XSS 대응 코드 추가

2014-10-17 14:04:51 +09:00
parent 31bdd584e4
commit c3390ef902
8 changed files with 8 additions and 8 deletions
--- a/shop/itemqaformupdate.php
+++ b/shop/itemqaformupdate.php
@ -12,7 +12,7 @@ $iq_answer = trim($_POST['iq_answer']);
 $hash = trim($_REQUEST['hash']);

 if ($w == "" || $w == "u") {
-    $iq_name     = $member['mb_name'];
+    $iq_name     = addslashes($member['mb_name']);
    $iq_password = $member['mb_password'];

    if (!$iq_subject) alert("제목을 입력하여 주십시오.");