그누보드 5.0.37 수정내역 적용 및 XSS 취약점 수정

2015-06-23 11:12:23 +09:00
parent d5aca5ab93
commit 6e90622328
8 changed files with 50 additions and 59 deletions
--- a/bbs/current_connect.php
+++ b/bbs/current_connect.php
@ -12,6 +12,7 @@ $sql = " select a.mb_id, b.mb_nick, b.mb_name, b.mb_email, b.mb_homepage, b.mb_o
            order by a.lo_datetime desc ";
 $result = sql_query($sql);
 for ($i=0; $row=sql_fetch_array($result); $i++) {
+    $row['lo_url'] = get_text($row['lo_url']);
    $list[$i] = $row;

    if ($row['mb_id']) {