firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

보안패치 및 그누보드 5.0.24 수정내역 적용

Browse Source
This commit is contained in:
chicpro
2014-12-08 11:23:01 +09:00
parent 7ea9d2e1d2
commit 244b8ae819
270 changed files with 10 additions and 8151 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
bbs/ajax.filter.php
View File

@ -1,8 +1,8 @@
<?php
include_once('./_common.php');
$subject = strtolower($_POST['subject']);
$content = strtolower(strip_tags($_POST['content']));
$subject = strip_tags($_POST['subject']);
$content = strip_tags($_POST['content']);
//$filter = explode(",", strtolower(trim($config['cf_filter'])));
// strtolower 에 의한 한글 변형으로 아래 코드로 대체 (곱슬최씨님이 알려 주셨습니다.)
@ -12,7 +12,7 @@ for ($i=0; $i<count($filter); $i++) {
// 제목 필터링 (찾으면 중지)
$subj = "";
$pos = strpos($subject, $str);
$pos = stripos($subject, $str);
if ($pos !== false) {
$subj = $str;
break;
@ -20,7 +20,7 @@ for ($i=0; $i<count($filter); $i++) {
// 내용 필터링 (찾으면 중지)
$cont = "";
$pos = strpos($content, $str);
$pos = stripos($content, $str);
if ($pos !== false) {
$cont = $str;
break;

1
bbs/faq.php
View File

@ -55,6 +55,7 @@ if(is_file($skin_file)) {
$faq_list = array();
$stx = trim($stx);
$sql_search = '';
if($stx) {
$sql_search = " and ( INSTR(fa_subject, '$stx') > 0 or INSTR(fa_content, '$stx') > 0 ) ";

3
bbs/list.php
View File

@ -149,6 +149,9 @@ if (!$sst) {
$sst = preg_match("/^(wr_datetime|wr_hit|wr_good|wr_nogood)$/i", $sst) ? $sst : "";
}
if(!$sst)
$sst = "wr_num, wr_reply";
if ($sst) {
$sql_order = " order by {$sst} {$sod} ";
}