XSS 취약점 및 특수문자 치환오류 수정

2015-09-18 16:25:01 +09:00
parent b456c0feae
commit 688bc53da9
17 changed files with 40 additions and 53 deletions
--- a/adm/menu_list.php
+++ b/adm/menu_list.php
@ -73,7 +73,7 @@ $colspan = 7;
        }

        $search  = array('"', "'");
-        $replace = array('&#34;', '&#39;');
+        $replace = array('&#034;', '&#039;');
        $me_name = str_replace($search, $replace, $row['me_name']);
    ?>
    <tr class="<?php echo $bg; ?> menu_list menu_group_<?php echo substr($row['me_code'], 0, 2); ?>">