diff --git a/bbs/formmail.php b/bbs/formmail.php
index e5b69c93f..55a9847e5 100644
--- a/bbs/formmail.php
+++ b/bbs/formmail.php
@@ -31,7 +31,7 @@ include_once(G5_PATH.'/head.sub.php');
if (!$name)
$name = base64_decode($email);
else
- $name = get_text(stripslashes($name));
+ $name = get_text(stripslashes($name), true);
if (!isset($type))
$type = 0;
diff --git a/lib/common.lib.php b/lib/common.lib.php
index 8d39a3bb1..cc23168ea 100644
--- a/lib/common.lib.php
+++ b/lib/common.lib.php
@@ -383,8 +383,9 @@ function get_list($write_row, $board, $skin_url, $subject_len=40)
$list['wr_homepage'] = get_text($list['wr_homepage']);
$tmp_name = get_text(cut_str($list['wr_name'], $config['cf_cut_name'])); // 설정된 자리수 만큼만 이름 출력
+ $tmp_name2 = cut_str($list['wr_name'], $config['cf_cut_name']); // 설정된 자리수 만큼만 이름 출력
if ($board['bo_use_sideview'])
- $list['name'] = get_sideview($list['mb_id'], $tmp_name, $list['wr_email'], $list['wr_homepage']);
+ $list['name'] = get_sideview($list['mb_id'], $tmp_name2, $list['wr_email'], $list['wr_homepage']);
else
$list['name'] = ''.$tmp_name.'';
@@ -1201,6 +1202,10 @@ function get_sideview($mb_id, $name='', $email='', $homepage='')
$email = base64_encode($email);
$homepage = set_http(clean_xss_tags($homepage));
+ $name = get_text($name, true);
+ $email = get_text($email);
+ $homepage = get_text($homepage);
+
$tmp_name = "";
if ($mb_id) {
//$tmp_name = "$name";
@@ -1235,10 +1240,6 @@ function get_sideview($mb_id, $name='', $email='', $homepage='')
$title_mb_id = '[비회원]';
}
- $name = get_text($name);
- $email = get_text($email);
- $homepage = get_text($homepage);
-
$str = "\n";
$str .= $tmp_name."\n";
@@ -1360,7 +1361,7 @@ function cut_str($str, $len, $suffix="…")
// TEXT 형식으로 변환
-function get_text($str, $html=0)
+function get_text($str, $html=0, $restore=false)
{
$source[] = "<";
$target[] = "<";
@@ -1371,7 +1372,8 @@ function get_text($str, $html=0)
$source[] = "\'";
$target[] = "'";
- $str = str_replace($target, $source, $str);
+ if($restore)
+ $str = str_replace($target, $source, $str);
// 3.31
// TEXT 출력일 경우 & 등의 코드를 정상으로 출력해 주기 위함