보안패치 및 그누보드 5.0.20 수정사항 적용

2014-10-22 13:16:44 +09:00
parent 1355c7ef57
commit 352deb6133
33 changed files with 70 additions and 67 deletions
--- a/bbs/profile.php
+++ b/bbs/profile.php
@ -24,7 +24,7 @@ $sql = " select (TO_DAYS('".G5_TIME_YMDHIS."') - TO_DAYS('{$mb['mb_datetime']}')
 $row = sql_fetch($sql);
 $mb_reg_after = $row['days'];

-$mb_homepage = set_http($mb['mb_homepage']);
+$mb_homepage = set_http(clean_xss_tags($mb['mb_homepage']));
 $mb_profile = $mb['mb_profile'] ? conv_content($mb['mb_profile'],0) : '소개 내용이 없습니다.';

 include_once($member_skin_path.'/profile.skin.php');