색 설정</span></a></div>

<?php } ?>

<!-- 검색 시작 { -->

<script>

    $(document).ready(function(){

        $("i#prev").on("click", function(){

        window.history.back();

    })

    })

</script>

<div class="sub_wrap shoplist search">

    <h1><i id="prev" class="xi-angle-left"></i>상품검색결과<a href="/"><i id="home" class="xi-home-o"></i></a></h1>

<div id="ssch">

    <h2><strong><?php echo $q; ?></strong>에 대한 <strong><?php echo $total_count; ?>개</strong>의 상품이 있습니다.</h2>

    <!-- 상세검색 항목 시작 { -->

    <div id="ssch_frm">

        <div class="ssch_frm_inner">

            <form name="frmdetailsearch">

            <input type="hidden" name="qsort" id="qsort" value="<?php echo $qsort ?>">

            <input type="hidden" name="qorder" id="qorder" value="<?php echo $qorder ?>">

            <input type="hidden" name="qcaid" id="qcaid" value="<?php echo $qcaid ?>">

            <!-- <div class="ssch_scharea">

                <label for="ssch_q" class="sound_only" >검색어</label>

                <input type="text" name="q" value="<?php echo $q; ?>" id="ssch_q" class="ssch_input" size="40" maxlength="30" placeholder="검색어">

                <button type="submit" class="btn_submit"><i class="fa fa-search" aria-hidden="true"></i> 검색</button>

                <button type="button" class="tooltip_icon"><i class="fa fa-question-circle-o" aria-hidden="true"></i><span class="sound_only">설명보기</span></button>

                <span class="tooltip">

                    상세검색을 선택하지 않거나, 상품가격을 입력하지 않으면 전체에서 검색합니다.<br>

                    검색어는 최대 30글자까지, 여러개의 검색어를 공백으로 구분하여 입력 할수 있습니다.

                </span>

            </div> -->

            </form>

        </div>

        <!-- 검색된 분류 시작 { -->

        <div id="ssch_cate">

            <ul>

            <?php

            echo '<li><a href="#" onclick="set_ca_id(\'\'); return false;">전체분류 <span>('.$total_count.')</span></a></li>'.PHP_EOL;

            $total_cnt = 0;

            foreach((array) $categorys as $row){

                if( empty($row) ) continue;

                echo "<li><a href=\"#\" onclick=\"set_ca_id('{$row['ca_id']}'); return false;\">{$row['ca_name']} (".$row['cnt'].")</a></li>\n";

                $total_cnt += $row['cnt'];

            }

            ?>

            </ul>

        </div>

        <!-- } 검색된 분류 끝 -->

        <div id="sct_sortlist" class="m">

            <i class="xi-tune"></i>

            <ul id="ssch_sort_all">

                <li><a href="#" onclick="set_sort('it_sum_qty', 'desc'); return false;">판매많은순</a></li>

                <li><a href="#" onclick="set_sort('it_price', 'asc'); return false;">낮은가격순</a></li>

                <li><a href="#" onclick="set_sort('it_price', 'desc'); return false;">높은가격순</a></li>

                <li><a href="#" onclick="set_sort('it_use_avg', 'desc'); return false;">평점높은순</a></li>

                <li><a href="#" onclick="set_sort('it_use_cnt', 'desc'); return false;">후기많은순</a></li>

                <li><a href="#" onclick="set_sort('it_update_time', 'desc'); return false;">최근등록순</a></li>

            </ul>

        </div>

        <!-- } 상세검색 항목 끝 -->

    </div>  

    <!-- 검색결과 시작 { -->

    <div>

        <?php

        // 리스트 유형별로 출력

        if (isset($list) && is_object($list) && method_exists($list, 'run')) {

            $list->set_is_page(true);

            $list->set_view('it_img', true);

            $list->set_view('it_name', true);

            $list->set_view('it_basic', true);

            $list->set_view('it_cust_price', false);

            $list->set_view('it_price', true);

            $list->set_view('it_icon', true);

            $list->set_view('sns', true);

            $list->set_view('star', true);

            echo $list->run();

        }

        else

        {

            $i = 0;

            $error = '<p class="sct_nofile">'.$list_file.' 파일을 찾을 수 없습니다.<br>관리자에게 알려주시면 감사하겠습니다.</p>';

        }

 

        if ($i==0)

        {

            echo '<div>'.$error.'</div>';

        }

 

        $query_string = 'qname='.$qname.'&amp;qexplan='.$qexplan.'&amp;qid='.$qid;

        if($qfrom && $qto) $query_string .= '&amp;qfrom='.$qfrom.'&amp;qto='.$qto;

        $query_string .= '&amp;qcaid='.$qcaid.'&amp;q='.urlencode($q);

        $query_string .='&amp;qsort='.$qsort.'&amp;qorder='.$qorder;

        echo get_paging($config['cf_write_pages'], $page, $total_page, $_SERVER['SCRIPT_NAME'].'?'.$query_string.'&amp;page=');

        ?>

    </div>

    <!-- } 검색결과 끝 -->

</div>

<!-- } 검색 끝 -->

</div>

 

<script>

    $(document).ready(function(){

        $("#sct_sortlist i").on("click", function(){

            $(this).next().toggleClass("on");

        })

    })

function set_sort(qsort, qorder)

{

    var f = document.frmdetailsearch;

    f.qsort.value = qsort;

    f.qorder.value = qorder;

    f.submit();

}

 

function set_ca_id(qcaid)

{

    var f = document.frmdetailsearch;

    f.qcaid.value = qcaid;

    f.submit();

}

 

$(function(){

    //tooltip

    $(".tooltip_icon").click(function(){

        $(this).next(".tooltip").fadeIn(400);

    }).mouseout(function(){

        $(this).next(".tooltip").fadeOut();

    });

});

 

// 검색옵션

$("#ssch_sort_all li a").click(function() {

    $(this).parent().addClass('active');

});

</script>