From af3da468ee913d75094df1db3d17466aeb8e5766 Mon Sep 17 00:00:00 2001
From: chicpro <chicpro@gmail.com>
Date: Wed, 17 Dec 2014 09:54:42 +0900
Subject: [PATCH] =?UTF-8?q?=EA=B2=8C=EC=8B=9C=EA=B8=80=20=EB=B3=B5?=
 =?UTF-8?q?=EC=82=AC=20=EB=95=8C=20=EB=94=B0=EC=98=B4=ED=91=9C=EB=A1=9C=20?=
 =?UTF-8?q?=EC=9D=B8=ED=95=B4=20=EB=B0=9C=EC=83=9D=ED=95=98=EB=8A=94=20?=
 =?UTF-8?q?=EC=98=A4=EB=A5=98=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/board_copy_update.php | 4 ++--
 bbs/move_update.php       | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/adm/board_copy_update.php b/adm/board_copy_update.php
index feaf3093e..a349e7d7a 100644
--- a/adm/board_copy_update.php
+++ b/adm/board_copy_update.php
@@ -180,10 +180,10 @@ if (count($file_copy)) {
                     set bo_table = '$target_table',
                          wr_id = '{$file_copy[$i]['wr_id']}',
                          bf_no = '{$file_copy[$i]['bf_no']}',
-                         bf_source = '{$file_copy[$i]['bf_source']}',
+                         bf_source = '".addslashes($file_copy[$i]['bf_source'])."',
                          bf_file = '{$file_copy[$i]['bf_file']}',
                          bf_download = '{$file_copy[$i]['bf_download']}',
-                         bf_content = '{$file_copy[$i]['bf_content']}',
+                         bf_content = '".addslashes($file_copy[$i]['bf_content'])."',
                          bf_filesize = '{$file_copy[$i]['bf_filesize']}',
                          bf_width = '{$file_copy[$i]['bf_width']}',
                          bf_height = '{$file_copy[$i]['bf_height']}',
diff --git a/bbs/move_update.php b/bbs/move_update.php
index 11fff763d..41b7fd4a3 100644
--- a/bbs/move_update.php
+++ b/bbs/move_update.php
@@ -121,7 +121,7 @@ while ($row = sql_fetch_array($result))
                                 set bo_table = '$move_bo_table',
                                      wr_id = '$insert_id',
                                      bf_no = '{$row3['bf_no']}',
-                                     bf_source = '{$row3['bf_source']}',
+                                     bf_source = '".addslashes($row3['bf_source'])."',
                                      bf_file = '{$row3['bf_file']}',
                                      bf_download = '{$row3['bf_download']}',
                                      bf_content = '".addslashes($row3['bf_content'])."',