firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

그누보드 5.0.36 수정 내역 및 XSS 취약점 수정

Browse Source
This commit is contained in:
chicpro
2015-06-11 09:54:48 +09:00
parent 7110ccc12f
commit d5aca5ab93
12 changed files with 100 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
bbs/member_confirm.php
View File

@ -16,12 +16,8 @@ include_once('./_head.sub.php');
$url = $_GET['url'];
$p = parse_url($url);
if ((isset($p['scheme']) && $p['scheme']) || (isset($p['host']) && $p['host'])) {
//print_r2($p);
if ($p['host'].(isset($p['port']) ? ':'.$p['port'] : '') != $_SERVER['HTTP_HOST'])
alert('url에 타 도메인을 지정할 수 없습니다.');
}
// url 체크
check_url_host($url);
include_once($member_skin_path.'/member_confirm.skin.php');