SQL Injection 취약점 수정

2014-12-05 17:13:10 +09:00
parent b608efa5da
commit fe35a8c782
2 changed files with 2 additions and 0 deletions
--- a/bbs/list.php
+++ b/bbs/list.php
@ -149,6 +149,7 @@ if (!$sst) {
    $sst = preg_match("/^(wr_datetime|wr_hit|wr_good|wr_nogood)$/i", $sst) ? $sst : "";
 }

+$sql_order = '';
 if ($sst) {
    $sql_order = " order by {$sst} {$sod} ";
 }