From f7194bdd92f396a8ec913999add64b86ce33466d Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Tue, 3 Mar 2020 11:50:14 +0900
Subject: [PATCH] =?UTF-8?q?[KVE-2020-0097]=EC=98=81=EC=B9=B4=ED=8A=B8=5F?=
 =?UTF-8?q?=ED=8C=8C=EC=9D=BC=EA=B2=BD=EB=A1=9C=5FRCE=20=EC=B7=A8=EC=95=BD?=
 =?UTF-8?q?=EC=A0=90=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/shop_admin/categoryformupdate.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/adm/shop_admin/categoryformupdate.php b/adm/shop_admin/categoryformupdate.php
index 2d7b37b3e..d05204169 100644
--- a/adm/shop_admin/categoryformupdate.php
+++ b/adm/shop_admin/categoryformupdate.php
@@ -56,6 +56,11 @@ foreach( $check_str_keys as $key ){
 $ca_include_head = $_POST['ca_include_head'];
 $ca_include_tail = $_POST['ca_include_tail'];
 
+if( function_exists('filter_input_include_path') ){
+    $ca_include_head = filter_input_include_path($ca_include_head);
+    $ca_include_tail = filter_input_include_path($ca_include_tail);
+}
+
 if ($w == "u" || $w == "d")
     check_demo();