diff --git a/adm/shop_admin/orderform.php b/adm/shop_admin/orderform.php
index 6ceb5db12..0b8a771f0 100644
--- a/adm/shop_admin/orderform.php
+++ b/adm/shop_admin/orderform.php
@@ -383,7 +383,7 @@ add_javascript(G5_POSTCODE_JS, 0);    //다음 주소 js
     <input type="hidden" name="search" value="<?php echo $search; ?>">
     <input type="hidden" name="page" value="<?php echo $page; ?>">
     <input type="hidden" name="od_name" value="<?php echo get_text($od['od_name']); ?>">
-    <input type="hidden" name="od_hp" value="<?php echo $od['od_hp']; ?>">
+    <input type="hidden" name="od_hp" value="<?php echo get_text($od['od_hp']); ?>">
     <input type="hidden" name="od_tno" value="<?php echo $od['od_tno']; ?>">
     <input type="hidden" name="od_escrow" value="<?php echo $od['od_escrow']; ?>">
     <input type="hidden" name="od_pg" value="<?php echo $od['od_pg']; ?>">
diff --git a/bbs/member_cert_refresh_update.php b/bbs/member_cert_refresh_update.php
index 1d276b267..7dc023b3e 100644
--- a/bbs/member_cert_refresh_update.php
+++ b/bbs/member_cert_refresh_update.php
@@ -87,4 +87,9 @@ run_event('cert_refresh_update_after', $mb_id);
 
 //===============================================================
 
-(empty($url))? goto_url(G5_URL) : goto_url($url);
\ No newline at end of file
+if ($url) {
+    check_url_host($url, '', G5_URL, true);
+    goto_url($url);
+} else {
+    goto_url(G5_URL);
+}
\ No newline at end of file
diff --git a/plugin/social/includes/functions.php b/plugin/social/includes/functions.php
index 2234ca597..a4cd8ef2f 100644
--- a/plugin/social/includes/functions.php
+++ b/plugin/social/includes/functions.php
@@ -593,6 +593,7 @@ function social_check_login_before($p_service=''){
                             $params = array('provider'=>$provider_name);
 
                             $url = replaceQueryParams($url, $params);
+                            check_url_host($url, '', G5_URL, true);
                             goto_url($url);
                         } else {
                             goto_url(G5_URL);
@@ -772,6 +773,7 @@ function social_member_comfirm_redirect(){
             $params = array('provider'=>$provider_name);
 
             $url = replaceQueryParams($url, $params);
+            check_url_host($url, '', G5_URL, true);
             goto_url($url);
 
         }