XSS 취약점 수정

2025-08-28 13:35:14 +09:00
parent 9510aa9cf1
commit 002e43e5fb
2 changed files with 7 additions and 1 deletions
--- a/bbs/view_comment.php
+++ b/bbs/view_comment.php
@ -7,7 +7,7 @@ if ($is_guest && $board['bo_comment_level'] < 2) {
    $captcha_html = captcha_html('_comment');
 }

-$c_id = isset($_GET['c_id']) ? clean_xss_tags($_GET['c_id'], 1, 1) : '';
+$c_id = isset($_GET['c_id']) ? preg_replace('/[\'",]/', '', clean_xss_tags($_GET['c_id'], 1, 1)) : '';
 $c_wr_content = '';

@include_once($board_skin_path.'/view_comment.head.skin.php');