XSS 취약점, 새 우편번호, 기타 오류 수정

2015-07-20 11:40:09 +09:00
parent 2ccc407397
commit a52858fc6d
25 changed files with 73 additions and 60 deletions
--- a/bbs/alert.php
+++ b/bbs/alert.php
@ -30,7 +30,8 @@ include_once(G5_PATH.'/head.sub.php');

 $msg2 = str_replace("\\n", "<br>", $msg);

-if (!$url) $url = $_SERVER['HTTP_REFERER'];
+$url = clean_xss_tags($url);
+if (!$url) $url = clean_xss_tags($_SERVER['HTTP_REFERER']);

 // url 체크
 check_url_host($url);