echajoa/m/member/sale_proc.php

<?php

	include $_SERVER["DOCUMENT_ROOT"].'/common/lib/comm.php';
	include $_SERVER['DOCUMENT_ROOT'].'/common/lib/aligo.php';
	include $_SERVER['DOCUMENT_ROOT'].'/common/user_chk_m.php';

	//관리자 변경으로 휴대폰이 바뀌는 경우가 생김
	//각 페이지에서 관리되던 전화번호를 /common/lib/comm.php에서 관리하게 변경
	// $admin_phone = "010-4813-2508";		//SMS 전달 받을 관리자 번호

	$table_name = "member_master";

	$PageNo = trim(avoid_crack($_REQUEST["PageNo"]));

	$mode = trim(avoid_crack($_POST["mode"]));

	$cd_dealer  = trim(avoid_crack($_POST["cd_dealer"]));
	$cd_dealerid  = trim(avoid_crack($_POST["cd_dealerid"]));
	$cd_dealer_p  = trim(avoid_crack($_POST["cd_dealer_p"]));
	$nm_pass  = trim(avoid_crack($_POST["nm_pass"]));
	$ds_type  = trim(avoid_crack($_POST["ds_type"]));
	$ds_usertype  = trim(avoid_crack($_POST["ds_usertype"]));
	$ds_level  = trim(avoid_crack($_POST["ds_level"]));
	$nm_company  = trim(avoid_crack($_POST["nm_company"]));
	$nm_name  = trim(avoid_crack($_POST["nm_name"]));
	$nm_birth  = trim(avoid_crack($_POST["nm_birth"]));
	$nm_tel_01  = trim(avoid_crack($_POST["nm_tel_01"]));
	$nm_tel_02  = trim(avoid_crack($_POST["nm_tel_02"]));
	$nm_tel_03  = trim(avoid_crack($_POST["nm_tel_03"]));
	$nm_hp_01  = trim(avoid_crack($_POST["nm_hp_01"]));
	$nm_hp_02  = trim(avoid_crack($_POST["nm_hp_02"]));
	$nm_hp_03  = trim(avoid_crack($_POST["nm_hp_03"]));
	$nm_fax_01  = trim(avoid_crack($_POST["nm_fax_01"]));
	$nm_fax_02  = trim(avoid_crack($_POST["nm_fax_02"]));
	$nm_fax_03  = trim(avoid_crack($_POST["nm_fax_03"]));
	$nm_email  = trim(avoid_crack($_POST["nm_email"]));
	$nm_email_01  = trim(avoid_crack($_POST["nm_email1"]));
	$nm_email_02  = trim(avoid_crack($_POST["nm_email2"]));
	$nm_zip  = trim(avoid_crack($_POST["nm_zip"]));
	$nm_addr  = trim(avoid_crack($_POST["nm_addr"]));
	$nm_addr_sub  = trim(avoid_crack($_POST["nm_addr_sub"]));
	$nm_etc_01  = trim(avoid_crack($_POST["nm_etc_01"]));
	$nm_etc_02  = trim(avoid_crack($_POST["nm_etc_02"]));
	$nm_etc_03  = trim(avoid_crack($_POST["nm_etc_03"]));
	$ds_status  = trim(avoid_crack($_POST["ds_status"]));
	$nm_company_biz  = trim(avoid_crack($_POST["nm_company_biz"]));
	$nm_name_biz  = trim(avoid_crack($_POST["nm_name_biz"]));
	$nm_no_biz  = trim(avoid_crack($_POST["nm_no_biz"]));
	$nm_date_biz  = trim(avoid_crack($_POST["nm_date_biz"]));
	$nm_type_biz  = trim(avoid_crack($_POST["nm_type_biz"]));
	$nm_condition_biz  = trim(avoid_crack($_POST["nm_condition_biz"]));
	$nm_tel_biz_01  = trim(avoid_crack($_POST["nm_tel_biz_01"]));
	$nm_tel_biz_02  = trim(avoid_crack($_POST["nm_tel_biz_02"]));
	$nm_tel_biz_03  = trim(avoid_crack($_POST["nm_tel_biz_03"]));
	$nm_hp_biz_01  = trim(avoid_crack($_POST["nm_hp_biz_01"]));
	$nm_hp_biz_02  = trim(avoid_crack($_POST["nm_hp_biz_02"]));
	$nm_hp_biz_03  = trim(avoid_crack($_POST["nm_hp_biz_03"]));
	$nm_fax_biz_01  = trim(avoid_crack($_POST["nm_fax_biz_01"]));
	$nm_fax_biz_02  = trim(avoid_crack($_POST["nm_fax_biz_02"]));
	$nm_fax_biz_03  = trim(avoid_crack($_POST["nm_fax_biz_03"]));
	$nm_email_biz  = trim(avoid_crack($_POST["nm_email_biz"]));
	$nm_zip_biz  = trim(avoid_crack($_POST["nm_zip_biz"]));
	$nm_addr_biz  = trim(avoid_crack($_POST["nm_addr_biz"]));
	$nm_addr_sub_biz  = trim(avoid_crack($_POST["nm_addr_sub_biz"]));
	$ds_company_bp1 = trim(avoid_crack($_POST["ds_company_bp1"]));
	$ds_branch1 = trim(avoid_crack($_POST["ds_branch1"]));
	$ds_company_bp2 = trim(avoid_crack($_POST["ds_company_bp2"]));
	$ds_branch2 = trim(avoid_crack($_POST["ds_branch2"]));
	$ds_company_bp3 = trim(avoid_crack($_POST["ds_company_bp3"]));
	$ds_branch3 = trim(avoid_crack($_POST["ds_branch3"]));

