Merge branch 'g5'

2016-01-12 10:58:18 +09:00
parent 2ba2735346 92210edc16
commit d188205d30
1 changed files with 3 additions and 1 deletions
--- a/common.php
+++ b/common.php
@ -227,8 +227,10 @@ $qstr = '';

 if (isset($_REQUEST['sca']))  {
    $sca = clean_xss_tags(trim($_REQUEST['sca']));
-    if ($sca)
+    if ($sca) {
+        $sca = preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\s]/", "", $sca);
        $qstr .= '&amp;sca=' . urlencode($sca);
+    }
 } else {
    $sca = '';
 }