XSS 취약점 및 특수문자 치환오류 수정

2015-09-18 16:25:01 +09:00
parent b456c0feae
commit 688bc53da9
17 changed files with 40 additions and 53 deletions
--- a/lib/outlogin.lib.php
+++ b/lib/outlogin.lib.php
@ -7,7 +7,7 @@ function outlogin($skin_dir='basic')
    global $config, $member, $g5, $urlencode, $is_admin, $is_member;

    if (array_key_exists('mb_nick', $member)) {
-        $nick  = cut_str($member['mb_nick'], $config['cf_cut_name']);
+        $nick  = get_text(cut_str($member['mb_nick'], $config['cf_cut_name']));
    }
    if (array_key_exists('mb_point', $member)) {
        $point = number_format($member['mb_point']);