firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

PHP_SELF 를 이용한 XSS 취약점 수정

Browse Source
This commit is contained in:
chicpro
2015-06-23 11:01:07 +09:00
parent cbe9c53262
commit b4b24aadfd
3 changed files with 39 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
lib/common.lib.php
View File

@ -2881,7 +2881,7 @@ function clean_query_string($query, $amp=true)
$q = array(); $q = array();
foreach($out as $key=>$val) { foreach($out as $key=>$val) {
$key = trim($key); $key = strip_tags(trim($key));
$val = trim($val); $val = trim($val);
switch($key) { switch($key) {
@ -2953,4 +2953,38 @@ function clean_query_string($query, $amp=true)
return $str; return $str;
} }
function get_device_change_url()
{
$p = parse_url(G5_URL);
$href = $p['scheme'].'://'.$p['host'];
if(isset($p['port']) && $p['port'])
$href .= ':'.$p['port'];
$href .= $_SERVER['SCRIPT_NAME'];
$q = array();
$device = 'device='.(G5_IS_MOBILE ? 'pc' : 'mobile');
if($_SERVER['QUERY_STRING']) {
foreach($_GET as $key=>$val) {
if($key == 'device')
continue;
$key = strip_tags($key);
$val = strip_tags($val);
if($key && $val)
$q[$key] = $val;
}
}
if(!empty($q)) {
$query = http_build_query($q, '', '&');
$href .= '?'.$query.'&'.$device;
} else {
$href .= '?'.$device;
}
return $href;
}
?> ?>

26
mobile/tail.php
View File

@ -25,30 +25,8 @@ if (!defined('_GNUBOARD_')) exit; // 개별 페이지 접근 불가
</div> </div>
<?php <?php
if(G5_DEVICE_BUTTON_DISPLAY && G5_IS_MOBILE) { if(G5_DEVICE_BUTTON_DISPLAY && G5_IS_MOBILE) { ?>
$seq = 0; <a href="<?php echo get_device_change_url(); ?>" id="device_change">PC 버전으로 보기</a>
$p = parse_url(G5_URL);
$href = $p['scheme'].'://'.$p['host'];
if(isset($p['port']) && $p['port'])
$href .= ':'.$p['port'];
$href .= $_SERVER['PHP_SELF'];
if($_SERVER['QUERY_STRING']) {
$sep = '?';
foreach($_GET as $key=>$val) {
if($key == 'device')
continue;
$href .= $sep.$key.'='.$val;
$sep = '&amp;';
$seq++;
}
}
if($seq)
$href .= '&amp;device=pc';
else
$href .= '?device=pc';
?>
<a href="<?php echo $href; ?>" id="device_change">PC 버전으로 보기</a>
<?php <?php
} }

26
tail.php
View File

@ -38,30 +38,8 @@ if (G5_IS_MOBILE) {
</div> </div>
<?php <?php
if(G5_DEVICE_BUTTON_DISPLAY && !G5_IS_MOBILE) { if(G5_DEVICE_BUTTON_DISPLAY && !G5_IS_MOBILE) { ?>
$seq = 0; <a href="<?php echo get_device_change_url(); ?>" id="device_change">모바일 버전으로 보기</a>
$p = parse_url(G5_URL);
$href = $p['scheme'].'://'.$p['host'];
if(isset($p['port']) && $p['port'])
$href .= ':'.$p['port'];
$href .= $_SERVER['PHP_SELF'];
if($_SERVER['QUERY_STRING']) {
$sep = '?';
foreach($_GET as $key=>$val) {
if($key == 'device')
continue;
$href .= $sep.$key.'='.strip_tags($val);
$sep = '&amp;';
$seq++;
}
}
if($seq)
$href .= '&amp;device=mobile';
else
$href .= '?device=mobile';
?>
<a href="<?php echo $href; ?>" id="device_change">모바일 버전으로 보기</a>
<?php <?php
} }