From 05981661e77f816045141faf870ddeb92032a873 Mon Sep 17 00:00:00 2001 From: thisgun Date: Fri, 19 Jul 2019 17:52:30 +0900 Subject: [PATCH 1/3] 5.4.0.1 --- config.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config.php b/config.php index 3e76468a5..2f2af33d8 100644 --- a/config.php +++ b/config.php @@ -5,7 +5,7 @@ ********************/ define('G5_VERSION', '그누보드5'); -define('G5_GNUBOARD_VER', '5.4.0'); +define('G5_GNUBOARD_VER', '5.4.0.1'); // 이 상수가 정의되지 않으면 각각의 개별 페이지는 별도로 실행될 수 없음 define('_GNUBOARD_', true); From f675c38441633bbe12797fa0b6debb44dfdab2e6 Mon Sep 17 00:00:00 2001 From: thisgun Date: Fri, 19 Jul 2019 19:58:12 +0900 Subject: [PATCH 2/3] =?UTF-8?q?=EA=B4=80=EB=A6=AC=EC=9E=90=20=ED=9A=8C?= =?UTF-8?q?=EC=9B=90=EB=A9=94=EC=9D=BC=EB=B0=9C=EC=86=A1=20=ED=8E=98?= =?UTF-8?q?=EC=9D=B4=EC=A7=80=20xss=20=EC=B7=A8=EC=95=BD=EC=A0=90=20?= =?UTF-8?q?=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- adm/mail_form.php | 2 ++ adm/mail_update.php | 12 +++++++----- 2 files changed, 9 insertions(+), 5 deletions(-) diff --git a/adm/mail_form.php b/adm/mail_form.php index 547beadf0..a95035be2 100644 --- a/adm/mail_form.php +++ b/adm/mail_form.php @@ -10,6 +10,8 @@ $html_title = '회원메일'; if ($w == 'u') { $html_title .= '수정'; $readonly = ' readonly'; + + $ma_id = (int) $ma_id; $sql = " select * from {$g5['mail_table']} where ma_id = '{$ma_id}' "; $ma = sql_fetch($sql); diff --git a/adm/mail_update.php b/adm/mail_update.php index ff539cd55..68c85ae71 100644 --- a/adm/mail_update.php +++ b/adm/mail_update.php @@ -9,11 +9,13 @@ auth_check($auth[$sub_menu], 'w'); check_admin_token(); +$ma_id = isset($_POST['ma_id']) ? (int) $_POST['ma_id'] : 0; +$ma_subject = isset($_POST['ma_subject']) ? strip_tags($_POST['ma_subject']) : ''; + if ($w == '') { $sql = " insert {$g5['mail_table']} - set ma_id = '{$_POST['ma_id']}', - ma_subject = '{$_POST['ma_subject']}', + set ma_subject = '{$ma_subject}', ma_content = '{$_POST['ma_content']}', ma_time = '".G5_TIME_YMDHIS."', ma_ip = '{$_SERVER['REMOTE_ADDR']}' "; @@ -22,16 +24,16 @@ if ($w == '') else if ($w == 'u') { $sql = " update {$g5['mail_table']} - set ma_subject = '{$_POST['ma_subject']}', + set ma_subject = '{$ma_subject}', ma_content = '{$_POST['ma_content']}', ma_time = '".G5_TIME_YMDHIS."', ma_ip = '{$_SERVER['REMOTE_ADDR']}' - where ma_id = '{$_POST['ma_id']}' "; + where ma_id = '{$ma_id}' "; sql_query($sql); } else if ($w == 'd') { - $sql = " delete from {$g5['mail_table']} where ma_id = '{$_POST['ma_id']}' "; + $sql = " delete from {$g5['mail_table']} where ma_id = '{$ma_id}' "; sql_query($sql); } From 71638387064e74175df16f93c3b68324f1047832 Mon Sep 17 00:00:00 2001 From: thisgun Date: Fri, 19 Jul 2019 20:15:39 +0900 Subject: [PATCH 3/3] =?UTF-8?q?=ED=9A=8C=EC=9B=90=EC=B0=BE=EA=B8=B0=20form?= =?UTF-8?q?=20=EC=98=A4=EB=A5=98=20=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- mobile/skin/member/basic/password_lost.skin.php | 8 ++++---- skin/member/basic/password_lost.skin.php | 9 +++++---- .../mobile/skin/member/basic/password_lost.skin.php | 8 ++++---- theme/basic/skin/member/basic/password_lost.skin.php | 8 ++++---- 4 files changed, 17 insertions(+), 16 deletions(-) diff --git a/mobile/skin/member/basic/password_lost.skin.php b/mobile/skin/member/basic/password_lost.skin.php index c912d0746..10ccb24a8 100644 --- a/mobile/skin/member/basic/password_lost.skin.php +++ b/mobile/skin/member/basic/password_lost.skin.php @@ -18,12 +18,12 @@ add_stylesheet('', +
+ + +
-
- - -