<를 필터링하지 않도록 수정

태그 입력이 불가능한 문제 수정
This commit is contained in:
YJSoft 2015-06-18 09:57:55 +09:00
parent 0a79f3073f
commit 642402f316

View file

@ -1888,7 +1888,7 @@ class menuAdminController extends menu
$name_str = sprintf('$_names = array(%s); print $_names[$lang_type];', $name_arr_str);
$url = str_replace(array('&','"','<','>'),array('&amp;','&quot;','&lt;','&gt;'),$node->url);
$desc = str_replace(array('&','"','<',"'"),array('&amp;','&quot;','&lt;','\\\''),$node->desc);
$desc = str_replace(array('&','"',"'"),array('&amp;','&quot;','\\\''),$node->desc);
if(preg_match('/^([0-9a-zA-Z\_\-]+)$/', $node->url))
{
$href = "getSiteUrl('$domain', '','mid','$node->url')";
@ -1991,7 +1991,7 @@ class menuAdminController extends menu
// List variables
$href = str_replace(array('&','"','<','>'),array('&amp;','&quot;','&lt;','&gt;'),$node->href);
$url = str_replace(array('&','"','<','>'),array('&amp;','&quot;','&lt;','&gt;'),$node->url);
$desc = str_replace(array('&','"','<',"'"),array('&amp;','&quot;','&lt;','\\\''),$node->desc);
$desc = str_replace(array('&','"',"'"),array('&amp;','&quot;','\\\''),$node->desc);
if(preg_match('/^([0-9a-zA-Z\_\-]+)$/i', $node->url))
{
$href = "getSiteUrl('$domain', '','mid','$node->url')";
@ -2240,4 +2240,4 @@ class menuAdminController extends menu
}
}
/* End of file menu.admin.controller.php */
/* Location: ./modules/menu/menu.admin.controller.php */
/* Location: ./modules/menu/menu.admin.controller.php */