diff --git a/shop/itemqaform.php b/shop/itemqaform.php index 955be79c7..d85c4257a 100644 --- a/shop/itemqaform.php +++ b/shop/itemqaform.php @@ -12,7 +12,7 @@ if (!$is_member) { alert_close("상품문의는 회원만 작성 가능합니다."); } -$w = trim($_REQUEST['w']); +$w = preg_replace('/[^0-9a-z]/i', '', trim($_REQUEST['w'])); $it_id = get_search_string(trim($_REQUEST['it_id'])); $iq_id = preg_replace('/[^0-9]/', '', trim($_REQUEST['iq_id']));