KVE-2018-1772, 1808, 1817 취약점 수정

2018-12-12 16:58:22 +09:00
parent 013b67a63b
commit e620f6aafa
13 changed files with 29 additions and 14 deletions
--- a/mobile/shop/iteminfo.php
+++ b/mobile/shop/iteminfo.php
@ -1,8 +1,8 @@
 <?php
 include_once('./_common.php');

-$it_id = $_GET['it_id'];
-$info = $_GET['info'];
+$it_id = get_search_string(trim($_GET['it_id']));
+$info = preg_replace('/[^0-9a-z]/i', '', $_GET['info']);

 // 분류사용, 상품사용하는 상품의 정보를 얻음
 $sql = " select a.*,