firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

영카트 다중 취약점( 17-0556 ) 수정

Browse Source
This commit is contained in:
thisgun
2017-09-06 17:08:05 +09:00
parent d1cf765d9e
commit a431225576
2 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
adm/shop_admin/bannerformupdate.php
View File

@ -17,6 +17,8 @@ check_admin_token();
$bn_bimg = $_FILES['bn_bimg']['tmp_name']; $bn_bimg = $_FILES['bn_bimg']['tmp_name'];
$bn_bimg_name = $_FILES['bn_bimg']['name']; $bn_bimg_name = $_FILES['bn_bimg']['name'];
$bn_id = (int) $bn_id;
if ($bn_bimg_del) @unlink(G5_DATA_PATH."/banner/$bn_id"); if ($bn_bimg_del) @unlink(G5_DATA_PATH."/banner/$bn_id");
//파일이 이미지인지 체크합니다. //파일이 이미지인지 체크합니다.

3
adm/shop_admin/itemsellrank.php
View File

@ -16,6 +16,9 @@ if ($sort2 == "" || $sort2 != "asc") $sort2 = "desc";
$doc = strip_tags($doc); $doc = strip_tags($doc);
$sort1 = strip_tags($sort1); $sort1 = strip_tags($sort1);
if( preg_match("/[^0-9]/", $fr_date) ) $fr_date = '';
if( preg_match("/[^0-9]/", $to_date) ) $to_date = '';
$sql = " select a.it_id, $sql = " select a.it_id,
b.*, b.*,
SUM(IF(ct_status = '쇼핑',ct_qty, 0)) as ct_status_1, SUM(IF(ct_status = '쇼핑',ct_qty, 0)) as ct_status_1,