그누보드 원격 취약점 17-259 수정

2017-06-13 15:20:28 +09:00
parent e4c9bf5ba4
commit 617dfbf0e2
3 changed files with 46 additions and 0 deletions
--- a/adm/_common.php
+++ b/adm/_common.php
@ -2,4 +2,8 @@
 define('G5_IS_ADMIN', true);
 include_once ('../common.php');
 include_once(G5_ADMIN_PATH.'/admin.lib.php');
+
+if( isset($token) ){
+    $token = @htmlspecialchars(strip_tags($token), ENT_QUOTES);
+}
 ?>
--- a/adm/sms_admin/_common.php
+++ b/adm/sms_admin/_common.php
@ -14,5 +14,9 @@ if (!strstr($_SERVER['SCRIPT_NAME'], 'install.php')) {

 $sv = isset($_REQUEST['sv']) ? get_search_string($_REQUEST['sv']) : '';

+if( isset($token) ){
+    $token = @htmlspecialchars(strip_tags($token), ENT_QUOTES);
+}
+
 add_stylesheet('<link rel="stylesheet" href="'.G5_SMS5_ADMIN_URL.'/css/sms5.css">', 0);
 ?>