firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

xss 대응 코드 추가

Browse Source
This commit is contained in:
chicpro
2014-07-29 16:33:19 +09:00
parent e84a1c8c98
commit d5e6a07dda
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
common.php
View File

@ -327,7 +327,7 @@ if (isset($_REQUEST['wr_id'])) {
} }
if (isset($_REQUEST['bo_table'])) { if (isset($_REQUEST['bo_table'])) {
$bo_table = trim($_REQUEST['bo_table']); $bo_table = preg_replace('/[^a-z0-9_]/i', '', trim($_REQUEST['bo_table']));
$bo_table = substr($bo_table, 0, 20); $bo_table = substr($bo_table, 0, 20);
} else { } else {
$bo_table = ''; $bo_table = '';
@ -335,7 +335,7 @@ if (isset($_REQUEST['bo_table'])) {
// URL ENCODING // URL ENCODING
if (isset($_REQUEST['url'])) { if (isset($_REQUEST['url'])) {
$url = trim($_REQUEST['url']); $url = strip_tags(trim($_REQUEST['url']));
$urlencode = urlencode($url); $urlencode = urlencode($url);
} else { } else {
$url = ''; $url = '';
@ -348,7 +348,7 @@ if (isset($_REQUEST['url'])) {
if (isset($_REQUEST['gr_id'])) { if (isset($_REQUEST['gr_id'])) {
if (!is_array($_REQUEST['gr_id'])) { if (!is_array($_REQUEST['gr_id'])) {
$gr_id = trim($_REQUEST['gr_id']); $gr_id = preg_replace('/[^a-z0-9_]/i', '', trim($_REQUEST['gr_id']));
} }
} else { } else {
$gr_id = ''; $gr_id = '';