diff --git a/lib/common.lib.php b/lib/common.lib.php index df4ba0736..087875e32 100644 --- a/lib/common.lib.php +++ b/lib/common.lib.php @@ -2047,16 +2047,15 @@ function bad_tag_convert($code) if ($is_admin && $member['mb_id'] !== $view['mb_id']) { //$code = preg_replace_callback("#(\<(embed|object)[^\>]*)\>(\<\/(embed|object)\>)?#i", // embed 또는 object 태그를 막지 않는 경우 필터링이 되도록 수정 - $code = preg_replace_callback("#(\<(embed|object)[^\>]*)\>?(\<\/(embed|object)\>)?#i", - function($matches) { - return "
"; - }, - $code); + $code = preg_replace_callback("#(\<(embed|object)[^\>]*)\>?(\<\/(embed|object)\>)?#i", '_callback_bad_tag_convert', $code); } return preg_replace("/\<([\/]?)(script|iframe|form)([^\>]*)\>?/i", "<$1$2$3>", $code); } +function _callback_bad_tag_convert($matches){ + return ""; +} // 토큰 생성 function _token() diff --git a/mobile/newwin.inc.php b/mobile/newwin.inc.php index bfd3eadfc..4e1c051fc 100644 --- a/mobile/newwin.inc.php +++ b/mobile/newwin.inc.php @@ -16,7 +16,7 @@ $result = sql_query($sql, false); for ($i=0; $nw=sql_fetch_array($result); $i++) { // 이미 체크 되었다면 Continue - if ($_COOKIE["hd_pops_{$nw['nw_id']}"]) + if (isset($_COOKIE["hd_pops_{$nw['nw_id']}"]) && $_COOKIE["hd_pops_{$nw['nw_id']}"]) continue; ?>