fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-04-26 22:02:13 +09:00
Code Issues Projects Releases Packages Wiki Activity

fix #1978 회원정보의 서명에서 발생할 수 있는 취약점 해결

Browse source
This commit is contained in:
bnu 2016-10-27 18:06:04 +09:00 • committed by Kijin Sung
parent b7c2e9b7d0
commit 0765c73d04
2 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
modules/member/member.controller.php
View file

@ -1499,6 +1499,7 @@ class memberController extends member
{
$signature = trim(removeHackTag($signature));
$signature = preg_replace('/<(\/?)(embed|object|param)/is', '&lt;$1$2', $signature);
$signature = removeHackTag($signature);
$check_signature = trim(str_replace(array('&nbsp;',"\n","\r"),'',strip_tags($signature,'<img><object>')));
$path = sprintf('files/member_extra_info/signature/%s/', getNumberingPath($member_srl));