thisgun and Claude Opus 4.8 1fa4467cd1
[security] 주문 관련 필드 출력 시 get_text 인코딩 적용 ...
영카트 주문자명/받는분/입금자명(od_name, od_b_name, od_deposit_name)
이 일부 출력 지점에서 인코딩 없이 노출되어, 저장된 값이 HTML/속성
컨텍스트에서 그대로 렌더링되던 문제 수정. 다음 출력에 get_text() 적용:
- adm/shop_admin/orderform.php, sale1today.php (관리자 주문 화면)
- shop/orderinquiryview.php (PC/모바일/테마 주문조회)
- shop/{inicis,kcp,lg,nicepay,toss}/taxsave_form.php (현금영수증 발행 폼)
- shop/mail/orderupdate{1,2,3}.mail.php, ordermail.mail.php (주문 메일)
비회원 주문 시 입력값이 관리자 화면에서 실행될 수 있는 경로를 차단.
폼 value 의 엔티티는 브라우저 제출 시 디코딩되므로 PG 전송값 및
정상 표시에는 영향 없음.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-05-29 06:25:12 +00:00
2018-03-30 18:12:51 +09:00
2026-05-29 06:25:12 +00:00
2026-03-30 11:50:30 +00:00
2026-05-29 06:25:12 +00:00
2026-05-29 06:25:12 +00:00
2026-05-29 06:25:12 +00:00
2025-11-14 07:30:47 +00:00
2026-05-29 06:25:12 +00:00
2022-01-19 06:16:31 +00:00
2026-05-29 06:25:12 +00:00
2022-03-22 12:52:36 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-05-26 03:30:19 +00:00
2022-06-13 14:28:35 +09:00
2021-01-04 15:39:15 +09:00
2023-01-20 11:17:20 +09:00
2021-01-04 15:39:15 +09:00
2026-03-25 09:18:48 +00:00
2023-04-17 12:16:12 +09:00
2021-01-04 15:39:15 +09:00
2026-04-16 02:02:26 +00:00
2019-12-02 10:29:31 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2024-02-14 19:09:20 +09:00
2021-02-26 17:11:57 +09:00
2023-12-18 17:26:30 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-04-16 02:02:26 +00:00
2026-05-26 06:32:28 +00:00
2026-04-16 03:46:02 +00:00
2021-01-04 15:39:15 +09:00
2025-09-19 17:53:50 +09:00
2025-09-19 17:53:50 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-04-16 02:02:26 +00:00
2026-05-26 06:32:28 +00:00
2021-01-04 15:39:15 +09:00
2026-03-31 01:21:11 +00:00
2023-07-04 18:37:23 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-04-16 02:02:26 +00:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-04-16 02:26:59 +00:00
2026-05-26 11:46:36 +00:00
2026-04-16 02:15:29 +00:00
2026-04-16 02:15:29 +00:00
2026-04-16 02:15:29 +00:00
2026-05-29 06:25:12 +00:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2024-04-03 10:42:04 +09:00
2025-09-16 16:34:15 +09:00
2026-04-16 02:46:49 +00:00
2026-04-16 02:15:29 +00:00
2026-04-16 02:26:59 +00:00
2025-09-19 17:53:50 +09:00
2025-06-05 16:11:20 +09:00
2021-01-04 15:39:15 +09:00
2025-09-19 17:53:50 +09:00
2021-01-04 15:39:15 +09:00
2025-09-19 17:53:50 +09:00
2021-01-04 15:39:15 +09:00
2025-11-14 07:30:47 +00:00
2026-04-16 03:46:02 +00:00
2024-04-03 10:42:04 +09:00
2026-05-26 09:34:18 +00:00
2025-09-16 16:34:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-04-16 02:43:22 +00:00
2021-01-04 15:39:15 +09:00
2021-03-16 11:01:52 +09:00
