취약점 수정 Some security vulnerabilities #43

2019-05-29 09:58:04 +09:00
parent 166727879a
commit b1ac49a738
3 changed files with 4 additions and 2 deletions
--- a/bbs/login.php
+++ b/bbs/login.php
@ -8,7 +8,7 @@ if( function_exists('social_check_login_before') ){
 $g5['title'] = '로그인';
 include_once('./_head.sub.php');

-$url = $_GET['url'];
+$url = strip_tags($_GET['url']);

 // url 체크
 check_url_host($url);