XSS 및 SQL Injection 보안 취약점 수정

2014-07-31 17:01:06 +09:00
parent 0742c5f81b
commit 79d7a690f4
8 changed files with 26 additions and 8 deletions
--- a/bbs/write.php
+++ b/bbs/write.php
@ -319,7 +319,7 @@ if ($w == '') {
    }

    $name = get_text(cut_str($write['wr_name'],20));
-    $email = $write['wr_email'];
+    $email = get_email_address($write['wr_email']);
    $homepage = get_text($write['wr_homepage']);

    for ($i=1; $i<=G5_LINK_COUNT; $i++) {