영카트 Reflected XSS 취약점 (17-0924) 수정

2017-12-18 15:46:07 +09:00
parent ab350d99df
commit 8e60ef0546
1 changed files with 2 additions and 0 deletions
--- a/shop/orderinquiryview.php
+++ b/shop/orderinquiryview.php
@ -1,6 +1,8 @@
 <?php
 include_once('./_common.php');

+$od_id = isset($od_id) ? preg_replace('/[^A-Za-z0-9\-_]/', '', strip_tags($od_id)) : 0;
+
 if( isset($_GET['ini_noti']) && !isset($_GET['uid']) ){
    goto_url(G5_SHOP_URL.'/orderinquiry.php');
 }