XSS 취약점 수정

2018-08-22 14:02:14 +09:00
parent ac5d6a4be7
commit b1fc952c76
12 changed files with 26 additions and 13 deletions
--- a/adm/contentformupdate.php
+++ b/adm/contentformupdate.php
@ -20,6 +20,7 @@ if ($w == "" || $w == "u")
    $co_row = sql_fetch($sql);
 }

+$co_subject = strip_tags($co_subject);
 $co_include_head = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($co_include_head, 0, 255));
 $co_include_tail = preg_replace(array("#[\\\]+$#", "#(<\?php|<\?)#i"), "", substr($co_include_tail, 0, 255));