From 20fe8feb1cc4436c6690611e4f6d1d5d51579aca Mon Sep 17 00:00:00 2001
From: chicpro <chicpro@sir.co.kr>
Date: Tue, 6 Sep 2016 11:33:58 +0900
Subject: [PATCH] =?UTF-8?q?LFI=20=EC=B7=A8=EC=95=BD=EC=A0=90(16-679)=20?=
 =?UTF-8?q?=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 mobile/shop/event.php    | 4 +++-
 mobile/shop/listtype.php | 2 ++
 shop/event.php           | 4 +++-
 shop/listtype.php        | 2 ++
 4 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/mobile/shop/event.php b/mobile/shop/event.php
index d98de9846..c8fc9c7b6 100644
--- a/mobile/shop/event.php
+++ b/mobile/shop/event.php
@@ -26,8 +26,10 @@ if ($sort != "")
 else
     $order_by = 'b.it_order, b.it_id desc';
 
-if ($skin)
+if ($skin) {
+    $skin = preg_replace('#\.+/#', '', $skin);
     $ev['ev_skin'] = $skin;
+}
 
 define('G5_SHOP_CSS_URL', G5_MSHOP_SKIN_URL);
 
diff --git a/mobile/shop/listtype.php b/mobile/shop/listtype.php
index 67e12e272..2bb280b67 100644
--- a/mobile/shop/listtype.php
+++ b/mobile/shop/listtype.php
@@ -31,6 +31,8 @@ else
 
 if (!$skin)
     $skin = 'list.10.skin.php';
+else
+    $skin = preg_replace('#\.+/#', '', $skin);
 
 define('G5_SHOP_CSS_URL', G5_MSHOP_SKIN_URL);
 
diff --git a/shop/event.php b/shop/event.php
index 0c47236f1..ab36841ed 100644
--- a/shop/event.php
+++ b/shop/event.php
@@ -40,8 +40,10 @@ if ($sort != "")
 else
     $order_by = 'b.it_order, b.it_id desc';
 
-if ($skin)
+if ($skin) {
+    $skin = preg_replace('#\.+/#', '', $skin);
     $ev['ev_skin'] = $skin;
+}
 
 define('G5_SHOP_CSS_URL', G5_SHOP_SKIN_URL);
 
diff --git a/shop/listtype.php b/shop/listtype.php
index 6f5b2ef36..f6bdef15c 100644
--- a/shop/listtype.php
+++ b/shop/listtype.php
@@ -35,6 +35,8 @@ else
 
 if (!$skin)
     $skin = 'list.10.skin.php';
+else
+    $skin = preg_replace('#\.+/#', '', $skin);
 
 define('G5_SHOP_CSS_URL', G5_SHOP_SKIN_URL);