sca 필터링 코드 추가

gnuboard · Jan 13, 2016 · 079a2c1 · 079a2c1
1 parent 7fa9218
commit 079a2c1
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/common.php b/common.php
@@ -227,8 +227,10 @@ function sql_escape_string($str)
 
 if (isset($_REQUEST['sca']))  {
     $sca = clean_xss_tags(trim($_REQUEST['sca']));
-    if ($sca)
+    if ($sca) {
+        $sca = preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\s]/", "", $sca);
         $qstr .= '&amp;sca=' . urlencode($sca);
+    }
 } else {
     $sca = '';
 }