XSS 취약점(16-060) 수정

2016-01-20 14:46:13 +09:00
parent 43f4b2c5fb
commit e9023340dd
1 changed files with 2 additions and 0 deletions
--- a/bbs/member_confirm.php
+++ b/bbs/member_confirm.php
@ -19,6 +19,8 @@ $url = clean_xss_tags($_GET['url']);
 // url 체크
 check_url_host($url);

+$url = get_text($url);
+
 include_once($member_skin_path.'/member_confirm.skin.php');

 include_once('./_tail.sub.php');