XSS 대응 코드 추가

2014-10-17 14:04:51 +09:00
parent 31bdd584e4
commit c3390ef902
8 changed files with 8 additions and 8 deletions
--- a/shop/itemrecommendmail.php
+++ b/shop/itemrecommendmail.php
@ -36,7 +36,7 @@ if (!$it['it_id'])
 $subject = stripslashes($subject);
 $content = nl2br(stripslashes($content));

-$from_name = $member['mb_name'];
+$from_name = get_text($member['mb_name']);
 $from_email = $member['mb_email'];
 $it_id = $it['it_id'];
 $it_name = $it['it_name'];