	$ds_company_bp = trim(avoid_crack($_POST["ds_company_bp"]));
	$ds_branch = trim(avoid_crack($_POST["ds_branch"]));

//	$nm_area  = trim(avoid_crack($_POST["nm_area"]));
if ($mode == "Update"){
	// $nm_area  = trim(avoid_crack(implode(",",$_POST["nm_area"])));
}else{
	$nm_area  = trim(avoid_crack($_POST["nm_area"]));
}
	$nm_title  = trim(avoid_crack($_POST["nm_title"]));
	$nm_file  = trim(avoid_crack($_POST["nm_file"]));
	$nm_etc  = trim(avoid_crack($_POST["nm_etc"]));
	$dt_insert  = trim(avoid_crack($_POST["dt_insert"]));
	$nm_insert  = trim(avoid_crack($_POST["nm_insert"]));
	$dt_update  = trim(avoid_crack($_POST["dt_update"]));
	$nm_update  = trim(avoid_crack($_POST["nm_update"]));
	$ds_delind  = trim(avoid_crack($_POST["ds_delind"]));

	$cd_sale  = trim(avoid_crack($_POST["cd_sale"]));
	$nm_price  = trim(avoid_crack($_POST["nm_price"]));
	$nm_score_postscript  = trim(avoid_crack($_POST["nm_score_postscript"]));
	$nm_cont_postscript  = trim(avoid_crack($_POST["nm_cont_postscript"]));

	$s_cd_user = $_SESSION['s_cd_user'];
	$s_cd_userid = $_SESSION['s_cd_userid'];
//	$cd_procid = $_SESSION[admin_cd_dealerid];


//	$PageNo = trim(avoid_crack($_POST["PageNo"]));

	//아래 path 는 안씀
	$upload_path =  $_SERVER['DOCUMENT_ROOT'].UPLOAD_PATH."member/";

	$RES = array('CODE'=>'9999', 'MSG'=>'');
	try {

		switch($mode) {

			//낙찰하기 AAP
			case "TenderSuccessAAP" :

				$cd_sale 	= trim(avoid_crack($_POST["cd_sale"]));
				$cd_tender 	= trim(avoid_crack($_POST["cd_tender"]));
				$nm_price 	= trim(avoid_crack($_POST["nm_price"]));

