From 56647c18076c84f85448dd80dd0e249a4b4005dc Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Thu, 13 Feb 2020 17:43:26 +0900
Subject: [PATCH] =?UTF-8?q?=EC=98=81=EC=B9=B4=ED=8A=B8=20XSS=20=EC=B7=A8?=
 =?UTF-8?q?=EC=95=BD=EC=A0=90=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/shop_admin/categorylistupdate.php    | 2 +-
 adm/shop_admin/itemformupdate.php        | 4 ++--
 adm/shop_admin/personalpayformupdate.php | 2 +-
 adm/shop_admin/sendcostupdate.php        | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/adm/shop_admin/categorylistupdate.php b/adm/shop_admin/categorylistupdate.php
index 4b42b67c9..66d4fea07 100644
--- a/adm/shop_admin/categorylistupdate.php
+++ b/adm/shop_admin/categorylistupdate.php
@@ -10,7 +10,7 @@ check_admin_token();
 
 for ($i=0; $i<count($_POST['ca_id']); $i++)
 {
-    $str_ca_mb_id = isset($_POST['ca_mb_id'][$i]) ? strip_tags($_POST['ca_mb_id'][$i]) : '';
+    $str_ca_mb_id = isset($_POST['ca_mb_id'][$i]) ? strip_tags(clean_xss_attributes($_POST['ca_mb_id'][$i])) : '';
 
     if ($str_ca_mb_id)
     {
diff --git a/adm/shop_admin/itemformupdate.php b/adm/shop_admin/itemformupdate.php
index ef9f53372..35a2ffffd 100644
--- a/adm/shop_admin/itemformupdate.php
+++ b/adm/shop_admin/itemformupdate.php
@@ -269,7 +269,7 @@ $it_info_value = addslashes(serialize($value_array));
 if(($it_point_type == 1 || $it_point_type == 2) && $it_point > 99)
     alert("포인트 비율을 0과 99 사이의 값으로 입력해 주십시오.");
 
-$it_name = strip_tags(trim($_POST['it_name']));
+$it_name = strip_tags(clean_xss_attributes(trim($_POST['it_name'])));
 
 // KVE-2019-0708
 $check_sanitize_keys = array(
@@ -326,7 +326,7 @@ $sql_common = " ca_id               = '$ca_id',
                 it_type5            = '$it_type5',
                 it_basic            = '$it_basic',
                 it_explan           = '$it_explan',
-                it_explan2          = '".strip_tags(trim($_POST['it_explan']))."',
+                it_explan2          = '".strip_tags(trim(clean_xss_attributes($_POST['it_explan'])))."',
                 it_mobile_explan    = '$it_mobile_explan',
                 it_cust_price       = '$it_cust_price',
                 it_price            = '$it_price',
diff --git a/adm/shop_admin/personalpayformupdate.php b/adm/shop_admin/personalpayformupdate.php
index a94afb41f..9fecf1cd1 100644
--- a/adm/shop_admin/personalpayformupdate.php
+++ b/adm/shop_admin/personalpayformupdate.php
@@ -5,7 +5,7 @@ include_once('./_common.php');
 check_admin_token();
 
 if( isset($_POST['pp_name']) ){
-	$_POST['pp_name'] = strip_tags($_POST['pp_name']);
+	$_POST['pp_name'] = strip_tags(clean_xss_attributes($_POST['pp_name']));
 }
 
 if($w == 'd') {
diff --git a/adm/shop_admin/sendcostupdate.php b/adm/shop_admin/sendcostupdate.php
index a5c179b85..121943189 100644
--- a/adm/shop_admin/sendcostupdate.php
+++ b/adm/shop_admin/sendcostupdate.php
@@ -22,7 +22,7 @@ if($w == 'd') {
         sql_query(" delete from {$g5['g5_shop_sendcost_table']} where sc_id = '$sc_id' ");
     }
 } else {
-    $sc_name = trim(strip_tags($_POST['sc_name']));
+    $sc_name = trim(strip_tags(clean_xss_attributes($_POST['sc_name'])));
     $sc_zip1 = preg_replace('/[^0-9]/', '', $_POST['sc_zip1']);
     $sc_zip2 = preg_replace('/[^0-9]/', '', $_POST['sc_zip2']);
     $sc_price = preg_replace('/[^0-9]/', '', $_POST['sc_price']);