firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

lo_url 의 XSS 취약점 해결

Browse Source
This commit is contained in:
kagla
2015-06-18 15:49:04 +09:00
parent 78bcc97591
commit 605933c516
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
bbs/current_connect.php
View File

@ -12,6 +12,7 @@ $sql = " select a.mb_id, b.mb_nick, b.mb_name, b.mb_email, b.mb_homepage, b.mb_o
order by a.lo_datetime desc "; order by a.lo_datetime desc ";
$result = sql_query($sql); $result = sql_query($sql);
for ($i=0; $row=sql_fetch_array($result); $i++) { for ($i=0; $row=sql_fetch_array($result); $i++) {
$row['lo_url'] = get_text($row['lo_url']);
$list[$i] = $row; $list[$i] = $row;
if ($row['mb_id']) { if ($row['mb_id']) {