diff --git a/bbs/formmail.php b/bbs/formmail.php index e5b69c93f..55a9847e5 100644 --- a/bbs/formmail.php +++ b/bbs/formmail.php @@ -31,7 +31,7 @@ include_once(G5_PATH.'/head.sub.php'); if (!$name) $name = base64_decode($email); else - $name = get_text(stripslashes($name)); + $name = get_text(stripslashes($name), true); if (!isset($type)) $type = 0; diff --git a/lib/common.lib.php b/lib/common.lib.php index 1c4bd1302..dc5a47563 100644 --- a/lib/common.lib.php +++ b/lib/common.lib.php @@ -383,8 +383,9 @@ function get_list($write_row, $board, $skin_url, $subject_len=40) $list['wr_homepage'] = get_text($list['wr_homepage']); $tmp_name = get_text(cut_str($list['wr_name'], $config['cf_cut_name'])); // 설정된 자리수 만큼만 이름 출력 + $tmp_name2 = cut_str($list['wr_name'], $config['cf_cut_name']); // 설정된 자리수 만큼만 이름 출력 if ($board['bo_use_sideview']) - $list['name'] = get_sideview($list['mb_id'], $tmp_name, $list['wr_email'], $list['wr_homepage']); + $list['name'] = get_sideview($list['mb_id'], $tmp_name2, $list['wr_email'], $list['wr_homepage']); else $list['name'] = ''.$tmp_name.''; @@ -1201,6 +1202,10 @@ function get_sideview($mb_id, $name='', $email='', $homepage='') $email = base64_encode($email); $homepage = set_http(clean_xss_tags($homepage)); + $name = get_text($name, true); + $email = get_text($email); + $homepage = get_text($homepage); + $tmp_name = ""; if ($mb_id) { //$tmp_name = "$name"; @@ -1235,10 +1240,6 @@ function get_sideview($mb_id, $name='', $email='', $homepage='') $title_mb_id = '[비회원]'; } - $name = get_text($name); - $email = get_text($email); - $homepage = get_text($homepage); - $str = "\n"; $str .= $tmp_name."\n"; @@ -1360,7 +1361,7 @@ function cut_str($str, $len, $suffix="…") // TEXT 형식으로 변환 -function get_text($str, $html=0) +function get_text($str, $html=0, $restore=false) { $source[] = "<"; $target[] = "<"; @@ -1371,7 +1372,8 @@ function get_text($str, $html=0) $source[] = "\'"; $target[] = "'"; - $str = str_replace($target, $source, $str); + if($restore) + $str = str_replace($target, $source, $str); // 3.31 // TEXT 출력일 경우 &   등의 코드를 정상으로 출력해 주기 위함