그누보드 5.0.40 수정내역 적용 및 XSS 취약점 수정

2015-07-13 13:43:46 +09:00
parent 3bbbe96319
commit d5bd57cdfa
4 changed files with 5 additions and 9 deletions
--- a/lib/common.lib.php
+++ b/lib/common.lib.php
@ -2367,12 +2367,8 @@ function hyphen_hp_number($hp)
 function login_url($url='')
 {
    if (!$url) $url = G5_URL;
-    /*
-    $p = parse_url($url);
-    echo urlencode($_SERVER['REQUEST_URI']);
-    return $url.urldecode(preg_replace("/^".urlencode($p['path'])."/", "", urlencode($_SERVER['REQUEST_URI'])));
-    */
-    return $url;
+
+    return urlencode(clean_xss_tags(urldecode($url)));
 }