1:1문의 이메일 입력 XSS 취약점 수정

This commit is contained in:
chicpro
2014-06-11 11:04:39 +09:00
parent 1c90e83ae1
commit 2adccca817
3 changed files with 23 additions and 1 deletions

View File

@ -2710,4 +2710,13 @@ function member_delete($mb_id)
$sql = " update {$g5['member_table']} set mb_password = '', mb_level = 1, mb_email = '', mb_homepage = '', mb_tel = '', mb_hp = '', mb_zip1 = '', mb_zip2 = '', mb_addr1 = '', mb_addr2 = '', mb_birth = '', mb_sex = '', mb_signature = '', mb_memo = '".date('Ymd', G5_SERVER_TIME)." 삭제함\n{$mb['mb_memo']}', mb_leave_date = '".date('Ymd', G5_SERVER_TIME)."' where mb_id = '{$mb_id}' ";
sql_query($sql);
}
// strip_tags 변형
function strip_tags2($str)
{
if(!$str)
return '';
return strip_tags(preg_replace("#<script[^<]*</script[^>]*>#i", "", $str));
}
?>