XSS 취약점(16-995, 1003) 수정

2017-01-05 12:29:20 +09:00
parent b705117c0d
commit 27d603a804
4 changed files with 6 additions and 6 deletions
--- a/shop/itemqaformupdate.php
+++ b/shop/itemqaformupdate.php
@ -12,7 +12,7 @@ $iq_answer = trim($_POST['iq_answer']);
 $hash = trim($_REQUEST['hash']);

 if ($w == "" || $w == "u") {
-    $iq_name     = addslashes($member['mb_name']);
+    $iq_name     = addslashes(strip_tags($member['mb_name']));
    $iq_password = $member['mb_password'];

    if (!$iq_subject) alert("제목을 입력하여 주십시오.");