thisgun and Claude Opus 4.8 31871ee3e6
[security] 주문자 휴대폰 출력 인코딩 및 리다이렉트 URL 호스트 검증 ...
- adm/shop_admin/orderform.php: 주문상세 hidden 의 od_hp 출력에
get_text() 적용 (인접한 od_name 과 동일 처리, 누락분 보완)
- bbs/member_cert_refresh_update.php: 본인확인 갱신 후 이동 URL 에
check_url_host() 적용
- plugin/social/includes/functions.php: 소셜 로그인/연동 후 이동
URL 2곳에 동일하게 check_url_host() 적용
login_check.php 등 기존 코드와 동일한 호스트 검증 패턴으로,
같은 도메인/상대경로 복귀는 그대로 동작하고 타 도메인 이동만 차단.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-05-29 09:16:29 +00:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2024-06-04 17:38:33 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2022-06-13 14:28:35 +09:00
2026-04-16 02:26:59 +00:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-04-16 02:54:05 +00:00
2026-04-16 02:54:05 +00:00
2026-04-16 02:54:05 +00:00
2022-06-13 14:28:35 +09:00
2026-05-28 06:23:04 +00:00
2026-05-28 06:23:04 +00:00
2023-01-02 17:58:22 +09:00
2026-04-16 03:23:00 +00:00
2023-01-02 17:58:22 +09:00
2022-06-13 14:28:45 +09:00
2021-01-04 15:39:15 +09:00
2023-01-09 15:33:03 +09:00
2021-01-04 15:39:15 +09:00
2025-07-31 17:12:43 +09:00
2021-01-04 15:39:15 +09:00
2025-03-31 15:36:32 +09:00
2021-04-02 11:40:50 +09:00
2022-09-27 17:15:46 +09:00
2021-01-04 15:39:15 +09:00
2026-04-16 03:35:29 +00:00
2023-03-23 11:10:28 +09:00
2026-04-16 03:18:19 +00:00
2021-01-04 15:39:15 +09:00
2026-04-16 01:07:17 +00:00
2021-01-04 15:39:15 +09:00
2025-05-14 11:59:40 +09:00
2026-05-26 06:32:28 +00:00
2026-04-16 02:21:23 +00:00
2024-07-03 12:50:12 +09:00
2026-04-16 01:31:19 +00:00
2026-05-29 09:16:29 +00:00
2021-10-07 06:08:38 +00:00
2024-07-03 12:50:12 +09:00
2022-11-22 19:36:35 +09:00
2021-01-04 15:39:15 +09:00
2026-04-16 03:23:00 +00:00
2026-04-16 03:35:29 +00:00
2021-01-04 15:39:15 +09:00
2022-03-11 11:01:15 +09:00
2026-05-26 03:32:18 +00:00
2021-05-10 11:37:20 +09:00
2026-04-16 02:26:59 +00:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-04-16 03:39:12 +00:00
2021-01-04 15:39:15 +09:00
2021-09-30 16:07:55 +09:00
2022-04-18 16:51:53 +09:00
2022-06-15 16:11:06 +09:00
2025-04-15 11:20:44 +09:00
2021-01-13 11:48:34 +09:00
2013-09-13 11:03:33 +09:00
2026-04-16 03:23:00 +00:00
2026-04-16 03:38:41 +00:00
2026-04-16 03:23:00 +00:00
2021-01-04 15:39:15 +09:00
2023-08-11 19:41:25 +09:00
2021-01-04 15:39:15 +09:00
2023-01-02 17:58:22 +09:00
2026-04-16 02:26:59 +00:00
2023-01-02 17:58:22 +09:00
2023-01-03 14:53:08 +09:00
2026-04-16 03:39:31 +00:00
2026-04-16 02:26:59 +00:00
2026-04-16 03:46:02 +00:00
2026-04-16 03:35:29 +00:00
2013-09-13 14:32:06 +09:00
2014-01-20 10:09:14 +09:00
2014-02-06 13:38:07 +09:00
2026-05-26 11:46:36 +00:00
2026-04-16 03:46:02 +00:00
2025-04-15 11:20:44 +09:00
2021-01-04 15:39:15 +09:00
2026-05-29 01:33:45 +00:00
2021-01-04 15:39:15 +09:00
2021-01-06 09:59:33 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-04-16 02:29:32 +00:00
2021-01-04 15:39:15 +09:00
2026-04-16 02:29:32 +00:00
2021-06-22 16:07:02 +09:00
2026-04-16 02:29:32 +00:00
2026-05-26 09:34:18 +00:00
2025-05-15 15:30:40 +09:00
2026-04-16 03:35:29 +00:00
2021-01-04 15:39:15 +09:00
2022-06-13 14:28:35 +09:00
2014-03-18 17:17:11 +09:00
2026-05-29 07:22:08 +00:00
2026-01-27 05:50:34 +00:00
