XSS 대응 코드 추가

2014-10-17 14:04:51 +09:00
parent 31bdd584e4
commit c3390ef902
8 changed files with 8 additions and 8 deletions
--- a/adm/shop_admin/itemqaform.php
+++ b/adm/shop_admin/itemqaform.php
@ -12,7 +12,7 @@ $sql = " select *
 $iq = sql_fetch($sql);
 if (!$iq['iq_id']) alert('등록된 자료가 없습니다.');

-$name = get_sideview($is['mb_id'], $iq['iq_name'], $is['mb_email'], $is['mb_homepage']);
+$name = get_sideview($is['mb_id'], get_text($iq['iq_name']), $is['mb_email'], $is['mb_homepage']);

 $g5['title'] = '상품문의';
 include_once (G5_ADMIN_PATH.'/admin.head.php');