1:1문의 이메일 입력 XSS 취약점 수정

2014-06-11 11:04:39 +09:00
parent 1c90e83ae1
commit 2adccca817
3 changed files with 23 additions and 1 deletions
--- a/bbs/qaview.php
+++ b/bbs/qaview.php
@ -30,7 +30,7 @@ if(is_file($skin_file)) {
    $view['content'] = conv_content($view['qa_content'], $view['qa_html']);
    $view['name'] = get_text($view['qa_name']);
    $view['datetime'] = $view['qa_datetime'];
-    $view['email'] = $view['qa_email'];
+    $view['email'] = get_text(strip_tags2($view['qa_email']));
    $view['hp'] = $view['qa_hp'];

    if (trim($stx))