XSS 대응 코드 추가

2014-10-17 14:04:51 +09:00
parent 31bdd584e4
commit c3390ef902
8 changed files with 8 additions and 8 deletions
--- a/adm/shop_admin/couponmember.php
+++ b/adm/shop_admin/couponmember.php
@ -59,7 +59,7 @@ $qstr1 = 'mb_name='.$_GET['mb_name'];
        for($i=0; $row=sql_fetch_array($result); $i++) {
        ?>
        <tr>
-            <td class="td_mbname"><?php echo $row['mb_name']; ?></td>
+            <td class="td_mbname"><?php echo get_text($row['mb_name']); ?></td>
            <td><?php echo $row['mb_id']; ?></td>
            <td class="scp_find_select"><button type="button" class="btn_frmline" onclick="sel_member_id('<?php echo $row['mb_id']; ?>');">선택</button></td>
        </tr>