firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

취약점 [KVE-18-339] 수정

Browse Source
This commit is contained in:
thisgun
2018-07-03 15:29:06 +09:00
parent 12ad5e9cb5
commit c6f28c120c
4 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
adm/faqlist.php
View File

@ -5,7 +5,13 @@ include_once('./_common.php');
auth_check($auth[$sub_menu], "r"); auth_check($auth[$sub_menu], "r");
$g5['title'] = 'FAQ 상세관리'; $g5['title'] = 'FAQ 상세관리';
if ($fm_subject) $g5['title'] .= ' : '.$fm_subject; if ($fm_subject){
$fm_subject = clean_xss_tags(strip_tags($fm_subject));
$g5['title'] .= ' : '.$fm_subject;
}
$fm_id = (int) $fm_id;
include_once (G5_ADMIN_PATH.'/admin.head.php'); include_once (G5_ADMIN_PATH.'/admin.head.php');
$sql = " select * from {$g5['faq_master_table']} where fm_id = '$fm_id' "; $sql = " select * from {$g5['faq_master_table']} where fm_id = '$fm_id' ";

2
adm/popular_list.php
View File

@ -7,7 +7,7 @@ auth_check($auth[$sub_menu], 'r');
// 체크된 자료 삭제 // 체크된 자료 삭제
if (isset($_POST['chk']) && is_array($_POST['chk'])) { if (isset($_POST['chk']) && is_array($_POST['chk'])) {
for ($i=0; $i<count($_POST['chk']); $i++) { for ($i=0; $i<count($_POST['chk']); $i++) {
$pp_id = $_POST['chk'][$i]; $pp_id = (int) $_POST['chk'][$i];
sql_query(" delete from {$g5['popular_table']} where pp_id = '$pp_id' ", true); sql_query(" delete from {$g5['popular_table']} where pp_id = '$pp_id' ", true);
} }

2
skin/member/basic/register_form.skin.php
View File

@ -200,7 +200,7 @@ add_stylesheet('<link rel="stylesheet" href="'.$member_skin_url.'/style.css">',
</span> </span>
<?php if ($w == 'u' && file_exists($mb_img_path)) { ?> <?php if ($w == 'u' && file_exists($mb_img_path)) { ?>
<img src="<?php echo $mb_img_url ?>" alt="회원아이콘"> <img src="<?php echo $mb_img_url ?>" alt="회원이미지">
<input type="checkbox" name="del_mb_img" value="1" id="del_mb_img"> <input type="checkbox" name="del_mb_img" value="1" id="del_mb_img">
<label for="del_mb_img">삭제</label> <label for="del_mb_img">삭제</label>
<?php } ?> <?php } ?>

2
theme/basic/skin/member/basic/register_form.skin.php
View File

@ -200,7 +200,7 @@ add_stylesheet('<link rel="stylesheet" href="'.$member_skin_url.'/style.css">',
</span> </span>
<?php if ($w == 'u' && file_exists($mb_img_path)) { ?> <?php if ($w == 'u' && file_exists($mb_img_path)) { ?>
<img src="<?php echo $mb_img_url ?>" alt="회원아이콘"> <img src="<?php echo $mb_img_url ?>" alt="회원이미지">
<input type="checkbox" name="del_mb_img" value="1" id="del_mb_img"> <input type="checkbox" name="del_mb_img" value="1" id="del_mb_img">
<label for="del_mb_img">삭제</label> <label for="del_mb_img">삭제</label>
<?php } ?> <?php } ?>