옵션정보를 이용한 SQL Injection 취약점(16-682) 수정

2016-09-06 14:46:36 +09:00
parent 78a11a5230
commit 73bb020487
5 changed files with 19 additions and 12 deletions
--- a/shop.config.php
+++ b/shop.config.php
@ -65,6 +65,9 @@ if(!defined('_THEME_PREVIEW_')) {
    }
 }

+// 옵션 ID 특수문자 필터링 패턴
+define('G5_OPTION_ID_FILTER', '/[\'\"\\\'\\\"]/');
+
 /*
 // 주문상태 상수
 define('G5_OD_STATUS_ORDER'     , '입금확인중');