From 2e81619ea87bc9c0b4a073d8df3c7693a6fdbf0d Mon Sep 17 00:00:00 2001 From: kagla Date: Tue, 14 Dec 2021 16:10:41 +0900 Subject: [PATCH 1/2] =?UTF-8?q?$kind=20=EB=B3=80=EC=88=98=EB=A5=BC=20?= =?UTF-8?q?=EC=9D=B4=EC=9A=A9=ED=95=9C=20XSS=20=EC=B7=A8=EC=95=BD=EC=A0=90?= =?UTF-8?q?=20=EC=88=98=EC=A0=95=20(Pocas=EB=8B=98,211214)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- bbs/memo.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/bbs/memo.php b/bbs/memo.php index 8dc446c13..86ffb7930 100644 --- a/bbs/memo.php +++ b/bbs/memo.php @@ -15,8 +15,10 @@ if ($kind == 'recv') $unkind = 'send'; else if ($kind == 'send') $unkind = 'recv'; -else +else { + $kind = clean_xss_tags(trim($kind)); alert(''.$kind .'값을 넘겨주세요.'); +} if ($page < 1) { $page = 1; } // 페이지가 없으면 첫 페이지 (1 페이지) From 20c94e5b0af4bb4fa46972f57815857c904fb694 Mon Sep 17 00:00:00 2001 From: kagla Date: Tue, 14 Dec 2021 16:10:41 +0900 Subject: [PATCH 2/2] =?UTF-8?q?[=EB=B3=B4=EC=95=88=ED=8C=A8=EC=B9=98]=20$k?= =?UTF-8?q?ind=20=EB=B3=80=EC=88=98=EB=A5=BC=20=EC=9D=B4=EC=9A=A9=ED=95=9C?= =?UTF-8?q?=20XSS=20=EC=B7=A8=EC=95=BD=EC=A0=90=20=EC=88=98=EC=A0=95=20(Po?= =?UTF-8?q?cas=EB=8B=98,211214)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- bbs/memo.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/bbs/memo.php b/bbs/memo.php index 8dc446c13..86ffb7930 100644 --- a/bbs/memo.php +++ b/bbs/memo.php @@ -15,8 +15,10 @@ if ($kind == 'recv') $unkind = 'send'; else if ($kind == 'send') $unkind = 'recv'; -else +else { + $kind = clean_xss_tags(trim($kind)); alert(''.$kind .'값을 넘겨주세요.'); +} if ($page < 1) { $page = 1; } // 페이지가 없으면 첫 페이지 (1 페이지)