XSS 취약점 및 기타 오류 수정

2015-07-27 14:08:23 +09:00
parent faed6ac09a
commit d49200c99e
4 changed files with 4 additions and 4 deletions
--- a/bbs/password.php
+++ b/bbs/password.php
@ -51,7 +51,7 @@ $sql = " select wr_subject from {$write_table}
                      and wr_is_comment = 0 ";
 $row = sql_fetch($sql);

-$g5['title'] = $row['wr_subject'];
+$g5['title'] = get_text($row['wr_subject']);

 include_once($member_skin_path.'/password.skin.php');