[KVE-1574,1575,1576,1577]영카트 XSS 취약점 수정

2020-02-13 13:48:58 +09:00
parent 7b220eaeb9
commit a47162dffa
9 changed files with 27 additions and 22 deletions
--- a/adm/shop_admin/bannerform.php
+++ b/adm/shop_admin/bannerform.php
@ -81,7 +81,7 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
        <th scope="row"><label for="bn_url">링크</label></th>
        <td>
            <?php echo help("배너클릭시 이동하는 주소입니다."); ?>
-            <input type="text" name="bn_url" size="80" value="<?php echo $bn['bn_url']; ?>" id="bn_url" class="frm_input">
+            <input type="text" name="bn_url" size="80" value="<?php echo get_sanitize_input($bn['bn_url']); ?>" id="bn_url" class="frm_input">
        </td>
    </tr>
    <tr>