XSS 취약점(16-060) 수정

2016-01-20 14:46:13 +09:00
parent 20b1d8c7e5
commit 008ae978dd
1 changed files with 2 additions and 0 deletions
--- a/bbs/member_confirm.php
+++ b/bbs/member_confirm.php
@ -19,6 +19,8 @@ $url = clean_xss_tags($_GET['url']);
 // url 체크
 check_url_host($url);

+$url = get_text($url);
+
 include_once($member_skin_path.'/member_confirm.skin.php');

 include_once('./_tail.sub.php');