From b810a24d0acc14d9159d95708be9634511a98fd2 Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Fri, 15 Nov 2019 18:31:25 +0900
Subject: [PATCH] =?UTF-8?q?[KVE-2019-1424]=EC=98=81=EC=B9=B4=ED=8A=B8=20St?=
 =?UTF-8?q?ored=20XSS=20=EC=B7=A8=EC=95=BD=EC=A0=90=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/shop_admin/personalpayformupdate.php | 4 ++++
 adm/shop_admin/personalpaylist.php       | 2 +-
 shop/personalpayform.php                 | 2 ++
 3 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/adm/shop_admin/personalpayformupdate.php b/adm/shop_admin/personalpayformupdate.php
index 16ab97c8b..a94afb41f 100644
--- a/adm/shop_admin/personalpayformupdate.php
+++ b/adm/shop_admin/personalpayformupdate.php
@@ -4,6 +4,10 @@ include_once('./_common.php');
 
 check_admin_token();
 
+if( isset($_POST['pp_name']) ){
+	$_POST['pp_name'] = strip_tags($_POST['pp_name']);
+}
+
 if($w == 'd') {
     auth_check($auth[$sub_menu], 'd');
 
diff --git a/adm/shop_admin/personalpaylist.php b/adm/shop_admin/personalpaylist.php
index 738aaaad0..9153ccce1 100644
--- a/adm/shop_admin/personalpaylist.php
+++ b/adm/shop_admin/personalpaylist.php
@@ -115,7 +115,7 @@ $colspan = 10;
             <input type="hidden" id="pp_id_<?php echo $i; ?>" name="pp_id[<?php echo $i; ?>]" value="<?php echo $row['pp_id']; ?>">
             <input type="checkbox" id="chk_<?php echo $i; ?>" name="chk[]" value="<?php echo $i; ?>" title="내역선택">
         </td>
-        <td class="td_left"><?php echo $row['pp_name']; ?></td>
+        <td class="td_left"><?php echo get_text($row['pp_name']); ?></td>
         <td class="td_odrnum3"><?php echo $od_id; ?></td>
         <td class="td_numsum"><?php echo number_format($row['pp_price']); ?></td>
         <td class="td_numincome"><?php echo number_format($row['pp_receipt_price']); ?></td>
diff --git a/shop/personalpayform.php b/shop/personalpayform.php
index 4975c5898..539dbb0d8 100644
--- a/shop/personalpayform.php
+++ b/shop/personalpayform.php
@@ -13,6 +13,8 @@ if(!$pp['pp_id'])
 if($pp['pp_tno'])
     alert('이미 결제하신 개인결제 내역입니다.');
 
+$pp['pp_name'] = strip_tags($pp['pp_name']);
+
 $g5['title'] = $pp['pp_name'].'님 개인결제';
 
 if(G5_IS_MOBILE)