KVE-2019-0082 원격취약점 다시 수정

2019-03-13 15:56:53 +09:00
parent e1bd6082b2
commit 38ca20b3f9
3 changed files with 4 additions and 4 deletions
--- a/shop/event.php
+++ b/shop/event.php
@ -43,7 +43,7 @@ else
    $order_by = 'b.it_order, b.it_id desc';

 if ($skin) {
-    $skin = preg_replace('#\.+/#', '', $skin);
+    $skin = preg_replace('#\.+(\/|\\\)#', '', $skin);
    $ev['ev_skin'] = $skin;
 }