From c3db9b454e05936d0e53422d46cd80ba75a2161d Mon Sep 17 00:00:00 2001 From: thisgun Date: Mon, 30 Mar 2026 11:50:30 +0000 Subject: [PATCH] =?UTF-8?q?[KVE-2026-0569]=EA=B7=B8=EB=88=84=EB=B3=B4?= =?UTF-8?q?=EB=93=9C,=EC=98=81=EC=B9=B4=ED=8A=B8=20SQL=20Injection=20?= =?UTF-8?q?=EC=B7=A8=EC=95=BD=EC=A0=90=20=EC=88=98=EC=A0=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- adm/shop_admin/inorderformupdate.php | 28 +++++++++++++-------------- bbs/register_form_update.php | 12 ++++++------ mobile/shop/inicis/pay_approval.php | 8 ++++---- mobile/shop/inicis/settle_common.php | 8 ++++---- mobile/shop/orderformupdate.php | 2 +- shop/kakaopay/mobile_pay_approval.php | 8 ++++---- shop/orderformupdate.php | 2 +- 7 files changed, 34 insertions(+), 34 deletions(-) diff --git a/adm/shop_admin/inorderformupdate.php b/adm/shop_admin/inorderformupdate.php index c9b986dfb..8ea1428b6 100644 --- a/adm/shop_admin/inorderformupdate.php +++ b/adm/shop_admin/inorderformupdate.php @@ -212,28 +212,28 @@ if($data['od_settle_case'] == 'KAKAOPAY') $od_pg = 'KAKAOPAY'; $od_email = get_email_address($data['od_email']); -$od_name = clean_xss_tags($data['od_name']); -$od_tel = clean_xss_tags($data['od_tel']); -$od_hp = clean_xss_tags($data['od_hp']); +$od_name = addslashes(clean_xss_tags($data['od_name'])); +$od_tel = addslashes(clean_xss_tags($data['od_tel'])); +$od_hp = addslashes(clean_xss_tags($data['od_hp'])); $od_zip = preg_replace('/[^0-9]/', '', $data['od_zip']); $od_zip1 = substr($od_zip, 0, 3); $od_zip2 = substr($od_zip, 3); -$od_addr1 = clean_xss_tags($data['od_addr1']); -$od_addr2 = clean_xss_tags($data['od_addr2']); -$od_addr3 = clean_xss_tags($data['od_addr3']); +$od_addr1 = addslashes(clean_xss_tags($data['od_addr1'])); +$od_addr2 = addslashes(clean_xss_tags($data['od_addr2'])); +$od_addr3 = addslashes(clean_xss_tags($data['od_addr3'])); $od_addr_jibeon = preg_match("/^(N|R)$/", $data['od_addr_jibeon']) ? $data['od_addr_jibeon'] : ''; -$od_b_name = clean_xss_tags($data['od_b_name']); -$od_b_tel = clean_xss_tags($data['od_b_tel']); -$od_b_hp = clean_xss_tags($data['od_b_hp']); +$od_b_name = addslashes(clean_xss_tags($data['od_b_name'])); +$od_b_tel = addslashes(clean_xss_tags($data['od_b_tel'])); +$od_b_hp = addslashes(clean_xss_tags($data['od_b_hp'])); $od_b_zip = preg_replace('/[^0-9]/', '', $data['od_b_zip']); $od_b_zip1 = substr($od_b_zip, 0, 3); $od_b_zip2 = substr($od_b_zip, 3); -$od_b_addr1 = clean_xss_tags($data['od_b_addr1']); -$od_b_addr2 = clean_xss_tags($data['od_b_addr2']); -$od_b_addr3 = clean_xss_tags($data['od_b_addr3']); +$od_b_addr1 = addslashes(clean_xss_tags($data['od_b_addr1'])); +$od_b_addr2 = addslashes(clean_xss_tags($data['od_b_addr2'])); +$od_b_addr3 = addslashes(clean_xss_tags($data['od_b_addr3'])); $od_b_addr_jibeon = preg_match("/^(N|R)$/", $data['od_b_addr_jibeon']) ? $data['od_b_addr_jibeon'] : ''; -$od_memo = clean_xss_tags($data['od_memo'], 0, 1, 0, 0); -$od_deposit_name = clean_xss_tags($data['od_deposit_name']); +$od_memo = addslashes(clean_xss_tags($data['od_memo'], 0, 1, 0, 0)); +$od_deposit_name = addslashes(clean_xss_tags($data['od_deposit_name'])); $od_tax_flag = $default['de_tax_flag_use']; $od_receipt_price = $tot_ct_price + $od_send_cost + $od_send_cost2 - ($od_temp_point + $tot_cp_price + $tot_sc_cp_price); $od_receipt_point = $od_temp_point; diff --git a/bbs/register_form_update.php b/bbs/register_form_update.php index 76dc5c1be..e5138519e 100644 --- a/bbs/register_form_update.php +++ b/bbs/register_form_update.php @@ -63,15 +63,15 @@ $mb_7 = isset($_POST['mb_7']) ? trim($_POST['mb_7']) $mb_8 = isset($_POST['mb_8']) ? trim($_POST['mb_8']) : ""; $mb_9 = isset($_POST['mb_9']) ? trim($_POST['mb_9']) : ""; $mb_10 = isset($_POST['mb_10']) ? trim($_POST['mb_10']) : ""; -$mb_name = clean_xss_tags($mb_name, 1, 1); +$mb_name = addslashes(clean_xss_tags(stripslashes($mb_name), 1, 1)); $mb_email = get_email_address($mb_email); -$mb_homepage = clean_xss_tags($mb_homepage, 1, 1); -$mb_tel = clean_xss_tags($mb_tel, 1, 1); +$mb_homepage = addslashes(clean_xss_tags(stripslashes($mb_homepage), 1, 1)); +$mb_tel = addslashes(clean_xss_tags(stripslashes($mb_tel), 1, 1)); $mb_zip1 = preg_replace('/[^0-9]/', '', $mb_zip1); $mb_zip2 = preg_replace('/[^0-9]/', '', $mb_zip2); -$mb_addr1 = clean_xss_tags($mb_addr1, 1, 1); -$mb_addr2 = clean_xss_tags($mb_addr2, 1, 1); -$mb_addr3 = clean_xss_tags($mb_addr3, 1, 1); +$mb_addr1 = addslashes(clean_xss_tags(stripslashes($mb_addr1), 1, 1)); +$mb_addr2 = addslashes(clean_xss_tags(stripslashes($mb_addr2), 1, 1)); +$mb_addr3 = addslashes(clean_xss_tags(stripslashes($mb_addr3), 1, 1)); $mb_addr_jibeon = preg_match("/^(N|R)$/", $mb_addr_jibeon) ? $mb_addr_jibeon : ''; $mb_marketing_agree = isset($_POST['mb_marketing_agree']) ? trim($_POST['mb_marketing_agree']) : "0"; diff --git a/mobile/shop/inicis/pay_approval.php b/mobile/shop/inicis/pay_approval.php index 04e63fbec..3dd76e7de 100644 --- a/mobile/shop/inicis/pay_approval.php +++ b/mobile/shop/inicis/pay_approval.php @@ -132,10 +132,10 @@ if(isset($data['pp_id']) && !empty($data['pp_id'])) { } $good_mny = isset($PAY['P_AMT']) ? $PAY['P_AMT'] : 0; - $pp_name = clean_xss_tags($data['pp_name']); - $pp_email = clean_xss_tags($data['pp_email']); - $pp_hp = clean_xss_tags($data['pp_hp']); - $pp_settle_case = clean_xss_tags($data['pp_settle_case']); + $pp_name = addslashes(clean_xss_tags($data['pp_name'])); + $pp_email = addslashes(clean_xss_tags($data['pp_email'])); + $pp_hp = addslashes(clean_xss_tags($data['pp_hp'])); + $pp_settle_case = addslashes(clean_xss_tags($data['pp_settle_case'])); $_POST['P_HASH'] = $hash; $_POST['P_AUTH_NO'] = isset($PAY['P_AUTH_NO']) ? $PAY['P_AUTH_NO'] : ''; diff --git a/mobile/shop/inicis/settle_common.php b/mobile/shop/inicis/settle_common.php index 5a8773bec..17b7e857c 100644 --- a/mobile/shop/inicis/settle_common.php +++ b/mobile/shop/inicis/settle_common.php @@ -124,10 +124,10 @@ if($PGIP == "211.219.96.165" || $PGIP == "118.129.210.25" || $PGIP == "183.109.7 } $good_mny = $P_AMT; - $pp_name = clean_xss_tags($data['pp_name']); - $pp_email = clean_xss_tags($data['pp_email']); - $pp_hp = clean_xss_tags($data['pp_hp']); - $pp_settle_case = clean_xss_tags($data['pp_settle_case']); + $pp_name = addslashes(clean_xss_tags($data['pp_name'])); + $pp_email = addslashes(clean_xss_tags($data['pp_email'])); + $pp_hp = addslashes(clean_xss_tags($data['pp_hp'])); + $pp_settle_case = addslashes(clean_xss_tags($data['pp_settle_case'])); set_session('P_TID', $P_TID); set_session('P_AMT', $P_AMT); diff --git a/mobile/shop/orderformupdate.php b/mobile/shop/orderformupdate.php index 1bdcd5ff4..638c4a88d 100644 --- a/mobile/shop/orderformupdate.php +++ b/mobile/shop/orderformupdate.php @@ -1002,7 +1002,7 @@ if($is_member) { sql_query($sql); } - $ad_subject = clean_xss_tags($ad_subject); + $ad_subject = addslashes(clean_xss_tags(stripslashes($ad_subject))); if($row['ad_id']){ $sql = " update {$g5['g5_shop_order_address_table']} diff --git a/shop/kakaopay/mobile_pay_approval.php b/shop/kakaopay/mobile_pay_approval.php index 58cf413b5..de3e3c55b 100644 --- a/shop/kakaopay/mobile_pay_approval.php +++ b/shop/kakaopay/mobile_pay_approval.php @@ -138,10 +138,10 @@ if(isset($data['pp_id']) && !empty($data['pp_id'])) { } $good_mny = $PAY['P_AMT']; - $pp_name = clean_xss_tags($data['pp_name']); - $pp_email = clean_xss_tags($data['pp_email']); - $pp_hp = clean_xss_tags($data['pp_hp']); - $pp_settle_case = clean_xss_tags($data['pp_settle_case']); + $pp_name = addslashes(clean_xss_tags($data['pp_name'])); + $pp_email = addslashes(clean_xss_tags($data['pp_email'])); + $pp_hp = addslashes(clean_xss_tags($data['pp_hp'])); + $pp_settle_case = addslashes(clean_xss_tags($data['pp_settle_case'])); $_POST['P_HASH'] = $hash; $_POST['P_AUTH_NO'] = $PAY['P_AUTH_NO']; diff --git a/shop/orderformupdate.php b/shop/orderformupdate.php index b3d091420..d4ce3d575 100644 --- a/shop/orderformupdate.php +++ b/shop/orderformupdate.php @@ -953,7 +953,7 @@ if($is_member) { sql_query($sql); } - $ad_subject = isset($_POST['ad_subject']) ? clean_xss_tags($_POST['ad_subject']) : ''; + $ad_subject = isset($_POST['ad_subject']) ? addslashes(clean_xss_tags(stripslashes($_POST['ad_subject']))) : ''; if(isset($row['ad_id']) && $row['ad_id']){ $sql = " update {$g5['g5_shop_order_address_table']}