XSS 및 SQL Injection 취약점 수정

2014-07-31 15:48:34 +09:00
parent 3100f342c3
commit 4d115fd895
7 changed files with 22 additions and 5 deletions
--- a/bbs/write.php
+++ b/bbs/write.php
@ -319,7 +319,7 @@ if ($w == '') {
    }

    $name = get_text(cut_str($write['wr_name'],20));
-    $email = $write['wr_email'];
+    $email = get_email_address($write['wr_email']);
    $homepage = get_text($write['wr_homepage']);

    for ($i=1; $i<=G5_LINK_COUNT; $i++) {