KVE-2018-1772, 1808, 1817 취약점 수정

This commit is contained in:
thisgun
2018-12-12 16:58:22 +09:00
parent 013b67a63b
commit e620f6aafa
13 changed files with 29 additions and 14 deletions

View File

@ -6,7 +6,7 @@ if (G5_IS_MOBILE) {
return;
}
$it_id = trim($_GET['it_id']);
$it_id = get_search_string(trim($_GET['it_id']));
include_once(G5_LIB_PATH.'/iteminfo.lib.php');

View File

@ -12,7 +12,7 @@ if (!$is_member) {
alert_close("사용후기는 회원만 작성 가능합니다.");
}
$w = trim($_REQUEST['w']);
$w = preg_replace('/[^0-9a-z]/i', '', trim($_REQUEST['w']));
$it_id = get_search_string(trim($_REQUEST['it_id']));
$is_id = preg_replace('/[^0-9]/', '', trim($_REQUEST['is_id']));

View File

@ -6,7 +6,7 @@ if (G5_IS_MOBILE) {
return;
}
$it_id = $_GET['it_id'];
$it_id = get_search_string(trim($_GET['it_id']));
$no = $_GET['no'];
$sql = " select it_id, it_name, it_img1, it_img2, it_img3, it_img4, it_img5, it_img6, it_img7, it_img8, it_img9, it_img10