				$sale_sql = "SELECT s.*
								, b.nm_model
								, d.nm_brand
								, aap.nm_hp as aap_nm_hp
								FROM sale_master s
								INNER JOIN car_master c ON c.cd_car = s.cd_car
								LEFT OUTER JOIN car_model b on (c.cd_model = b.cd_model)
								LEFT OUTER JOIN car_brand d on (c.cd_brand = d.cd_brand)
								LEFT OUTER JOIN aap_master aap on aap.cd_dealer = s.cd_aap_dealer
									WHERE s.cd_sale = '$cd_sale'
										AND s.is_staff = 'N'
										AND s.cd_user = '{$_SESSION['s_cd_user']}'
										AND s.ds_delind = 'N'
								LIMIT 1";
				// echo $sale_sql;
				// exit;
				$sale_res = mysql_query($sale_sql);
				$sale_col = mysql_fetch_array($sale_res);

				if(empty($sale_col['cd_sale'])) {
					throw new Exception("낙찰가능한 차량이 아닙니다.\n새로고침 후에 이용해 주세요", "9990");
				}
				if($sale_col['ds_status'] != "E0") {
					throw new Exception("낙찰가능한 차량이 아닙니다.\n새로고침 후에 이용해 주세요", "9989");
				}

				// 낙찰 내역 확인
				$exist_sql = "SELECT * FROM tender_master WHERE cd_sale = '". $cd_sale . "' and ds_status = 'Z0' and ds_delind = 'N' LIMIT 1 ";
				$exist_result  = mysql_query($exist_sql,$connect);
				$exist_col = mysql_fetch_array($exist_result);

				//기존 낙찰된 내역 초기화
				if (!empty($exist_col['cd_tender'])) {
					$cd_tender_old = $exist_col['cd_tender'];

					//이건 다시 확인해 봐야함
					//기존 모든 낙찰자를 변경할지 어떨지
					// $sql="UPDATE tender_master set
					// 		ds_status = 'A0'
					// 		, dt_update = now()
					// 		, nm_update = '$s_cd_userid'
					// 	where cd_tender = '$cd_tender_old' ";
					//
					// $result  = mysql_query($sql,$connect);

					$sql="UPDATE tender_master set
							ds_status = 'A0'
							, dt_update = now()
							, nm_update = '$s_cd_userid'
						where cd_sale = '$cd_sale' ";

					$result  = mysql_query($sql,$connect);

					if(!$result) {
						throw new Exception("낙찰에 실패 하였습니다.잠시후 다시 시도해 주세요.", "9990");
					}
				}


				//현재 낙찰자 변경
				$sql="UPDATE tender_master set
						ds_status = 'Z0'
						, dt_update = now()
						, nm_update = '$s_cd_userid'
					where cd_tender = '$cd_tender'";
				// echo $sql;
				// exit;
				$result  = mysql_query($sql,$connect);
				if(!$result) {
					throw new Exception("낙찰에 실패 하였습니다.잠시후 다시 시도해 주세요.", "9990");
				}

				//sale_master 변경

				$sql="update sale_master as a
							inner join tender_master as b
							on (
								a.cd_sale = b.cd_sale
								and b.cd_tender = $cd_tender
							)
						set
							a.ds_status = 'Z0'
							, a.dt_success = now()
							, a.nm_price = b.nm_price
							, a.dt_update = now()
							, a.nm_update = '$s_cd_userid'
						";
				//, a.ds_status_contract_step1 = 'Y'
				// echo $sql;
				// exit;
				$result  = mysql_query($sql,$connect);

				if(!$result) {
					throw new Exception("낙찰에 실패 하였습니다.잠시후 다시 시도해 주세요.", "9990");
				}

				$tender_sql = "SELECT * FROM tender_master
									WHERE cd_sale = '$cd_sale' AND ds_status = 'Z0' AND ds_delind = 'N' LIMIT 1";
				$tender_res = mysql_query($tender_sql);
				$tender = mysql_fetch_array($tender_res);

				# 1. 낙찰 AAP에게
				$aligo = new Aligo();
				$aligo->getToken();

				$ALIGO_DATA = array();
				$ALIGO_DATA['car_brand'] 	= $sale_col['nm_brand'];
				$ALIGO_DATA['car_model'] 	= $sale_col['nm_model'];
				$ALIGO_DATA['price'] 		= $tender['nm_price'];
				$ALIGO_DATA['vat'] 			= $tender['nm_commission'];
				$ALIGO_DATA['recv_phone'] 	= $sale_col['aap_nm_hp'];

