From 918663a7e2d944bfd40956e61ef11d9cac90f8fb Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Mon, 26 Nov 2018 15:11:19 +0900
Subject: [PATCH 1/2] =?UTF-8?q?=EB=B4=87=EC=9D=98=20=EB=A9=94=EC=9D=BC=20?=
 =?UTF-8?q?=EB=A7=81=ED=81=AC=20=ED=81=AC=EB=A1=A4=EB=A7=81=20=EB=B0=A9?=
 =?UTF-8?q?=EC=A7=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bbs/email_certify.php         |  3 +++
 bbs/password_lost_certify.php |  3 +++
 lib/common.lib.php            | 21 +++++++++++++++++++++
 3 files changed, 27 insertions(+)

diff --git a/bbs/email_certify.php b/bbs/email_certify.php
index 2fc735b32..83465e706 100644
--- a/bbs/email_certify.php
+++ b/bbs/email_certify.php
@@ -1,6 +1,9 @@
 <?php
 include_once('./_common.php');
 
+// 봇의 메일 링크 크롤링을 방지합니다.
+if(function_exists('check_mail_bot')){ check_mail_bot($_SERVER['REMOTE_ADDR']); }
+
 $mb_id  = trim($_GET['mb_id']);
 $mb_md5 = trim($_GET['mb_md5']);
 
diff --git a/bbs/password_lost_certify.php b/bbs/password_lost_certify.php
index 5307a7197..71c0116b1 100644
--- a/bbs/password_lost_certify.php
+++ b/bbs/password_lost_certify.php
@@ -1,6 +1,9 @@
 <?php
 include_once('./_common.php');
 
+// 봇의 메일 링크 크롤링을 방지합니다.
+if(function_exists('check_mail_bot')){ check_mail_bot($_SERVER['REMOTE_ADDR']); }
+
 // 오류시 공히 Error 라고 처리하는 것은 회원정보가 있는지? 비밀번호가 틀린지? 를 알아보려는 해킹에 대비한것
 
 $mb_no = trim($_GET['mb_no']);
diff --git a/lib/common.lib.php b/lib/common.lib.php
index 5391220b6..c07a23194 100644
--- a/lib/common.lib.php
+++ b/lib/common.lib.php
@@ -3434,6 +3434,27 @@ function get_real_client_ip(){
     return preg_replace('/[^0-9.]/', '', $real_ip);
 }
 
+function check_mail_bot($ip=''){
+
+    //아이피를 체크하여 메일 크롤링을 방지합니다.
+    $check_ips = array('211.249.40.');
+    $bot_message = 'bot 으로 판단되어 중지합니다.';
+    
+    if($ip){
+        foreach( $check_ips as $c_ip ){
+            if( preg_match('/^'.preg_quote($c_ip).'/', $ip) ) {
+                die($bot_message);
+            }
+        }
+    }
+
+    // user agent를 체크하여 메일 크롤링을 방지합니다.
+    $user_agent = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : '';
+    if ($user_agent === 'Carbon' || strpos($user_agent, 'BingPreview') !== false || strpos($user_agent, 'Slackbot') !== false) { 
+        die($bot_message);
+    } 
+}
+
 function get_call_func_cache($func, $args=array()){
     
     static $cache = array();

From 70d48e4d5a4ca634bda2ba7095a6207ec1ccf5a8 Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Mon, 26 Nov 2018 15:11:44 +0900
Subject: [PATCH 2/2] =?UTF-8?q?5.3.2.1=20=EB=B2=84=EC=A0=84=20=EC=88=98?=
 =?UTF-8?q?=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 config.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config.php b/config.php
index 4b7987a60..802cde66d 100644
--- a/config.php
+++ b/config.php
@@ -5,7 +5,7 @@
 ********************/
 
 define('G5_VERSION', '그누보드5');
-define('G5_GNUBOARD_VER', '5.3.2.0');
+define('G5_GNUBOARD_VER', '5.3.2.1');
 
 // 이 상수가 정의되지 않으면 각각의 개별 페이지는 별도로 실행될 수 없음
 define('_GNUBOARD_', true);