KVE-2019-0082 원격취약점 수정

2019-03-13 15:20:13 +09:00
parent bf75dc1d97
commit e1bd6082b2
10 changed files with 52 additions and 36 deletions
--- a/adm/shop_admin/itemqalistupdate.php
+++ b/adm/shop_admin/itemqalistupdate.php
@ -17,8 +17,9 @@ if ($_POST['act_button'] == "선택삭제") {
    for ($i=0; $i<count($_POST['chk']); $i++) {
        // 실제 번호를 넘김
        $k = $_POST['chk'][$i];
+        $iiq_id = (int) $_POST['iq_id'][$k];

-        $sql = "delete from {$g5['g5_shop_item_qa_table']} where iq_id = '{$_POST['iq_id'][$k]}' ";
+        $sql = "delete from {$g5['g5_shop_item_qa_table']} where iq_id = '{$iiq_id}' ";
        sql_query($sql);
    }
 }