MINI MINI MANI MO

<?

$dir = $_SERVER['DOCUMENT_ROOT'];
include $dir.'/_config/session.php';
include $dir.'/_config/_class/basicdb.class.php';
include $dir.'/_config/_class/scriptAlert.class.php';

include_once "$_SERVER[DOCUMENT_ROOT]/config/config.php";  

$db		= new basicdb();
$script = new scriptAlert();

$mode = $_POST['mode'];
if(!$mode)$script->alert('À߸øµÈ Á¢±ÙÀÔ´Ï´Ù');
if($mode == 'bid_regist'){
	if(!$_POST['idx'])$script->alert('idx°ªÀÌ Á¸ÀçÇÏÁö¾Ê½À´Ï´Ù');
}

companyUpOnly();

if($mode == 'regist') {

	$qry ="select * from woojung_car as a 
			left join woojung_car_go as b on a.wc_idx = b.wcg_wcidx	
			where wc_idx = '$_POST[idx]'";
	
	$query = $db->query($qry);
	$row	= mysql_fetch_object($query);
	
	
	$now_date		= date("YmdHi");
	$end_time		= $row->wc_go_end_date;
	$year			= cutStr($end_time,0,4);
	$month			= cutStr($end_time,5,2);
	$day			= cutStr($end_time,8,2);
	$hour			= $row->wc_go_end_hh;
	$min			= $row->wc_go_end_mm;
	$last_end_date = $year.$month.$day.$hour.$min;


	if($now_date > $last_end_date)
	{
		$script->alertWin("ÀÔÂûÀÌ Á¾·áµÇ¾ú½À´Ï´Ù.");
	}

	
	if($_POST['goSale']){
		$sale_type				= $_POST['goSale'];
	}else{
		$sale_type				= $row->wc_go_type;
	}	

	$bid_price				= str_replace(',','',$_POST['c_bid_price']);		// ÀÔÂû±Ý¾×
	$bid_total_price		= str_replace(',','',$_POST['bid_total_price']);	// ±âŸºñ¿ë(°ßÀκñµî) ±Ý¾×
	$succ_bid_sub_price		= str_replace(',','',$_POST['succ_bid_sub_price']); // ³«Âû¼ö¼ö·á
	$succ_etc_total_price	= str_replace(',','',$_POST['succ_etc_total_price']); // ÄÁ¼³Æà ¼ö¼ö·á
	$sang_price			= str_replace(',','',$_POST['sang_price']);		 // »ó»çÀÌÀüºñ 
	$vat_price			= str_replace(',','',$_POST['vat_bid_price']);		 // ¹ýÀκΰ¡¼¼
	$last_bid_price			= str_replace(',','',$_POST['last_bid_price']);		 // ³«Âû½Ã °áÀçÇÏ½Ç ÇÕ°è±Ý¾× 
	
	
	$bid_rcpt_sort_date = date("YmdHis", mktime());

	$MaxQuery = $db->query("select * from woojung_bid  where auct_idx = '$row->wc_orderno' order by bid_price desc ");
	$selMax = mysql_fetch_array($MaxQuery);
	if($selMax[bid_price]>=$bid_price){
		$script->alertWin("ÀÔÂû±Ý¾×ÀÌ ÇöÀçÃÖ°í°¡ º¸´Ù Àû½À´Ï´Ù.");
	}

	
	$selQuery = $db->query("select * from woojung_bid  where auct_idx = '$row->wc_orderno' and userId = '$loginId' and sale_type='$sale_type' ");
	$selRow = mysql_fetch_row($selQuery);

	$query = mysql_query("select * from woojung_member where userId = '$loginId' limit 1");
	$member_new = mysql_fetch_array($query);
	
	if(!$selRow[0])
	{	
			
		$sql = "insert into woojung_bid set ";
		$sql.= " auct_key			= '$row->wc_idx',";
		$sql.= " auct_idx			= '$row->wc_orderno',";
		$sql.= " userId				= '$loginId',";
		$sql.= " name				= '$loginName',";
		$sql.= " sale_type			= '$sale_type',";
		$sql.= " bid_price			= '$bid_price',";
		$sql.= " bid_total_price		= '$bid_total_price',";
		$sql.= " succ_bid_sub_price  = '$succ_bid_sub_price',";
		$sql.= " succ_etc_total_price = '$succ_etc_total_price',";
		$sql.= " sang_price  = '$sang_price',";
		$sql.= " vat_price  = '$vat_price',";
		$sql.= " total_price  = '$last_bid_price',";
		$sql.= " bid_rcpt_sort_date  = '$bid_rcpt_sort_date',";
		$sql.= " bid_name='$member_new[ceo_name]', ";
		$sql.= " bid_company='$member_new[company_name]', ";
		$sql.= " code  = '$site_code',";
		$sql.= " rdate			    = now()";
		
		$opener_bid_price = number_format($bid_price);
	
	
	
		$result = $db->query($sql);
	}
	else
	{
		$sql = "update woojung_bid set ";
		$sql.= " auct_key			= '$row->wc_idx',";
		$sql.= " auct_idx			= '$row->wc_orderno',";
		$sql.= " userId				= '$loginId',";
		$sql.= " name				= '$loginName',";
		$sql.= " sale_type			= '$sale_type',";
		$sql.= " bid_price			= '$bid_price',";
		$sql.= " bid_total_price		= '$bid_total_price',";
		$sql.= " succ_bid_sub_price  = '$succ_bid_sub_price',";
		$sql.= " succ_etc_total_price = '$succ_etc_total_price',";
		$sql.= " sang_price  = '$sang_price',";
		$sql.= " vat_price  = '$vat_price',";
		$sql.= " total_price  = '$last_bid_price',";
		$sql.= " bid_rcpt_sort_date  = '$bid_rcpt_sort_date',";
		$sql.= " bid_name='$member_new[ceo_name]', ";
		$sql.= " bid_company='$member_new[company_name]', ";
		$sql.= " rdate			    = now()";
		$sql.= " where auct_idx = '$row->wc_orderno' and userId = '$loginId' and sale_type='$sale_type' ";
		
		$opener_bid_price = number_format($bid_price);
	
		
	
		$result = $db->query($sql);
	}



	$msg = "ÀÔÂû";
	$url = "opener.window.document.getElementById('my_bid_price').innerHTML = '".$opener_bid_price."';";
	
	if($result){
?>
<script>
	alert("<?=$msg?>¿¡ ¼º°øÇÏ¿´½À´Ï´Ù");
	parent.document.location.reload();
</script>
<?
	}else{
		$script->alertWin($msg."¿¡ ½ÇÆÐÇÏ¿´½À´Ï´Ù");
	}
	
}			

$db->dbclose();
?>