$idx = param_get_post('idx'); if(!is_numeric($idx)){ alert("", "/", ""); exit; } $sql = "SELECT * FROM ".$_TB['page']." WHERE wm_id ='".$idx."'"; $row = $db->getFetchQuery($sql); if(!$row["wm_id"]){ alert("", "/", ""); exit; } else if(strlen($row['wm_redirect_url'])>1){ alert("", $row['wm_redirect_url'], ""); exit; } else if($row['wm_use'] != 'Y' || $row['wm_business_code'] != _BIZ_CODE){ alert("", "/", ""); exit; } ?>