gper/Gnuboard5
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[KVE-2026-0554]그누보드,영카트 SQL Injection 취약점 수정

Browse Source
This commit is contained in:
thisgun committed 2026-03-30 09:52:41 +00:00
1 parent 60d37b853b
commit b2c0e1af29
4 files changed
+8 -7
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

bbs/write_comment_update.php
+3 -2
View File
@@ -16,7 +16,8 @@ if (substr_count($wr_content, "&#") > 50) {
}
$w = isset($_POST['w']) ? clean_xss_tags($_POST['w']) : '';
$wr_name = isset($_POST['wr_name']) ? clean_xss_tags(trim($_POST['wr_name'])) : '';
$wr_name = isset($_POST['wr_name']) ? addslashes(clean_xss_tags(stripslashes(trim($_POST['wr_name'])))) : '';
$wr_name = preg_replace("#[\\\]+$#", "", $wr_name);
$wr_secret = isset($_POST['wr_secret']) ? clean_xss_tags($_POST['wr_secret']) : '';
$wr_email = $wr_subject = '';
$reply_array = array();
@@ -33,7 +34,7 @@ $wr_9 = isset($_POST['wr_9']) ? $_POST['wr_9'] : '';
$wr_10 = isset($_POST['wr_10']) ? $_POST['wr_10'] : '';
$wr_facebook_user = isset($_POST['wr_facebook_user']) ? clean_xss_tags($_POST['wr_facebook_user'], 1, 1) : '';
$wr_twitter_user = isset($_POST['wr_twitter_user']) ? clean_xss_tags($_POST['wr_twitter_user'], 1, 1) : '';
$wr_homepage = isset($_POST['wr_homepage']) ? clean_xss_tags($_POST['wr_homepage'], 1, 1) : '';
$wr_homepage = isset($_POST['wr_homepage']) ? addslashes(clean_xss_tags(stripslashes($_POST['wr_homepage']), 1, 1)) : '';
if (!empty($_POST['wr_email']))
$wr_email = get_email_address(trim($_POST['wr_email']));