firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

[KVE-2019-0688,0689,0691,0694,0708,0709,0750,0762,0791,0802,0846] 그누보드,영카트 다중 취약점 수정

Browse Source
This commit is contained in:
thisgun
2019-05-24 10:50:28 +09:00
parent ab8c94b53f
commit 6b2e0e9b58
12 changed files with 429 additions and 206 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
adm/shop_admin/itemstocksms.php
View File

@ -24,6 +24,16 @@ if(!sql_query(" select ss_id from {$g5['g5_shop_item_stocksms_table']} limit 1",
) ENGINE=MyISAM DEFAULT CHARSET=utf8 ", true);
}
$doc = strip_tags($doc);
$sort1 = strip_tags($sort1);
$sel_field = strip_tags($sel_field);
$search = get_search_string($search);
$sel_field = in_array($sel_field, array('it_id', 'ss_hp', 'ss_send')) ? $sel_field : 'it_id';
if ($sort1 == "") $sort1 = "ss_send";
if (!in_array($sort1, array('it_id', 'ss_hp', 'ss_send', 'ss_send_time', 'ss_datetime'))) $sort1 = "ss_send";
if ($sort2 == "" || $sort2 != "desc") $sort2 = "asc";
$sql_search = " where 1 ";
if ($search != "") {
if ($sel_field != "") {
@ -31,16 +41,6 @@ if ($search != "") {
}
}
if ($sel_field == "") $sel_field = "it_it";
if ($sort1 == "") $sort1 = "ss_send";
if (!in_array($sort1, array('it_id', 'ss_hp', 'ss_send', 'ss_send_time', 'ss_datetime'))) $sort1 = "ss_send";
if ($sort2 == "" || $sort2 != "desc") $sort2 = "asc";
$doc = strip_tags($doc);
$sort1 = strip_tags($sort1);
$sel_field = strip_tags($sel_field);
$search = get_search_string($search);
$sql_common = " from {$g5['g5_shop_item_stocksms_table']} ";
// 미전송 건수