[KVE-2019-1582,1590,1594]영카트XSS취약점 수정

2020-02-12 12:17:36 +09:00
parent e40105045a
commit 7b220eaeb9
4 changed files with 4 additions and 4 deletions
--- a/adm/shop_admin/couponform.php
+++ b/adm/shop_admin/couponform.php
@ -52,7 +52,7 @@ include_once(G5_PLUGIN_PATH.'/jquery-ui/datepicker.php');
    <tr>
        <th scope="row"><label for="cp_subject">쿠폰이름</label></th>
        <td>
-            <input type="text" name="cp_subject" value="<?php echo stripslashes($cp['cp_subject']); ?>" id="cp_subject" required class="required frm_input" size="50">
+            <input type="text" name="cp_subject" value="<?php echo get_sanitize_input($cp['cp_subject']); ?>" id="cp_subject" required class="required frm_input" size="50">
        </td>
    </tr>
    <tr>