XSS 취약점 수정

2015-07-24 09:53:40 +09:00
parent f5ad535387
commit 4c999721bb
1 changed files with 1 additions and 1 deletions
--- a/bbs/password.php
+++ b/bbs/password.php
@ -51,7 +51,7 @@ $sql = " select wr_subject from {$write_table}
                      and wr_is_comment = 0 ";
 $row = sql_fetch($sql);

-$g5['title'] = $row['wr_subject'];
+$g5['title'] = get_text($row['wr_subject']);

 include_once($member_skin_path.'/password.skin.php');