영카트 Reflected XSS (17-0789) 취약점 수정

2017-11-06 16:47:24 +09:00
parent e46af305a9
commit 6cfb34ab22
1 changed files with 2 additions and 0 deletions
--- a/adm/menu_form.php
+++ b/adm/menu_form.php
@ -8,6 +8,8 @@ if ($is_admin != 'super')
 $g5['title'] = '메뉴 추가';
 include_once(G5_PATH.'/head.sub.php');

+$code = isset($code) ? preg_replace('/[^0-9a-zA-Z]/', '', strip_tags($code)) : '';
+
 // 코드
 if($new == 'new' || !$code) {
    $code = base_convert(substr($code,0, 2), 36, 10);