diff --git a/adm/board_copy_update.php b/adm/board_copy_update.php
index feaf3093e..a349e7d7a 100644
--- a/adm/board_copy_update.php
+++ b/adm/board_copy_update.php
@@ -180,10 +180,10 @@ if (count($file_copy)) {
                     set bo_table = '$target_table',
                          wr_id = '{$file_copy[$i]['wr_id']}',
                          bf_no = '{$file_copy[$i]['bf_no']}',
-                         bf_source = '{$file_copy[$i]['bf_source']}',
+                         bf_source = '".addslashes($file_copy[$i]['bf_source'])."',
                          bf_file = '{$file_copy[$i]['bf_file']}',
                          bf_download = '{$file_copy[$i]['bf_download']}',
-                         bf_content = '{$file_copy[$i]['bf_content']}',
+                         bf_content = '".addslashes($file_copy[$i]['bf_content'])."',
                          bf_filesize = '{$file_copy[$i]['bf_filesize']}',
                          bf_width = '{$file_copy[$i]['bf_width']}',
                          bf_height = '{$file_copy[$i]['bf_height']}',
diff --git a/bbs/move_update.php b/bbs/move_update.php
index 11fff763d..41b7fd4a3 100644
--- a/bbs/move_update.php
+++ b/bbs/move_update.php
@@ -121,7 +121,7 @@ while ($row = sql_fetch_array($result))
                                 set bo_table = '$move_bo_table',
                                      wr_id = '$insert_id',
                                      bf_no = '{$row3['bf_no']}',
-                                     bf_source = '{$row3['bf_source']}',
+                                     bf_source = '".addslashes($row3['bf_source'])."',
                                      bf_file = '{$row3['bf_file']}',
                                      bf_download = '{$row3['bf_download']}',
                                      bf_content = '".addslashes($row3['bf_content'])."',