From 9e66c7c1e9c6c11388e30e3b5a5de65f8cf57f5b Mon Sep 17 00:00:00 2001
From: chicpro <chicpro@gmail.com>
Date: Mon, 28 Jan 2013 13:52:00 +0900
Subject: [PATCH 1/4] =?UTF-8?q?G4=20=EA=B2=BD=EB=A1=9C=20=EC=88=98?=
 =?UTF-8?q?=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 shop/list.sort.php         |  4 ++--
 shop/listcategory2.inc.php | 24 ++++++++++++------------
 shop/listcategory3.inc.php | 16 ++++++++--------
 3 files changed, 22 insertions(+), 22 deletions(-)

diff --git a/shop/list.sort.php b/shop/list.sort.php
index ed05031fa..2b9f3193c 100644
--- a/shop/list.sort.php
+++ b/shop/list.sort.php
@@ -1,5 +1,5 @@
 <?
-if (!defined("_GNUBOARD_")) exit; // 개별 페이지 접근 불가 
+if (!defined("_GNUBOARD_")) exit; // 개별 페이지 접근 불가
 ?>
 
 <br>
@@ -21,7 +21,7 @@ if (!defined("_GNUBOARD_")) exit; // 개별 페이지 접근 불가
         </select>
     </td>
 </tr>
-<tr><td colspan="2" background='<? echo "$g4[shop_img_path]/line_h.gif" ?>' height=1></td></tr>
+<tr><td colspan="2" background='<? echo G4_SHOP_IMG_URL."/line_h.gif" ?>' height=1></td></tr>
 </table>
 
 <script language='JavaScript'>
diff --git a/shop/listcategory2.inc.php b/shop/listcategory2.inc.php
index 0a57c1258..da0823df8 100644
--- a/shop/listcategory2.inc.php
+++ b/shop/listcategory2.inc.php
@@ -22,8 +22,8 @@ if (!$exists) {
                 and length(ca_id) = $len4 ";
     $row = sql_fetch($sql);
     $cnt = $row['cnt'];
-    if (!$cnt) 
-        $str .= "<tr><td width=11 background='$g4[shop_img_path]/ca_bg02.gif'></td><td>";
+    if (!$cnt)
+        $str .= "<tr><td width=11 background='".G4_SHOP_IMG_URL."/ca_bg02.gif'></td><td>";
 
     $sql = " select ca_id, ca_name from $g4[yc4_category_table]
               where ca_id like '$tmp_ca_id%'
@@ -36,7 +36,7 @@ if (!$exists) {
             $style = " class='accent' ";
 
         if ($cnt) {
-            $str .= "<tr><td width=11 background='$g4[shop_img_path]/ca_bg02.gif'></td>";
+            $str .= "<tr><td width=11 background='".G4_SHOP_IMG_URL."/ca_bg02.gif'></td>";
             $str .= "<td><table width=100% border=0><tr><td width=120><b>· <a href='./list.php?ca_id=$row[ca_id]'><span $style>$row[ca_name]</span></a></b></td>";
             $sql2 = " select ca_id, ca_name from $g4[yc4_category_table]
                        where ca_id like '$row[ca_id]%'
@@ -51,15 +51,15 @@ if (!$exists) {
                 $k++;
             }
             //if (!$k) $str .= "<td></td><td>";
-            $str .= "</td></tr></table></td><td width=11 background='$g4[shop_img_path]/ca_bg03.gif'></td>";
+            $str .= "</td></tr></table></td><td width=11 background='".G4_SHOP_IMG_URL."/ca_bg03.gif'></td>";
         } else {
             $str .= "<a href='./list.php?ca_id=$row[ca_id]'><span $style>$row[ca_name]</span></a> &nbsp; ";
         }
         $exists = true;
     }
 
-    if (!$cnt) 
-        $str .= "</td><td width=11 background='$g4[shop_img_path]/ca_bg03.gif'></td></tr>";
+    if (!$cnt)
+        $str .= "</td><td width=11 background='".G4_SHOP_IMG_URL."/ca_bg03.gif'></td></tr>";
 }
 
