diff --git a/adm/shop_admin/itemform.php b/adm/shop_admin/itemform.php
index f76bbc76f..2b90ffc16 100644
--- a/adm/shop_admin/itemform.php
+++ b/adm/shop_admin/itemform.php
@@ -582,7 +582,7 @@ $(function(){
상품선택옵션 |
-
+ 옵션명과 옵션항목에 따옴표(\', ")는 입력할 수 없습니다.'); ?>
상품선택옵션 입력
@@ -740,7 +740,7 @@ $(function(){
| 상품추가옵션 |
-
+ 옵션명과 옵션항목에 따옴표(\', ")는 입력할 수 없습니다.'); ?>
상품추가옵션 입력
diff --git a/adm/shop_admin/itemoption.php b/adm/shop_admin/itemoption.php
index 98cef6300..a078a46c4 100644
--- a/adm/shop_admin/itemoption.php
+++ b/adm/shop_admin/itemoption.php
@@ -14,13 +14,13 @@ if($it['it_id']) {
if(mysql_num_rows($result))
$po_run = true;
} else if(!empty($_POST)) {
- $opt1_subject = trim($_POST['opt1_subject']);
- $opt2_subject = trim($_POST['opt2_subject']);
- $opt3_subject = trim($_POST['opt3_subject']);
+ $opt1_subject = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['opt1_subject'])));
+ $opt2_subject = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['opt2_subject'])));
+ $opt3_subject = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['opt3_subject'])));
- $opt1_val = trim($_POST['opt1']);
- $opt2_val = trim($_POST['opt2']);
- $opt3_val = trim($_POST['opt3']);
+ $opt1_val = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['opt1'])));
+ $opt2_val = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['opt2'])));
+ $opt3_val = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['opt3'])));
if(!$opt1_subject || !$opt1_val) {
echo '옵션1과 옵션1 항목을 입력해 주십시오.';
diff --git a/adm/shop_admin/itemsupply.php b/adm/shop_admin/itemsupply.php
index 41b8e32bc..4b018e980 100644
--- a/adm/shop_admin/itemsupply.php
+++ b/adm/shop_admin/itemsupply.php
@@ -84,12 +84,12 @@ if($ps_run) {
} // for
} else {
for($i=0; $i<$subject_count; $i++) {
- $spl_subject = trim($_POST['subject'][$i]);
- $spl_val = explode(',', trim($_POST['supply'][$i]));
+ $spl_subject = preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['subject'][$i])));
+ $spl_val = explode(',', preg_replace('/[\'\"]/', '', trim(stripslashes($_POST['supply'][$i]))));
$spl_count = count($spl_val);
for($j=0; $j<$spl_count; $j++) {
- $spl = trim($spl_val[$j]);
+ $spl = strip_tags(trim($spl_val[$j]));
if($spl_subject && $spl) {
$spl_id = $spl_subject.chr(30).$spl;
$spl_price = 0;
| |