From 743c206bc79713d57ea1c83929971bcd718daae8 Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Fri, 17 Oct 2014 13:49:04 +0900
Subject: [PATCH] =?UTF-8?q?=EC=98=AC=EB=B0=94=EB=A5=B4=EC=A7=80=20?=
 =?UTF-8?q?=EC=95=8A=EC=9D=80=20=EC=9D=B4=EB=A6=84=EC=9E=85=EB=A0=A5?=
 =?UTF-8?q?=EC=9C=BC=EB=A1=9C=20=EC=9D=B8=ED=95=9C=20sms5=20=ED=8E=98?=
 =?UTF-8?q?=EC=9D=B4=EC=A7=80=20=EC=98=A4=EB=A5=98=20=EC=BD=94=EB=93=9C=20?=
 =?UTF-8?q?=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/sms_admin/ajax.sms_write_person.php | 6 +++---
 adm/sms_admin/member_update_run.php     | 2 +-
 adm/sms_admin/num_book.php              | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/adm/sms_admin/ajax.sms_write_person.php b/adm/sms_admin/ajax.sms_write_person.php
index 686f4a8fa..d30820d19 100644
--- a/adm/sms_admin/ajax.sms_write_person.php
+++ b/adm/sms_admin/ajax.sms_write_person.php
@@ -106,16 +106,16 @@ while ($res = sql_fetch_array($qry)) array_push($group, $res);
     ?>
     <tr class="<?php echo $bg; ?>">
         <td class="td_chk">
-            <label for="bk_no_<?php echo $res['bk_no']; ?>" class="sound_only"><?php echo $res['bk_name']?></label>
+            <label for="bk_no_<?php echo $res['bk_no']; ?>" class="sound_only"><?php echo get_text($res['bk_name']) ?></label>
             <input type="checkbox" name="bk_no" value="<?php echo $res['bk_no']?>" id="bk_no_<?php echo $res['bk_no']; ?>">
         </td>
         <!-- <td class="td_name"><?php echo $group_name?></td> -->
-        <td class="td_mbname"><?php echo $res['bk_name']?></td>
+        <td class="td_mbname"><?php echo get_text($res['bk_name']) ?></td>
         <td><?php echo $res['bk_hp']?></td>
         <!-- <td class="td_boolean"><?php echo $res['bk_receipt'] ? '수신' : '거부'?></td> -->
         <!-- <td class="td_boolean"><?php echo $res['bk_receipt'] ? '예' : ''?></td> -->
         <td class="td_boolean"><?php echo $res['mb_id'] ? '회원' : '비회원'?></td>
-        <td class="td_mngsmall"><button type="button" class="btn_frmline" onclick="sms_obj.person_add(<?php echo $res['bk_no']?>, '<?php echo $res['bk_name']?>', '<?php echo $res['bk_hp']?>')">추가</button></td>
+        <td class="td_mngsmall"><button type="button" class="btn_frmline" onclick="sms_obj.person_add(<?php echo $res['bk_no']?>, '<?php echo get_text($res['bk_name']) ?>', '<?php echo $res['bk_hp']?>')">추가</button></td>
     </tr>
     <?php } ?>
     </tbody>
diff --git a/adm/sms_admin/member_update_run.php b/adm/sms_admin/member_update_run.php
index 41467cd53..94efc229c 100644
--- a/adm/sms_admin/member_update_run.php
+++ b/adm/sms_admin/member_update_run.php
@@ -48,7 +48,7 @@ while ($res = sql_fetch_array($qry))
 
     if ($hp == '') $bk_receipt = 0; else $bk_receipt = $res['mb_sms'];
 
-    $field = "mb_id='{$res['mb_id']}', bk_name='{$res['mb_name']}', bk_hp='{$hp}', bk_receipt='{$bk_receipt}', bk_datetime='".G5_TIME_YMDHIS."'";
+    $field = "mb_id='{$res['mb_id']}', bk_name='".addslashes($res['mb_name'])."', bk_hp='{$hp}', bk_receipt='{$bk_receipt}', bk_datetime='".G5_TIME_YMDHIS."'";
 
     $res2 = sql_fetch("select * from {$g5['sms5_book_table']} where mb_id='{$res['mb_id']}'");
     if ($res2) // 기존에 등록되어 있을 경우 업데이트
diff --git a/adm/sms_admin/num_book.php b/adm/sms_admin/num_book.php
index 0a7422410..1e31e18b5 100644
--- a/adm/sms_admin/num_book.php
+++ b/adm/sms_admin/num_book.php
@@ -181,12 +181,12 @@ function no_hp_click(val)
     ?>
     <tr class="<?php echo $bg; ?>">
         <td class="td_chk">
-            <label for="bk_no_<?php echo $i; ?>" class="sound_only"><?php echo $group_name?>의 <?php echo $res['bk_name']?></label>
+            <label for="bk_no_<?php echo $i; ?>" class="sound_only"><?php echo $group_name?>의 <?php echo get_text($res['bk_name']) ?></label>
             <input type="checkbox" name="bk_no[]" value="<?php echo $res['bk_no']?>" id="bk_no_<?php echo $i; ?>">
         </td>
         <td class="td_num"><?php echo number_format($vnum--)?></td>
         <td><?php echo $group_name?></td>
-        <td class="td_mbname"><?php echo $res['bk_name']?></td>
+        <td class="td_mbname"><?php echo get_text($res['bk_name']) ?></td>
         <td class="td_numbig"><?php echo $res['bk_hp']?></td>
         <td class="td_boolean"><?php echo $res['bk_receipt'] ? '<font color=blue>수신</font>' : '<font color=red>거부</font>'?></td>
         <td class="td_mbid"><?php echo $res['mb_id'] ? $res['mb_id'] : '비회원'?></td>