XSS 취약점 수정

2015-07-14 12:10:44 +09:00
parent 9356fdfaa8
commit 164944dd0c
8 changed files with 19 additions and 5 deletions
--- a/bbs/search.php
+++ b/bbs/search.php
@ -17,7 +17,7 @@ if ($stx) {
    $stx = preg_replace('/\//', '\/', trim($stx));
    $sop = strtolower($sop);
    if (!$sop || !($sop == 'and' || $sop == 'or')) $sop = 'and'; // 연산자 and , or
-    $srows = isset($_GET['srows']) ? preg_replace('#[^0-9]#', '', $_GET['srows']) : 10;
+    $srows = isset($_GET['srows']) ? (int)preg_replace('#[^0-9]#', '', $_GET['srows']) : 10;
    if (!$srows) $srows = 10; // 한페이지에 출력하는 검색 행수

    $g5_search['tables'] = Array();