firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

XSS 취약점(16-1007) 수정

Browse Source
This commit is contained in:
thisgun
2017-01-05 17:56:22 +09:00
parent 27d603a804
commit 340fd32449
10 changed files with 54 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
adm/shop_admin/itemstocksms.php
View File

@ -33,7 +33,12 @@ if ($search != "") {
if ($sel_field == "") $sel_field = "it_it";
if ($sort1 == "") $sort1 = "ss_send";
if ($sort2 == "") $sort2 = "asc";
if ($sort2 == "" || $sort2 != "desc") $sort2 = "asc";
$doc = strip_tags($doc);
$sort1 = strip_tags($sort1);
$sel_field = strip_tags($sel_field);
$search = get_search_string($search);
$sql_common = " from {$g5['g5_shop_item_stocksms_table']} ";