firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

관리자 회원메일발송 페이지 xss 취약점 수정

Browse Source
This commit is contained in:
thisgun
2019-07-19 19:58:12 +09:00
parent cbde9c91d7
commit f675c38441
2 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
adm/mail_form.php
View File

@ -11,6 +11,8 @@ if ($w == 'u') {
$html_title .= '수정'; $html_title .= '수정';
$readonly = ' readonly'; $readonly = ' readonly';
$ma_id = (int) $ma_id;
$sql = " select * from {$g5['mail_table']} where ma_id = '{$ma_id}' "; $sql = " select * from {$g5['mail_table']} where ma_id = '{$ma_id}' ";
$ma = sql_fetch($sql); $ma = sql_fetch($sql);
if (!$ma['ma_id']) if (!$ma['ma_id'])

12
adm/mail_update.php
View File

@ -9,11 +9,13 @@ auth_check($auth[$sub_menu], 'w');
check_admin_token(); check_admin_token();
$ma_id = isset($_POST['ma_id']) ? (int) $_POST['ma_id'] : 0;
$ma_subject = isset($_POST['ma_subject']) ? strip_tags($_POST['ma_subject']) : '';
if ($w == '') if ($w == '')
{ {
$sql = " insert {$g5['mail_table']} $sql = " insert {$g5['mail_table']}
set ma_id = '{$_POST['ma_id']}', set ma_subject = '{$ma_subject}',
ma_subject = '{$_POST['ma_subject']}',
ma_content = '{$_POST['ma_content']}', ma_content = '{$_POST['ma_content']}',
ma_time = '".G5_TIME_YMDHIS."', ma_time = '".G5_TIME_YMDHIS."',
ma_ip = '{$_SERVER['REMOTE_ADDR']}' "; ma_ip = '{$_SERVER['REMOTE_ADDR']}' ";
@ -22,16 +24,16 @@ if ($w == '')
else if ($w == 'u') else if ($w == 'u')
{ {
$sql = " update {$g5['mail_table']} $sql = " update {$g5['mail_table']}
set ma_subject = '{$_POST['ma_subject']}', set ma_subject = '{$ma_subject}',
ma_content = '{$_POST['ma_content']}', ma_content = '{$_POST['ma_content']}',
ma_time = '".G5_TIME_YMDHIS."', ma_time = '".G5_TIME_YMDHIS."',
ma_ip = '{$_SERVER['REMOTE_ADDR']}' ma_ip = '{$_SERVER['REMOTE_ADDR']}'
where ma_id = '{$_POST['ma_id']}' "; where ma_id = '{$ma_id}' ";
sql_query($sql); sql_query($sql);
} }
else if ($w == 'd') else if ($w == 'd')
{ {
$sql = " delete from {$g5['mail_table']} where ma_id = '{$_POST['ma_id']}' "; $sql = " delete from {$g5['mail_table']} where ma_id = '{$ma_id}' ";
sql_query($sql); sql_query($sql);
} }