wr_id_list 필터링 코드 추가

2016-07-29 10:21:09 +09:00
parent b3773217e9
commit ef013e0827
1 changed files with 2 additions and 0 deletions
--- a/bbs/move_update.php
+++ b/bbs/move_update.php
@ -19,6 +19,8 @@ $save_count_write = 0;
 $save_count_comment = 0;
 $cnt = 0;

+$wr_id_list = preg_replace('/[^0-9\,]/', '', $_POST['wr_id_list']);
+
 $sql = " select distinct wr_num from $write_table where wr_id in ({$wr_id_list}) order by wr_id ";
 $result = sql_query($sql);
 while ($row = sql_fetch_array($result))