 
@@ -71,15 +71,15 @@ if ($exists) {
     <colgroup width=''>
     <colgroup width=11>
     <tr>
-        <td width=11><img src='$g4[shop_img_path]/ca_box01.gif'></td>
-        <td background='$g4[shop_img_path]/ca_bg01.gif'></td>
-        <td width=11><img src='$g4[shop_img_path]/ca_box02.gif'></td>
+        <td width=11><img src='".G4_SHOP_IMG_URL."/ca_box01.gif'></td>
+        <td background='".G4_SHOP_IMG_URL."/ca_bg01.gif'></td>
+        <td width=11><img src='".G4_SHOP_IMG_URL."/ca_box02.gif'></td>
     </tr>
     $str
     <tr>
-        <td width=11><img src='$g4[shop_img_path]/ca_box03.gif'></td>
-        <td background='$g4[shop_img_path]/ca_bg04.gif'></td>
-        <td width=11><img src='$g4[shop_img_path]/ca_box04.gif'></td>
+        <td width=11><img src='".G4_SHOP_IMG_URL."/ca_box03.gif'></td>
+        <td background='".G4_SHOP_IMG_URL."/ca_bg04.gif'></td>
+        <td width=11><img src='".G4_SHOP_IMG_URL."/ca_box04.gif'></td>
     </tr>
     </table><br>";
 }
diff --git a/shop/listcategory3.inc.php b/shop/listcategory3.inc.php
index aa3969db3..81f3cba3b 100644
--- a/shop/listcategory3.inc.php
+++ b/shop/listcategory3.inc.php
@@ -10,7 +10,7 @@ $sql = " select ca_id, ca_name from $g4[yc4_category_table]
             and ca_use = '1'
           order by ca_id ";
 $result = sql_query($sql);
-$str .= "<tr><td width=11 background='$g4[shop_img_path]/ca_bg02.gif'></td>";
+$str .= "<tr><td width=11 background='".G4_SHOP_IMG_URL."/ca_bg02.gif'></td>";
 $str .= "<td><table width=100% border=0><tr><td>";
 while ($row=sql_fetch_array($result)) {
     if (preg_match("/^$row[ca_id]/", $ca_id))
@@ -20,7 +20,7 @@ while ($row=sql_fetch_array($result)) {
     $str .= "<a href='./list.php?ca_id=$row[ca_id]'>{$span}$row[ca_name]</span></a> &nbsp; ";
     $exists = true;
 }
-$str .= "</td></tr></table></td><td width=11 background='$g4[shop_img_path]/ca_bg03.gif'></td>";
+$str .= "</td></tr></table></td><td width=11 background='".G4_SHOP_IMG_URL."/ca_bg03.gif'></td>";
 
 if ($exists) {
     echo "
@@ -30,15 +30,15 @@ if ($exists) {
     <colgroup width=''>
     <colgroup width=11>
     <tr>
-        <td width=11><img src='$g4[shop_img_path]/ca_box01.gif'></td>
-        <td background='$g4[shop_img_path]/ca_bg01.gif'></td>
-        <td width=11><img src='$g4[shop_img_path]/ca_box02.gif'></td>
+        <td width=11><img src='".G4_SHOP_IMG_URL."/ca_box01.gif'></td>
+        <td background='".G4_SHOP_IMG_URL."/ca_bg01.gif'></td>
+        <td width=11><img src='".G4_SHOP_IMG_URL."/ca_box02.gif'></td>
     </tr>
     $str
     <tr>
-        <td width=11><img src='$g4[shop_img_path]/ca_box03.gif'></td>
-        <td background='$g4[shop_img_path]/ca_bg04.gif'></td>
-        <td width=11><img src='$g4[shop_img_path]/ca_box04.gif'></td>
+        <td width=11><img src='".G4_SHOP_IMG_URL."/ca_box03.gif'></td>
+        <td background='".G4_SHOP_IMG_URL."/ca_bg04.gif'></td>
+        <td width=11><img src='".G4_SHOP_IMG_URL."/ca_box04.gif'></td>
     </tr>
     </table><br>";
 }

