firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

그누보드 5.0.40 수정내역 적용 및 XSS 취약점 수정

Browse Source
This commit is contained in:
chicpro
2015-07-13 13:43:46 +09:00
parent 3bbbe96319
commit d5bd57cdfa
4 changed files with 5 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
config.php
View File

@ -5,7 +5,7 @@
********************/ ********************/
define('G5_VERSION', '그누보드5'); define('G5_VERSION', '그누보드5');
define('G5_GNUBOARD_VER', '5.0.39'); define('G5_GNUBOARD_VER', '5.0.40');
// 이 상수가 정의되지 않으면 각각의 개별 페이지는 별도로 실행될 수 없음 // 이 상수가 정의되지 않으면 각각의 개별 페이지는 별도로 실행될 수 없음
define('_GNUBOARD_', true); define('_GNUBOARD_', true);

8
lib/common.lib.php
View File

@ -2367,12 +2367,8 @@ function hyphen_hp_number($hp)
function login_url($url='') function login_url($url='')
{ {
if (!$url) $url = G5_URL; if (!$url) $url = G5_URL;
/*
$p = parse_url($url); return urlencode(clean_xss_tags(urldecode($url)));
echo urlencode($_SERVER['REQUEST_URI']);
return $url.urldecode(preg_replace("/^".urlencode($p['path'])."/", "", urlencode($_SERVER['REQUEST_URI'])));
*/
return $url;
} }

2
mobile/skin/member/basic/login.skin.php
View File

@ -9,7 +9,7 @@ add_stylesheet('<link rel="stylesheet" href="'.$member_skin_url.'/style.css">',
<h1><?php echo $g5['title'] ?></h1> <h1><?php echo $g5['title'] ?></h1>
<form name="flogin" action="<?php echo $login_action_url ?>" onsubmit="return flogin_submit(this);" method="post"> <form name="flogin" action="<?php echo $login_action_url ?>" onsubmit="return flogin_submit(this);" method="post">
<input type="hidden" name="url" value='<?php echo $login_url ?>'> <input type="hidden" name="url" value="<?php echo $login_url ?>">
<div id="login_frm"> <div id="login_frm">
<label for="login_id" class="sound_only">아이디<strong class="sound_only"> 필수</strong></label> <label for="login_id" class="sound_only">아이디<strong class="sound_only"> 필수</strong></label>

2
skin/member/basic/login.skin.php
View File

@ -10,7 +10,7 @@ add_stylesheet('<link rel="stylesheet" href="'.$member_skin_url.'/style.css">',
<h1><?php echo $g5['title'] ?></h1> <h1><?php echo $g5['title'] ?></h1>
<form name="flogin" action="<?php echo $login_action_url ?>" onsubmit="return flogin_submit(this);" method="post"> <form name="flogin" action="<?php echo $login_action_url ?>" onsubmit="return flogin_submit(this);" method="post">
<input type="hidden" name="url" value='<?php echo $login_url ?>'> <input type="hidden" name="url" value="<?php echo $login_url ?>">
<fieldset id="login_fs"> <fieldset id="login_fs">
<legend>회원로그인</legend> <legend>회원로그인</legend>