그누보드4 보안패치 일괄 적용

2013-03-20 15:53:44 +09:00
parent 6180493eb6
commit b072f9fe23
7 changed files with 1578 additions and 1436 deletions
--- a/common.php
+++ b/common.php
@ -212,6 +212,7 @@ if (isset($_REQUEST['sca']))  {

 if (isset($_REQUEST['sfl']))  {
    $sfl = escape_trim($_REQUEST['sfl']);
+    $sfl = preg_replace("/[\<\>\'\"\%\=\(\)\s]/", "", $sfl);
    if ($sfl)
        $qstr .= '&amp;sfl=' . urlencode($sfl); // search field (검색 필드)
 } else {