원격코드 취약점 17-354 수정

2017-06-08 13:40:50 +09:00
parent c84b868c41
commit 166bbe8da8
2 changed files with 17 additions and 0 deletions
--- a/adm/_common.php
+++ b/adm/_common.php
@ -2,4 +2,8 @@
 define('G5_IS_ADMIN', true);
 include_once ('../common.php');
 include_once(G5_ADMIN_PATH.'/admin.lib.php');
+
+if( isset($token) ){
+    $token = @htmlspecialchars(strip_tags($token), ENT_QUOTES);
+}
 ?>