				// print_r($ALIGO_DATA);
				// exit;
				$response = $aligo->send_sa_sell_complete_to_aap($ALIGO_DATA);
				unset($ALIGO_DATA);

				if($response['code'] != "0") {
					// echo $response['message'];
				}

				# 2. 관리자에게
				foreach($admin_phone as $phone) {
					if(!empty($phone)) {
						$ALIGO_DATA = array();
						$ALIGO_DATA['price'] 		= $tender['nm_ex_vat_price'];
						$ALIGO_DATA['car_brand'] 	= $sale_col['nm_brand'];
						$ALIGO_DATA['car_model'] 	= $sale_col['nm_model'];
						$ALIGO_DATA['recv_phone'] 	= $phone;

						// print_r($ALIGO_DATA);
						$response = $aligo->send_sa_sell_complete_to_admin($ALIGO_DATA);
						// print_r($response);
						unset($ALIGO_DATA);
					}
				}

				// print_r($response);
				// exit;

				if($response['code'] != "0") {
					// echo $response['message'];
				}

				$RES['CODE'] = "0000";
	 			$RES['MSG'] = "정상";

			break;

			//거래완료 유카로
			case "TenderEndAAP" :

				$cd_sale 		= trim(avoid_crack($_POST["cd_sale"]));
				$cd_tender 		= trim(avoid_crack($_POST["cd_tender"]));

				// $sql="UPDATE tender_master SET
				// 			ds_status = 'Z0'
				// 			, dt_update = now()
				// 			, nm_update = '$s_cd_userid'
				// 		WHERE  cd_tender = $cd_tender";
				//
				// $result  = mysql_query($sql,$connect);



				$sale_sql = "SELECT * FROM sale_master a WHERE cd_sale = '$cd_sale' AND cd_user = '$s_cd_user' AND is_staff = 'N' LIMIT 1";
				$sale_res = mysql_query($sale_sql);
				$sale_col = mysql_fetch_array($sale_res);

				if(empty($sale_col['cd_sale'])) {
					throw new Exception("본인 차량만 거래완료 처리할 수 있습니다.\n새로고침 후에 이용해 주세요", "9990");
				}
				if($sale_col['ds_status'] != "Z0") {
					throw new Exception("거래중상태에서만 거래완료 처리할 수 있습니다.\n새로고침 후에 이용해 주세요", "9990");
				}
				if(!($sale_col['ds_status_contract_step1'] == "Y" && $sale_col['ds_status_contract_step2'] == "Y" && $sale_col['ds_status_contract_step3'] == "Y" && $sale_col['ds_status_contract_step4'] == "Y")) {
					throw new Exception("거래진행상황이 거래마무리까지 완료되어야 거래완료 처리할 수 있습니다.\n새로고침 후에 이용해 주세요", "9990");
				}

				$tender_sql = "SELECT * FROM tender_master a WHERE a.cd_sale = '".$cd_sale."' and ds_status = 'Z0' and ds_delind ='N'  LIMIT 1";
				$tender_res = mysql_query($tender_sql);
				$tender_col = mysql_fetch_array($tender_res);

				if(empty($tender_col['cd_tender'])) {
					throw new Exception("낙찰된 AAP가 있을 경우에만 거래완료 처리할 수 있습니다.\n새로고침 후에 이용해 주세요", "9990");
				}

				$dt_end = date("Y-m-d");

				$sql="update sale_master set
							ds_status = 'ZS'
							, ds_aap_status = 'ZS'
							, ds_status_contract_step5 = 'Y'
							, dt_end = '$dt_end'
							, dt_update = now()
							, nm_update = '$s_cd_userid'
						WHERE  cd_sale = $cd_sale";
				// echo $sql;
				// exit;
						//, nm_price = '$nm_price'
				$result  = mysql_query($sql,$connect);
				if(!$result) {
					throw new Exception("거래완료 처리에 실패 하였습니다.잠시후 다시 시도해 주세요.", "9990");
				}

				$RES['CODE'] = "0000";
	 			$RES['MSG'] = "정상";

			break;




























			default :
				AlertBack("지정되지않은 요청입니다");
			break;
		}
	}catch(Exception $e){
		$RES['CODE'] = $e->getCode();
		$RES['MSG'] = $e->getMessage();
	}
	@mysql_close($connect);

	echo json_encode($RES);
	exit;
?>