From 6bc322c9d660da32a922b6777c4dfca46c772fa4 Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Thu, 9 Jul 2026 05:19:19 +0000
Subject: [PATCH] =?UTF-8?q?=ED=9A=8C=EC=9B=90=20=EC=97=AC=EB=B6=84?=
 =?UTF-8?q?=ED=95=84=EB=93=9C=20=EC=A0=80=EC=9E=A5=20=EC=8B=9C=20=EC=9E=85?=
 =?UTF-8?q?=EB=A0=A5=EA=B0=92=20=EC=A0=95=EC=A0=9C=20=EB=B3=B4=EC=99=84?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- register_form_update.php에서 mb_1~mb_10을 다른 회원필드(mb_name 등)와
  동일하게 clean_xss_tags 처리하여 저장하도록 보완

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 bbs/register_form_update.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/bbs/register_form_update.php b/bbs/register_form_update.php
index 3185eeaa0..79ce3d407 100644
--- a/bbs/register_form_update.php
+++ b/bbs/register_form_update.php
@@ -74,6 +74,10 @@ $mb_addr2       = addslashes(clean_xss_tags(stripslashes($mb_addr2), 1, 1));
 $mb_addr3       = addslashes(clean_xss_tags(stripslashes($mb_addr3), 1, 1));
 $mb_addr_jibeon = preg_match("/^(N|R|J)$/", $mb_addr_jibeon) ? $mb_addr_jibeon : '';
 
+for ($i = 1; $i <= 10; $i++) {
+    ${'mb_' . $i} = addslashes(clean_xss_tags(stripslashes(${'mb_' . $i}), 1, 1));
+}
+
 $mb_marketing_agree     = isset($_POST['mb_marketing_agree'])   ? trim($_POST['mb_marketing_agree'])    : "0";
 $mb_thirdparty_agree    = isset($_POST['mb_thirdparty_agree'])  ? trim($_POST['mb_thirdparty_agree'])   : "0";