From fac02cdd95618e3e789218e1767a89914c24ff39 Mon Sep 17 00:00:00 2001
From: gnuboard <kagla@naver.com>
Date: Tue, 12 Feb 2013 11:18:18 +0900
Subject: [PATCH] =?UTF-8?q?=EC=9D=B8=EA=B8=B0=EA=B2=80=EC=83=89=EC=96=B4?=
 =?UTF-8?q?=20=EB=93=B1=EB=A1=9D=EB=90=98=EB=8F=84=EB=A1=9D=20=ED=95=B4?=
 =?UTF-8?q?=EA=B2=B0=20=EB=B0=8F=20=ED=83=9C=EA=B7=B8,=20=ED=8A=B9?=
 =?UTF-8?q?=EC=88=98=EB=AC=B8=EC=9E=90=EA=B0=80=20=EA=B2=80=EC=83=89?=
 =?UTF-8?q?=EB=90=98=EC=A7=80=20=EC=95=8A=EB=8F=84=EB=A1=9D=20=EC=88=98?=
 =?UTF-8?q?=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bbs/search.php | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/bbs/search.php b/bbs/search.php
index eaab6104e..33757fde8 100644
--- a/bbs/search.php
+++ b/bbs/search.php
@@ -1,7 +1,7 @@
 <?
 include_once('./_common.php');
 
-$g4['title'] = "전체검색 결과";
+$g4['title'] = '전체검색 결과';
 include_once('./_head.php');
 
 $search_table = Array();
@@ -10,9 +10,10 @@ $write_pages = "";
 $text_stx = "";
 $srows = 0;
 
+$stx = strip_tags($stx);
+$stx = preg_replace('/[[:punct:]]/', '', $stx); // 특수문자 제거
 if ($stx) {
-
-    $stx = preg_replace("/\//", "\/", trim($stx));
+    $stx = preg_replace('/\//', '\/', trim($stx));
     $sop = strtolower($sop);
     if (!$sop || !($sop == 'and' || $sop == 'or')) $sop = 'and'; // 연산자 and , or
     $srows = isset($_GET['srows']) ? $_GET['srows'] : 10;
@@ -100,7 +101,7 @@ if ($stx) {
         $op1 = " {$sop} ";
 
         // 인기검색어
-        $sql = " insert into {$g4['popular_table']} set pp_word = '{$search_str}', pp_date = '{$g4['time_ymd']}', pp_ip = '{$_SERVER['REMOTE_ADDR']}' ";
+        $sql = " insert into {$g4['popular_table']} set pp_word = '{$search_str}', pp_date = '".G4_TIME_YMD."', pp_ip = '{$_SERVER['REMOTE_ADDR']}' ";
         sql_query($sql, FALSE);
     }
     $str .= ")";