KVE-2019-0001, 0002, 0042, 0050 그누보드 다중 취약점 수정

adm/sms_admin/history_num.php

@@ -11,15 +11,15 @@ $g5['title'] = "문자전송 내역 (번호별)";
 
 if ($page < 1) $page = 1;
 
+if( isset($st) && !in_array($st, array('hs_name', 'hs_hp', 'bk_no')) ){
+    $st = '';
+}
+
 if ($st && trim($sv))
     $sql_search = " and $st like '%$sv%' ";
 else
     $sql_search = "";
 
-if( isset($st) && !in_array($st, array('hs_name', 'hs_hp', 'bk_no')) ){
-    $st = '';
-}
-
 $total_res = sql_fetch("select count(*) as cnt from {$g5['sms5_history_table']} where 1 $sql_search");
 $total_count = $total_res['cnt'];