From 38ca20b3f98ade46a950347ea23c95ed6d0fb295 Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Wed, 13 Mar 2019 15:56:53 +0900
Subject: [PATCH] =?UTF-8?q?KVE-2019-0082=20=EC=9B=90=EA=B2=A9=EC=B7=A8?=
 =?UTF-8?q?=EC=95=BD=EC=A0=90=20=EB=8B=A4=EC=8B=9C=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/shop_admin/itemeventformupdate.php | 4 ++--
 mobile/shop/event.php                  | 2 +-
 shop/event.php                         | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/adm/shop_admin/itemeventformupdate.php b/adm/shop_admin/itemeventformupdate.php
index 5e7f8ea74..d1346f29a 100644
--- a/adm/shop_admin/itemeventformupdate.php
+++ b/adm/shop_admin/itemeventformupdate.php
@@ -19,8 +19,8 @@ if ($ev_mimg_del)  @unlink(G5_DATA_PATH."/event/{$ev_id}_m");
 if ($ev_himg_del)  @unlink(G5_DATA_PATH."/event/{$ev_id}_h");
 if ($ev_timg_del)  @unlink(G5_DATA_PATH."/event/{$ev_id}_t");
 
-$ev_skin = preg_replace('#\.+/#', '', $ev_skin);
-$ev_mobile_skin = preg_replace('#\.+/#', '', $ev_mobile_skin);
+$ev_skin = preg_replace('#\.+(\/|\\\)#', '', $ev_skin);
+$ev_mobile_skin = preg_replace('#\.+(\/|\\\)#', '', $ev_mobile_skin);
 
 $skin_regex_patten = "^list.[0-9]+\.skin\.php";
 
diff --git a/mobile/shop/event.php b/mobile/shop/event.php
index 74dfd2836..9a41ed587 100644
--- a/mobile/shop/event.php
+++ b/mobile/shop/event.php
@@ -31,7 +31,7 @@ else
     $order_by = 'b.it_order, b.it_id desc';
 
 if ($skin) {
-    $skin = preg_replace('#\.+/#', '', $skin);
+    $skin = preg_replace('#\.+(\/|\\\)#', '', $skin);
     $ev['ev_skin'] = $skin;
 }
 
diff --git a/shop/event.php b/shop/event.php
index c78b1ba8d..0a32f3e68 100644
--- a/shop/event.php
+++ b/shop/event.php
@@ -43,7 +43,7 @@ else
     $order_by = 'b.it_order, b.it_id desc';
 
 if ($skin) {
-    $skin = preg_replace('#\.+/#', '', $skin);
+    $skin = preg_replace('#\.+(\/|\\\)#', '', $skin);
     $ev['ev_skin'] = $skin;
 }