sca 필터링 코드 추가

2016-01-12 09:59:04 +09:00
parent 5111f026e6
commit 92210edc16
1 changed files with 3 additions and 1 deletions
--- a/common.php
+++ b/common.php
@ -227,8 +227,10 @@ $qstr = '';

 if (isset($_REQUEST['sca']))  {
    $sca = clean_xss_tags(trim($_REQUEST['sca']));
-    if ($sca)
+    if ($sca) {
+        $sca = preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\s]/", "", $sca);
        $qstr .= '&amp;sca=' . urlencode($sca);
+    }
 } else {
    $sca = '';
 }