원격코드 실행 취약점(17-00160) 수정

2017-03-14 12:30:58 +09:00
parent 20f658ffbb
commit c6425adffc
5 changed files with 26 additions and 2 deletions
--- a/bbs/board_head.php
+++ b/bbs/board_head.php
@ -7,7 +7,11 @@ if (G5_IS_MOBILE) {
    include_once(G5_BBS_PATH.'/_head.php');
    echo stripslashes($board['bo_mobile_content_head']);
 } else {
-    @include ($board['bo_include_head']);
+    if(is_include_path_check($board['bo_include_head'])) {  //파일경로 체크
+        @include ($board['bo_include_head']);
+    } else {    //파일경로가 올바르지 않으면 기본파일을 가져옴
+        include_once(G5_BBS_PATH.'/_head.php');
+    }
    echo stripslashes($board['bo_content_head']);
 }
 ?>