From 1ac74cf88e1ca8189b783048b95d036139489c3c Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Tue, 6 Aug 2019 11:09:54 +0900
Subject: [PATCH] =?UTF-8?q?[KVE-2019-1157]=EC=98=81=EC=B9=B4=ED=8A=B8?=
 =?UTF-8?q?=EC=B7=A8=EC=95=BD=EC=A0=90=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 shop/inicis/inistdpay_result.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/shop/inicis/inistdpay_result.php b/shop/inicis/inistdpay_result.php
index 822aa8937..0f0e31e36 100644
--- a/shop/inicis/inistdpay_result.php
+++ b/shop/inicis/inistdpay_result.php
@@ -85,7 +85,7 @@ try {
             $resultMap = json_decode($authResultString, true);
 
             $tid = $resultMap['tid'];
-            $oid = $resultMap['MOID'];
+            $oid = preg_replace('/[^A-Za-z0-9\-_]/', '', $resultMap['MOID']);
 
             /*************************  결제보안 추가 2016-05-18 START ****************************/
             $secureMap['mid']       = $mid;                         //mid