sst 변수 필터링 특수문자 추가

2016-04-04 14:28:18 +09:00
parent fd381a9a93
commit 6af75013d4
1 changed files with 1 additions and 1 deletions
--- a/common.php
+++ b/common.php
@ -255,7 +255,7 @@ if (isset($_REQUEST['stx']))  { // search text (검색어)

 if (isset($_REQUEST['sst']))  {
    $sst = trim($_REQUEST['sst']);
-    $sst = preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\s]/", "", $sst);
+    $sst = preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\/\^\*\s]/", "", $sst);
    if ($sst)
        $qstr .= '&amp;sst=' . urlencode($sst); // search sort (검색 정렬 필드)
 } else {