From dfc2c110d67b98f045dc7c8faad2c96c71e6b324 Mon Sep 17 00:00:00 2001
From: chicpro <chicpro@sir.co.kr>
Date: Tue, 24 May 2016 17:34:01 +0900
Subject: [PATCH] =?UTF-8?q?=EA=B0=80=EC=9E=85=EC=B6=95=ED=95=98=20?=
 =?UTF-8?q?=EB=A9=94=EC=9D=BC=EC=9D=98=20=EB=A9=94=EC=9D=BC=EC=9D=B8?=
 =?UTF-8?q?=EC=A6=9D=EC=BD=94=EB=93=9C=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bbs/register_form_update.php | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/bbs/register_form_update.php b/bbs/register_form_update.php
index e272f3f5e..f1de84432 100644
--- a/bbs/register_form_update.php
+++ b/bbs/register_form_update.php
@@ -253,8 +253,12 @@ if ($w == '') {
     if ($config['cf_email_mb_member']) {
         $subject = '['.$config['cf_title'].'] 회원가입을 축하드립니다.';
 
-        $mb_md5 = md5($mb_id.$mb_email.G5_TIME_YMDHIS);
-        $certify_href = G5_BBS_URL.'/email_certify.php?mb_id='.$mb_id.'&amp;mb_md5='.$mb_md5;
+        // 어떠한 회원정보도 포함되지 않은 일회용 난수를 생성하여 인증에 사용
+        if ($config['cf_use_email_certify']) {
+            $mb_md5 = md5(pack('V*', rand(), rand(), rand(), rand()));
+            sql_query(" update {$g5['member_table']} set mb_email_certify2 = '$mb_md5' where mb_id = '$mb_id' ");
+            $certify_href = G5_BBS_URL.'/email_certify.php?mb_id='.$mb_id.'&amp;mb_md5='.$mb_md5;
+        }
 
         ob_start();
         include_once ('./register_form_update_mail1.php');