From d7d5f265244ea869582d2f8d372eac14c2cef16b Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Tue, 30 Jun 2026 01:59:22 +0000
Subject: [PATCH] =?UTF-8?q?[KVE-2026-1233]=EC=B7=A8=EC=95=BD=EC=A0=90-=20?=
 =?UTF-8?q?=EA=B2=8C=EC=8B=9C=EA=B8=80=20=EC=A1=B0=ED=9A=8C=20=EC=8B=9C=20?=
 =?UTF-8?q?wr=5Fid=20=EC=A0=95=EC=88=98=20=EC=B2=98=EB=A6=AC=20=EB=B3=B4?=
 =?UTF-8?q?=EC=99=84?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- get_write() 진입 시 wr_id를 정수로 캐스팅하여 SQL 조건에 비정상 값이 전달되지 않도록 보완

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 lib/common.lib.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/common.lib.php b/lib/common.lib.php
index 0c50849ef..f39ffe096 100644
--- a/lib/common.lib.php
+++ b/lib/common.lib.php
@@ -924,6 +924,8 @@ function get_write($write_table, $wr_id, $is_cache=false)
 {
     global $g5, $g5_object;
 
+    $wr_id = (int) $wr_id;
+
     $wr_bo_table = preg_replace('/^'.preg_quote($g5['write_prefix']).'/i', '', $write_table);
 
     $write = $g5_object->get('bbs', $wr_id, $wr_bo_table);