firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

그누보드5.0.34 수정내역 적용

Browse Source
This commit is contained in:
chicpro
2015-05-19 13:59:00 +09:00
parent 18fc8ec6d1
commit 330e656544
13 changed files with 40 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
bbs/alert.php
View File

@ -32,6 +32,9 @@ $msg2 = str_replace("\\n", "<br>", $msg);
if (!$url) $url = $_SERVER['HTTP_REFERER'];
// url 체크
check_url_host($url);
if($error) {
$header2 = "다음 항목에 오류가 있습니다.";
} else {

5
bbs/confirm.php
View File

@ -1,6 +1,11 @@
<?php
include_once('./_common.php');
include_once(G5_PATH.'/head.sub.php');
// url 체크
check_url_host($url1);
check_url_host($url2);
check_url_host($url3);
?>
<script>

8
bbs/login.php
View File

@ -6,12 +6,8 @@ include_once('./_head.sub.php');
$url = $_GET['url'];
$p = parse_url($url);
if ((isset($p['scheme']) && $p['scheme']) || (isset($p['host']) && $p['host'])) {
//print_r2($p);
if ($p['host'].(isset($p['port']) ? ':'.$p['port'] : '') != $_SERVER['HTTP_HOST'])
alert('url에 타 도메인을 지정할 수 없습니다.');
}
// url 체크
check_url_host($url);
// 이미 로그인 중이라면
if ($is_member) {

3
bbs/login_check.php
View File

@ -65,6 +65,9 @@ if ($auto_login) {
}
if ($url) {
// url 체크
check_url_host($url);
$link = urldecode($url);
// 2003-06-14 추가 (다른 변수들을 넘겨주기 위함)
if (preg_match("/\?/", $link))

2
bbs/visit_insert.inc.php
View File

@ -14,7 +14,7 @@ if (get_cookie('ck_visit_ip') != $_SERVER['REMOTE_ADDR'])
$referer = "";
if (isset($_SERVER['HTTP_REFERER']))
$referer = escape_trim(clean_xss_tags($_SERVER['HTTP_REFERER']));
$user_agent = escape_trim($_SERVER['HTTP_USER_AGENT']);
$user_agent = escape_trim(clean_xss_tags($_SERVER['HTTP_USER_AGENT']));
$sql = " insert {$g5['visit_table']} ( vi_id, vi_ip, vi_date, vi_time, vi_referer, vi_agent ) values ( '{$vi_id}', '{$remote_addr}', '".G5_TIME_YMD."', '".G5_TIME_HIS."', '{$referer}', '{$user_agent}' ) ";
$result = sql_query($sql, FALSE);