firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

KVE-2019-0082 원격취약점 다시 수정

Browse Source
This commit is contained in:
thisgun
2019-03-13 15:56:53 +09:00
parent e1bd6082b2
commit 38ca20b3f9
3 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
adm/shop_admin/itemeventformupdate.php
View File

@ -19,8 +19,8 @@ if ($ev_mimg_del) @unlink(G5_DATA_PATH."/event/{$ev_id}_m");
if ($ev_himg_del) @unlink(G5_DATA_PATH."/event/{$ev_id}_h"); if ($ev_himg_del) @unlink(G5_DATA_PATH."/event/{$ev_id}_h");
if ($ev_timg_del) @unlink(G5_DATA_PATH."/event/{$ev_id}_t"); if ($ev_timg_del) @unlink(G5_DATA_PATH."/event/{$ev_id}_t");
$ev_skin = preg_replace('#\.+/#', '', $ev_skin); $ev_skin = preg_replace('#\.+(\/|\\\)#', '', $ev_skin);
$ev_mobile_skin = preg_replace('#\.+/#', '', $ev_mobile_skin); $ev_mobile_skin = preg_replace('#\.+(\/|\\\)#', '', $ev_mobile_skin);
$skin_regex_patten = "^list.[0-9]+\.skin\.php"; $skin_regex_patten = "^list.[0-9]+\.skin\.php";

2
mobile/shop/event.php
View File

@ -31,7 +31,7 @@ else
$order_by = 'b.it_order, b.it_id desc'; $order_by = 'b.it_order, b.it_id desc';
if ($skin) { if ($skin) {
$skin = preg_replace('#\.+/#', '', $skin); $skin = preg_replace('#\.+(\/|\\\)#', '', $skin);
$ev['ev_skin'] = $skin; $ev['ev_skin'] = $skin;
} }

2
shop/event.php
View File

@ -43,7 +43,7 @@ else
$order_by = 'b.it_order, b.it_id desc'; $order_by = 'b.it_order, b.it_id desc';
if ($skin) { if ($skin) {
$skin = preg_replace('#\.+/#', '', $skin); $skin = preg_replace('#\.+(\/|\\\)#', '', $skin);
$ev['ev_skin'] = $skin; $ev['ev_skin'] = $skin;
} }