From 0d9c773d227a7bb8a5b7717f24a813a716012111 Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Mon, 25 Mar 2024 10:03:07 +0900
Subject: [PATCH] =?UTF-8?q?[KVE-2024-0022]=20=EC=87=BC=ED=95=91=EB=AA=B0?=
 =?UTF-8?q?=20=EC=82=AC=EC=9A=A9=ED=9B=84=EA=B8=B0=20=EB=B3=84=EC=A0=90=20?=
 =?UTF-8?q?=EC=A1=B0=EC=9E=91=20=EC=B7=A8=EC=95=BD=EC=A0=90=20=EC=88=98?=
 =?UTF-8?q?=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 shop/itemuseformupdate.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/shop/itemuseformupdate.php b/shop/itemuseformupdate.php
index 9c9324e03..4387d7f3b 100644
--- a/shop/itemuseformupdate.php
+++ b/shop/itemuseformupdate.php
@@ -12,7 +12,7 @@ $is_content = preg_replace('#<script(.*?)>(.*?)</script>#is', '', $is_content);
 $is_name     = isset($_POST['is_name']) ? trim($_POST['is_name']) : '';
 $is_password = isset($_POST['is_password']) ? trim($_POST['is_password']) : '';
 $is_score    = isset($_POST['is_score']) ? (int) $_POST['is_score'] : 0;
-$is_score    = ($is_score > 5) ? 0 : $is_score;
+$is_score    = ($is_score > 5 || $is_score < 1) ? 1 : $is_score;
 $get_editor_img_mode = $config['cf_editor'] ? false : true;
 $is_id       = isset($_REQUEST['is_id']) ? (int) $_REQUEST['is_id'] : 0;
 $is_mobile_shop = isset($_REQUEST['is_mobile_shop']) ? (int) $_REQUEST['is_mobile_shop'] : 0;