From 51518e45e483888bf4e8ce524cebadad9f2f30b4 Mon Sep 17 00:00:00 2001 From: thisgun Date: Thu, 16 Apr 2026 03:31:35 +0000 Subject: [PATCH] =?UTF-8?q?[security]KVE-2026-0709=20=EA=B7=B8=EB=88=84?= =?UTF-8?q?=EB=B3=B4=EB=93=9C5=20SQL=20Injection=20=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- bbs/write_comment_update.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/bbs/write_comment_update.php b/bbs/write_comment_update.php index 8fbc280eb..db2a62a0b 100644 --- a/bbs/write_comment_update.php +++ b/bbs/write_comment_update.php @@ -32,8 +32,8 @@ $wr_7 = isset($_POST['wr_7']) ? $_POST['wr_7'] : ''; $wr_8 = isset($_POST['wr_8']) ? $_POST['wr_8'] : ''; $wr_9 = isset($_POST['wr_9']) ? $_POST['wr_9'] : ''; $wr_10 = isset($_POST['wr_10']) ? $_POST['wr_10'] : ''; -$wr_facebook_user = isset($_POST['wr_facebook_user']) ? clean_xss_tags($_POST['wr_facebook_user'], 1, 1) : ''; -$wr_twitter_user = isset($_POST['wr_twitter_user']) ? clean_xss_tags($_POST['wr_twitter_user'], 1, 1) : ''; +$wr_facebook_user = isset($_POST['wr_facebook_user']) ? addslashes(clean_xss_tags(stripslashes($_POST['wr_facebook_user']), 1, 1)) : ''; +$wr_twitter_user = isset($_POST['wr_twitter_user']) ? addslashes(clean_xss_tags(stripslashes($_POST['wr_twitter_user']), 1, 1)) : ''; $wr_homepage = isset($_POST['wr_homepage']) ? addslashes(clean_xss_tags(stripslashes($_POST['wr_homepage']), 1, 1)) : ''; if (!empty($_POST['wr_email']))