From bad71e594916d081d7f10be0252ea44ec8ec32fb Mon Sep 17 00:00:00 2001
From: woo <woo@DESKTOP-5FPS6Q0>
Date: Thu, 24 Aug 2023 11:37:57 +0900
Subject: [PATCH] =?UTF-8?q?=EC=82=AC=EC=9A=A9=EC=9E=90=20=ED=99=98?=
 =?UTF-8?q?=EB=B6=88=EC=9A=94=EC=B2=AD=EC=8B=9C=20Controller=20=EC=97=90?=
 =?UTF-8?q?=EC=84=9C=20=ED=99=98=EB=B6=88=20=EC=9A=94=EC=B2=AD=20=EA=B8=88?=
 =?UTF-8?q?=EC=95=A1=20=EB=B0=8F=20=EB=B3=B4=EC=9C=A0=EA=B8=88=EC=95=A1=20?=
 =?UTF-8?q?=EB=B9=84=EA=B5=90=20=EA=B5=AC=EB=AC=B8=EC=B6=94=EA=B0=80=20=20?=
 =?UTF-8?q?-=20=ED=99=98=EB=B6=88=EC=9A=94=EC=B2=AD=EA=B8=88=EC=95=A1?=
 =?UTF-8?q?=EC=9D=B4=20=EC=9D=8C=EC=88=98(-)=EB=A1=9C=20=EB=84=98=EC=96=B4?=
 =?UTF-8?q?=EC=98=A4=EB=8A=94=20=EA=B2=BD=EC=9A=B0=EB=A5=BC=20=EC=9C=84?=
 =?UTF-8?q?=ED=95=B4=20=EC=A0=88=EB=8C=80=EA=B0=92=20=EC=B2=98=EB=A6=AC=20?=
 =?UTF-8?q?=EC=B6=94=EA=B0=80=20=20-=20=EA=B0=81=20=EC=83=81=ED=99=A9?=
 =?UTF-8?q?=EB=B3=84=20=EB=B3=B4=EC=9C=A0=EA=B8=88=EC=95=A1=EA=B3=BC=20?=
 =?UTF-8?q?=ED=99=98=EB=B6=88=EC=9A=94=EC=B2=AD=20=EA=B8=88=EC=95=A1=20?=
 =?UTF-8?q?=EB=B9=84=EA=B5=90=20=EA=B5=AC=EB=AC=B8=20=EC=B6=94=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../itn/let/mjo/pay/web/RefundController.java | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/src/main/java/itn/let/mjo/pay/web/RefundController.java b/src/main/java/itn/let/mjo/pay/web/RefundController.java
index 6bc72cdd..de2e0aea 100644
--- a/src/main/java/itn/let/mjo/pay/web/RefundController.java
+++ b/src/main/java/itn/let/mjo/pay/web/RefundController.java
@@ -330,6 +330,10 @@ public class RefundController {
 			//230802 이지우 취약점 조치 - 보유금액을 변조하여 환불 신청 한 경우 방지
 			//회원 정보 조회
 			RefundVO mberInfoVO = refundService.selectRefundMberInfo(refundVO);
+			//환불 요청 금액이 마이너스(-) 금액으로 오는 경우를 위해 절대값 처리해줌 - 20230824 우영두 
+			refundVO.setRefundMoney(Math.abs(refundVO.getRefundMoney()));
+			
+			double refundMoneySum = refundService.selectRefundMoneySum(refundVO);	// 환불신청금액(환불요청 상태)
 			
 			if(Double.parseDouble(mberInfoVO.getMberMoney()) 
 					< refundVO.getRefundMoney()) {
@@ -338,6 +342,21 @@ public class RefundController {
 				modelAndView.addObject("msg", "현재 회원의 보유금액보다 큰 금액을 환불 할 수 없습니다.");
 				
 				return modelAndView;
+				
+			}else if(refundVO.getRefundMoney() < 10000) {
+				
+				modelAndView.addObject("status", "moreThanUserMoney");
+				modelAndView.addObject("msg", "10,000원 이하 환불 불가입니다.");
+				
+ 				return modelAndView;
+				
+			}else if(Double.parseDouble(mberInfoVO.getMberMoney()) < refundMoneySum) {
+				
+				modelAndView.addObject("status", "moreThanUserMoney");
+				modelAndView.addObject("msg", "현재 회원의 (보유금액-환불신청금액)보다 큰 금액을 환불 할 수 없습니다.");
+				
+				return modelAndView;
+				
 			}
 			
 			String atchFileId = "";