From 8f792c7bbfb9f7a0076cacea5a937d937fee0628 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=EC=9C=A0=EC=A7=80=EC=9D=B8?= Date: Wed, 26 Nov 2025 17:36:38 +0900 Subject: [PATCH] =?UTF-8?q?=EB=B3=B8=EC=9D=B8=EC=9D=B8=EC=A6=9D=20?= =?UTF-8?q?=ED=9B=84=20DUPINFO=20=EC=97=85=EB=8D=B0=EC=9D=B4=ED=8A=B8=20?= =?UTF-8?q?=EA=B4=80=EB=A0=A8=20=EC=88=98=EC=A0=95=20-=20=ED=9C=B4?= =?UTF-8?q?=EB=8C=80=ED=8F=B0=EB=B2=88=ED=98=B8,=20=EC=9D=B4=EB=A6=84?= =?UTF-8?q?=EB=8F=84=20=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../geoinfo/main/kict/KmcisController.java | 46 ++++++++++++++----- .../WEB-INF/views/body/kmcis/kmcis_result.jsp | 2 +- src/main/webapp/js/common/common.js | 26 +++++++++-- 3 files changed, 57 insertions(+), 17 deletions(-) diff --git a/src/main/java/geoinfo/main/kict/KmcisController.java b/src/main/java/geoinfo/main/kict/KmcisController.java index abda5d6d..e51269d3 100644 --- a/src/main/java/geoinfo/main/kict/KmcisController.java +++ b/src/main/java/geoinfo/main/kict/KmcisController.java @@ -125,6 +125,20 @@ public class KmcisController { return mav; } + @RequestMapping(value = "/mobileCertResultTest.do") + public ModelAndView mobileCertResultTest(HttpServletRequest request, ModelAndView mav, + RedirectAttributes rda) throws Exception { + + mav.addObject("name", "유지인"); + mav.addObject("certNum", "20251126111447509506"); + mav.addObject("recCert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mav.addObject("changePhone", "010-6411-8124"); + mav.addObject("changePhone1", "010"); + mav.addObject("changePhone2", "6411"); + mav.addObject("changePhone3", "8124"); + mav.setViewName("body/kmcis/kmcis_result"); + return mav; + } /** * 2024.02.15 LHJ 본인확인서비스(결과 전송 API 방식) 안전성 강화 조치 * 2023.11.01 LHJ PASS 모바일 인증 응답 @@ -496,26 +510,34 @@ public class KmcisController { // 사용자식별 정보 업데이트 @RequestMapping(value = "/updateUserDI.do") public void updateUserDI(Map map, HttpServletRequest request, HttpServletResponse response, HttpSession session) throws Exception { + int affectedRow = 0; + //위변조 체크 + String name = request.getParameter("name"); String hdnCertNum = request.getParameter("hdnCertNum"); String hdnCertification = request.getParameter("hdnCertification"); - String userId = (String)session.getAttribute("userId"); + String phone1 = request.getParameter("phone1"); + String phone2 = request.getParameter("phone2"); + String phone3 = request.getParameter("phone3"); + String userId = request.getParameter("userId"); + if (userId == null) { + userId = (String)session.getAttribute("userId"); + } String DI = ""; Map certResult = MobileCertificationUtil.decryptCertData(hdnCertification, hdnCertNum); DI = certResult.get("DI"); map.put("userid", userId); - updateUserDi(DI, map); + if (userId != null && !"".equals(userId)) { + map.put("table", "WEB_MEMBER_IN"); + map.put("values", "PHONE='" + phone1 + "-" + phone2 + "-" + phone3 + "', " + "USER_NAME='" + name + "'," + "DUPINFO='" + DI + "'"); + map.put("where", "TRIM(USERID) = '" + userId + "'"); + + affectedRow = loginService.userUpdate(map); + } + + + LOGGER.info("사용자정보 {}건 변경됨", affectedRow); LOGGER.info("사용자식별 정보 업데이트 처리 끝 ---------------------------"); } - - private void updateUserDi(String DI, Map result ) throws Exception { - Map map = new HashMap(); -// if(result.get("certification_yn").toString().equals("0")) { - LOGGER.info("본인인증 진행한 사용자"); - map.put("DI", DI); - map.put("userid", result.get("userid")); - loginService.updateCertWebMemberIn(map); -// } - } } diff --git a/src/main/webapp/WEB-INF/views/body/kmcis/kmcis_result.jsp b/src/main/webapp/WEB-INF/views/body/kmcis/kmcis_result.jsp index 38fa255e..af348218 100644 --- a/src/main/webapp/WEB-INF/views/body/kmcis/kmcis_result.jsp +++ b/src/main/webapp/WEB-INF/views/body/kmcis/kmcis_result.jsp @@ -25,7 +25,7 @@ } alert("휴대폰 인증이 완료되었습니다."); - opener.updateUserDI('', ''); <%-- 사용자 식별번호 갱신 --%> + opener.updateUserDI('', '', '', '', '', ''); <%-- 사용자 식별번호 갱신 --%> } self.close(); } diff --git a/src/main/webapp/js/common/common.js b/src/main/webapp/js/common/common.js index 9aa90467..0f08af37 100644 --- a/src/main/webapp/js/common/common.js +++ b/src/main/webapp/js/common/common.js @@ -116,11 +116,29 @@ function XSSCheck(str, level) { return str; } -function updateUserDI(certNem, certf) { - var params = { - "hdnCertNum" : certNem, - "hdnCertification" : certf +function updateUserDI(name, certNum, certf, phone1, phone2, phone3) { +// var params = { +// "hdnCertNum" : certNum, +// "hdnCertification" : certf +// } + var params = {}; + params.name = name; + params.hdnCertNum = certNum; + params.hdnCertification = certf; + params.phone1 = phone1; + params.phone2 = phone2; + params.phone3 = phone3; + + var userId = $('#puserId').val(); + if (userId) { + params.userId = userId; } + + var email = $('#pemail').val(); + if (email) { + params.email = email; + } + $.ajax({ url : "/updateUserDI.do", method : "post",