취약점 [KVE-18-339] 수정

2018-07-03 15:29:06 +09:00
parent 12ad5e9cb5
commit c6f28c120c
4 changed files with 10 additions and 4 deletions
--- a/adm/popular_list.php
+++ b/adm/popular_list.php
@ -7,7 +7,7 @@ auth_check($auth[$sub_menu], 'r');
 // 체크된 자료 삭제
 if (isset($_POST['chk']) && is_array($_POST['chk'])) {
    for ($i=0; $i<count($_POST['chk']); $i++) {
-        $pp_id = $_POST['chk'][$i];
+        $pp_id = (int) $_POST['chk'][$i];

        sql_query(" delete from {$g5['popular_table']} where pp_id = '$pp_id' ", true);
    }