XSS 관련 대응 get_text 함수 처리 추가

2014-06-12 10:20:06 +09:00
parent e56e6e376a
commit 2a5e9ad7fb
9 changed files with 41 additions and 39 deletions
--- a/shop/personalpayresult.php
+++ b/shop/personalpayresult.php
@ -123,11 +123,11 @@ if($od['od_pg'] == 'lg') {
                ?>
                <tr>
                    <th scope="row">입금자명</th>
-                    <td><?php echo $pp['pp_deposit_name']; ?></td>
+                    <td><?php echo get_text($pp['pp_deposit_name']); ?></td>
                </tr>
                <tr>
                    <th scope="row">입금계좌</th>
-                    <td><?php echo $pp['pp_bank_account']; ?></td>
+                    <td><?php echo get_text($pp['pp_bank_account']); ?></td>
                </tr>
                <?php
                }