그누보드 원격 취약점 17-259 수정

2017-06-13 15:20:28 +09:00
parent 674a7f3f57
commit d755a42530
3 changed files with 46 additions and 0 deletions
--- a/adm/sms_admin/_common.php
+++ b/adm/sms_admin/_common.php
@ -14,5 +14,9 @@ if (!strstr($_SERVER['SCRIPT_NAME'], 'install.php')) {

 $sv = isset($_REQUEST['sv']) ? get_search_string($_REQUEST['sv']) : '';

+if( isset($token) ){
+    $token = @htmlspecialchars(strip_tags($token), ENT_QUOTES);
+}
+
 add_stylesheet('<link rel="stylesheet" href="'.G5_SMS5_ADMIN_URL.'/css/sms5.css">', 0);
 ?>