From 9810fd7475df29d1c30db19667f9954cbd7e2953 Mon Sep 17 00:00:00 2001 From: thisgun Date: Wed, 6 Sep 2017 19:19:14 +0900 Subject: [PATCH] =?UTF-8?q?=EC=98=81=EC=B9=B4=ED=8A=B8=20Reflected=20XSS?= =?UTF-8?q?=20=EC=B7=A8=EC=95=BD=EC=A0=90=20=EC=88=98=EC=A0=95(=2017-0558?= =?UTF-8?q?=20)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- adm/shop_admin/bannerformupdate.php | 2 ++ mobile/skin/shop/basic/mainbanner.10.skin.php | 2 +- shop/bannerhit.php | 11 +++++++++++ skin/shop/basic/boxbanner.skin.php | 2 +- skin/shop/basic/mainbanner.10.skin.php | 2 +- .../mobile/skin/shop/basic/mainbanner.10.skin.php | 2 +- theme/basic/skin/shop/basic/boxbanner.skin.php | 2 +- theme/basic/skin/shop/basic/mainbanner.10.skin.php | 2 +- 8 files changed, 19 insertions(+), 6 deletions(-) diff --git a/adm/shop_admin/bannerformupdate.php b/adm/shop_admin/bannerformupdate.php index e260fe920..83b2767bb 100644 --- a/adm/shop_admin/bannerformupdate.php +++ b/adm/shop_admin/bannerformupdate.php @@ -34,6 +34,8 @@ if( $bn_bimg || $bn_bimg_name ){ } } +$bn_url = clean_xss_tags($bn_url); + if ($w=="") { if (!$bn_bimg_name) alert('배너 이미지를 업로드 하세요.'); diff --git a/mobile/skin/shop/basic/mainbanner.10.skin.php b/mobile/skin/shop/basic/mainbanner.10.skin.php index a1f80c066..4dc099d20 100644 --- a/mobile/skin/shop/basic/mainbanner.10.skin.php +++ b/mobile/skin/shop/basic/mainbanner.10.skin.php @@ -39,7 +39,7 @@ for ($i=0; $row=sql_fetch_array($result); $i++) if ($row['bn_url'][0] == '#') $banner .= ''; else if ($row['bn_url'] && $row['bn_url'] != 'http://') { - $banner .= ''; + $banner .= ''; } echo $banner.''.$row['bn_alt'].''; if($banner) diff --git a/shop/bannerhit.php b/shop/bannerhit.php index ee19b4315..140cf5a82 100644 --- a/shop/bannerhit.php +++ b/shop/bannerhit.php @@ -1,6 +1,15 @@ diff --git a/skin/shop/basic/boxbanner.skin.php b/skin/shop/basic/boxbanner.skin.php index 940fda89b..9b71f6dfd 100644 --- a/skin/shop/basic/boxbanner.skin.php +++ b/skin/shop/basic/boxbanner.skin.php @@ -25,7 +25,7 @@ for ($i=0; $row=sql_fetch_array($result); $i++) if ($row['bn_url'][0] == '#') $banner .= ''; else if ($row['bn_url'] && $row['bn_url'] != 'http://') { - $banner .= ''; + $banner .= ''; } echo $banner.''.$row['bn_alt'].''; if($banner) diff --git a/skin/shop/basic/mainbanner.10.skin.php b/skin/shop/basic/mainbanner.10.skin.php index f68246456..35caa8462 100644 --- a/skin/shop/basic/mainbanner.10.skin.php +++ b/skin/shop/basic/mainbanner.10.skin.php @@ -37,7 +37,7 @@ for ($i=0; $row=sql_fetch_array($result); $i++) if ($row['bn_url'][0] == '#') $banner .= ''; else if ($row['bn_url'] && $row['bn_url'] != 'http://') { - $banner .= ''; + $banner .= ''; } echo $banner.''.$row['bn_alt'].''; if($banner) diff --git a/theme/basic/mobile/skin/shop/basic/mainbanner.10.skin.php b/theme/basic/mobile/skin/shop/basic/mainbanner.10.skin.php index a1f80c066..4dc099d20 100644 --- a/theme/basic/mobile/skin/shop/basic/mainbanner.10.skin.php +++ b/theme/basic/mobile/skin/shop/basic/mainbanner.10.skin.php @@ -39,7 +39,7 @@ for ($i=0; $row=sql_fetch_array($result); $i++) if ($row['bn_url'][0] == '#') $banner .= ''; else if ($row['bn_url'] && $row['bn_url'] != 'http://') { - $banner .= ''; + $banner .= ''; } echo $banner.''.$row['bn_alt'].''; if($banner) diff --git a/theme/basic/skin/shop/basic/boxbanner.skin.php b/theme/basic/skin/shop/basic/boxbanner.skin.php index 940fda89b..9b71f6dfd 100644 --- a/theme/basic/skin/shop/basic/boxbanner.skin.php +++ b/theme/basic/skin/shop/basic/boxbanner.skin.php @@ -25,7 +25,7 @@ for ($i=0; $row=sql_fetch_array($result); $i++) if ($row['bn_url'][0] == '#') $banner .= ''; else if ($row['bn_url'] && $row['bn_url'] != 'http://') { - $banner .= ''; + $banner .= ''; } echo $banner.''.$row['bn_alt'].''; if($banner) diff --git a/theme/basic/skin/shop/basic/mainbanner.10.skin.php b/theme/basic/skin/shop/basic/mainbanner.10.skin.php index f68246456..35caa8462 100644 --- a/theme/basic/skin/shop/basic/mainbanner.10.skin.php +++ b/theme/basic/skin/shop/basic/mainbanner.10.skin.php @@ -37,7 +37,7 @@ for ($i=0; $row=sql_fetch_array($result); $i++) if ($row['bn_url'][0] == '#') $banner .= ''; else if ($row['bn_url'] && $row['bn_url'] != 'http://') { - $banner .= ''; + $banner .= ''; } echo $banner.''.$row['bn_alt'].''; if($banner)