From 224f7ba5e8d4717610642ada1a2de5a5d7dedf8f Mon Sep 17 00:00:00 2001
From: chicpro <chicpro@gmail.com>
Date: Mon, 28 Jan 2013 13:56:54 +0900
Subject: [PATCH 2/4] =?UTF-8?q?https=5Furl=20=EA=B2=BD=EB=A1=9C=20?=
 =?UTF-8?q?=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bbs/login.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/bbs/login.php b/bbs/login.php
index 69ee0530b..9a7691146 100644
--- a/bbs/login.php
+++ b/bbs/login.php
@@ -5,7 +5,7 @@ $g4['title'] = '로그인';
 include_once('./_head.sub.php');
 
 $p = parse_url($url);
-if ((isset($p['scheme']) && $p['scheme']) || 
+if ((isset($p['scheme']) && $p['scheme']) ||
     (isset($p['host']) && $p['host'])) {
     alert('url에 도메인을 지정할 수 없습니다.');
 }
@@ -43,10 +43,10 @@ if ($g4['https_url']) {
     $login_url = $urlencode;
 }
 
-if ($g4['https_url'])
-    $login_action_url = "{$g4['https_url']}/$g4[bbs]/login_check.php";
+if (G4_HTTPS_URL)
+    $login_action_url = G4_HTTPS_URL."/$g4[bbs]/login_check.php";
 else
-    $login_action_url = "{$g4['bbs_url']}/login_check.php";
+    $login_action_url = G4_BBS_URL."/login_check.php";
 
 // 로그인 스킨이 없는 경우 관리자 페이지 접속이 안되는 것을 막기 위하여 기본 스킨으로 대체
 $login_file = $member_skin_path.'/login.skin.php';

From bcf53c2e92ce250f6d1a3b67ce13ee77741d0257 Mon Sep 17 00:00:00 2001
From: gnuboard <kagla@naver.com>
Date: Mon, 28 Jan 2013 14:08:37 +0900
Subject: [PATCH 3/4] =?UTF-8?q?search.php=20=EA=B2=BD=EB=A1=9C=20=EA=B9=A8?=
 =?UTF-8?q?=EC=A7=90=20=ED=98=84=EC=83=81=20=ED=95=B4=EA=B2=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 head.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/head.php b/head.php
index 87fa70950..b3c0d2353 100644
--- a/head.php
+++ b/head.php
@@ -34,7 +34,7 @@ include_once(G4_LIB_PATH.'/popular.lib.php');
 
         <fieldset id="schall">
             <legend>사이트 내 전체검색</legend>
-            <form name="fsearchbox" method="get" action="<?=G4_BBS_URL?>./search.php" onsubmit="return fsearchbox_submit(this);">
+            <form name="fsearchbox" method="get" action="<?=G4_BBS_URL?>/search.php" onsubmit="return fsearchbox_submit(this);">
             <input type="hidden" name="sfl" value="wr_subject||wr_content">
             <input type="hidden" name="sop" value="and">
             <input type="text" id="schall_stx" name="stx" title="검색어" maxlength="20">

From d8a0edcb573561cfc25ab66d5a1e2824bb8e862b Mon Sep 17 00:00:00 2001
From: gnuboard <kagla@naver.com>
Date: Mon, 28 Jan 2013 14:10:59 +0900
Subject: [PATCH 4/4] =?UTF-8?q?=EC=A0=84=EC=B2=B4=EA=B2=80=EC=83=89=20?=
 =?UTF-8?q?=EA=B2=B0=EA=B3=BC=EC=97=90=EC=84=9C=20HTML=20tag=20=EC=A0=9C?=
 =?UTF-8?q?=EA=B1=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bbs/search.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bbs/search.php b/bbs/search.php
index 410e022b8..8ff0e2c5b 100644
--- a/bbs/search.php
+++ b/bbs/search.php
@@ -187,7 +187,7 @@ if ($stx) {
 
             if ($read_level[$idx] <= $member['mb_level'])
             {
-                $content = cut_str(get_text($row['wr_content']),300,"…");
+                $content = cut_str(get_text(strip_tags($row['wr_content'])),300,"…");
                 if (strstr($sfl, 'wr_content')) 
                     $content = search_font($stx, $content);
             }