From 158609ddce691bdf089345e34299cc9e39d55eae Mon Sep 17 00:00:00 2001
From: Lastorder-DC <18280396+Lastorder-DC@users.noreply.github.com>
Date: Wed, 24 Dec 2025 21:36:28 +0900
Subject: [PATCH] fanbinit 12-24

---
 modules/board/board.view.php     | 2 +-
 modules/file/file.controller.php | 9 +++++++--
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/modules/board/board.view.php b/modules/board/board.view.php
index 371d2f805..f0800b926 100644
--- a/modules/board/board.view.php
+++ b/modules/board/board.view.php
@@ -20,7 +20,7 @@ class BoardView extends Board
 	public function init()
 	{
 		$oSecurity = new Security();
-		$oSecurity->encodeHTML('document_srl', 'comment_srl', 'vid', 'mid', 'page', 'category', 'search_target', 'search_keyword', 'sort_index', 'order_type', 'trackback_srl');
+		$oSecurity->encodeHTML('document_srl', 'comment_srl', 'vid', 'mid', 'page', 'category', 'search_target', 'search_keyword', 'sort_index', 'order_type', 'trackback_srl', 'v_mode');
 
 		/**
 		 * setup the module general information
diff --git a/modules/file/file.controller.php b/modules/file/file.controller.php
index ba8876dbf..4b4e7afcb 100644
--- a/modules/file/file.controller.php
+++ b/modules/file/file.controller.php
@@ -1048,13 +1048,18 @@ class FileController extends File
 		if(!$uploaded_filename)
 		{
 			$extension = ($direct && $file_info['extension']) ? ('.' . $file_info['extension']) : '';
-			$uploaded_filename = $storage_path . Rhymix\Framework\Security::getRandom(32, 'hex') . $extension;
+			$random_filename = Rhymix\Framework\Security::getRandom(32, 'hex');
+			$uploaded_filename = $storage_path . $random_filename . $extension;
 			while(file_exists($uploaded_filename))
 			{
-				$uploaded_filename = $storage_path . Rhymix\Framework\Security::getRandom(32, 'hex') . $extension;
+				$random_filename = Rhymix\Framework\Security::getRandom(32, 'hex');
+				$uploaded_filename = $storage_path . $random_filename . $extension;
 			}
 		}
 
+		// fanbinit edit: remove original filename info
+		$args->source_filename = $random_filename . '.' . $file_info['extension'];
+
 		// Move the uploaded file
 		if(!Rhymix\Framework\Storage::moveUploadedFile($file_info['tmp_name'], $uploaded_filename, $move_type))
 		{