From 43fba4407d19c5072e13be55543efda6128110aa Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Thu, 9 Jul 2026 05:02:19 +0000
Subject: [PATCH] =?UTF-8?q?[KVE-2025-1533]=20=EB=AF=B8=EA=B2=B0=EC=A0=9C?=
 =?UTF-8?q?=EB=82=B4=EC=97=AD=20=EC=9E=84=EC=8B=9C=EC=A3=BC=EB=AC=B8=20?=
 =?UTF-8?q?=EB=8D=B0=EC=9D=B4=ED=84=B0=20=EC=B6=9C=EB=A0=A5=20=EC=8B=9C=20?=
 =?UTF-8?q?=EC=9D=B4=EC=8A=A4=EC=BC=80=EC=9D=B4=ED=94=84=20=EB=B3=B4?=
 =?UTF-8?q?=EC=99=84?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/shop_admin/inorderform.php | 6 +++---
 adm/shop_admin/inorderlist.php | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/adm/shop_admin/inorderform.php b/adm/shop_admin/inorderform.php
index 7cb4a32a3..e1f12e181 100644
--- a/adm/shop_admin/inorderform.php
+++ b/adm/shop_admin/inorderform.php
@@ -487,7 +487,7 @@ $pg_anchor = '<ul class="anchor">
                 <tr>
                     <th scope="row"><span class="sound_only">주문하시는 분 </span>주소</th>
                     <td>
-                        <span><?php echo $data['od_zip']; ?></span>
+                        <span><?php echo get_text($data['od_zip']); ?></span>
                         <span><?php echo get_text($data['od_addr1']); ?></span>
                         <span><?php echo get_text($data['od_addr2']); ?></span>
                         <span><?php echo get_text($data['od_addr3']); ?></span>
@@ -528,7 +528,7 @@ $pg_anchor = '<ul class="anchor">
                 <tr>
                     <th scope="row"><span class="sound_only">받으시는 분 </span>주소</th>
                     <td>
-                        <span><?php echo $data['od_b_zip']; ?></span>
+                        <span><?php echo get_text($data['od_b_zip']); ?></span>
                         <span><?php echo get_text($data['od_b_addr1']); ?></span>
                         <span><?php echo get_text($data['od_b_addr2']); ?></span>
                         <span><?php echo get_text($data['od_b_addr3']); ?></span>
@@ -538,7 +538,7 @@ $pg_anchor = '<ul class="anchor">
                 <?php if ($default['de_hope_date_use']) { ?>
                 <tr>
                     <th scope="row">희망배송일</th>
-                    <td><?php echo $data['od_hope_date']; ?> (<?php echo get_yoil($data['od_hope_date']); ?>)</td>
+                    <td><?php echo get_text($data['od_hope_date']); ?> (<?php echo get_yoil($data['od_hope_date']); ?>)</td>
                 </tr>
                 <?php } ?>
                 <tr>
diff --git a/adm/shop_admin/inorderlist.php b/adm/shop_admin/inorderlist.php
index aa02f6c3f..c23730e02 100644
--- a/adm/shop_admin/inorderlist.php
+++ b/adm/shop_admin/inorderlist.php
@@ -136,7 +136,7 @@ $colspan = 10;
         <td class="td_center"><?php echo get_text($data['od_tel']); ?></td>
         <td class="td_name"><?php echo get_text($data['od_b_name']); ?></td>
         <td class="td_price"><?php echo number_format($ct['price']); ?></td>
-        <td class="td_center"><?php echo $data['od_settle_case']; ?></td>
+        <td class="td_center"><?php echo get_text($data['od_settle_case']); ?></td>
         <td class="td_time"><?php echo $row['dt_time']; ?></td>
         <td class="td_mng td_mng_m">
             <a href="./inorderform.php?od_id=<?php echo $row['od_id']; ?>&amp;<?php echo $qstr; ?>" class="btn btn_03"><span class="sound_only"><?php echo $row['od_id']; ?> </span>보기</a>