SQL Injection 취약점 수정

bbs/faq.php

@@ -55,6 +55,7 @@ if(is_file($skin_file)) {
     $faq_list = array();
 
     $stx = trim($stx);
+    $sql_search = '';
 
     if($stx) {
        $sql_search = " and ( INSTR(fa_subject, '$stx') > 0 or INSTR(fa_content, '$stx') > 0 ) ";

bbs/list.php

@@ -149,6 +149,7 @@ if (!$sst) {
     $sst = preg_match("/^(wr_datetime|wr_hit|wr_good|wr_nogood)$/i", $sst) ? $sst : "";
 }
 
+$sql_order = '';
 if ($sst) {
     $sql_order = " order by {$sst} {$sod} ";
 }