그누보드 원격 취약점 17-259 수정

2017-06-13 15:20:28 +09:00
parent 674a7f3f57
commit d755a42530
3 changed files with 46 additions and 0 deletions
--- a/adm/_common.php
+++ b/adm/_common.php
@ -2,4 +2,8 @@
 define('G5_IS_ADMIN', true);
 include_once ('../common.php');
 include_once(G5_ADMIN_PATH.'/admin.lib.php');
+
+if( isset($token) ){
+    $token = @htmlspecialchars(strip_tags($token), ENT_QUOTES);
+}
 ?>