그누보드 Reflected XSS 취약점 (891, 906, 908, 910) 수정

2017-12-11 17:52:20 +09:00
parent 8755c8ece7
commit 7f9664af0a
4 changed files with 20 additions and 9 deletions
--- a/adm/sms_admin/form_update.php
+++ b/adm/sms_admin/form_update.php
@ -4,6 +4,9 @@ include_once("./_common.php");

 auth_check($auth[$sub_menu], "w");

+$fo_name = isset($fo_name) ? strip_tags($fo_name) : '';
+$fo_content = isset($fo_content) ? strip_tags($fo_content) : '';
+
 $g5['title'] = "이모티콘 업데이트";

 if ($w == 'u') // 업데이트