wr_id_list 필터링 코드 추가

gnuboard · Aug 10, 2016 · 42b5adf · 42b5adf
1 parent ccf6d9c
commit 42b5adf
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/bbs/move_update.php b/bbs/move_update.php
@@ -19,6 +19,8 @@
 $save_count_comment = 0;
 $cnt = 0;
 
+$wr_id_list = preg_replace('/[^0-9\,]/', '', $_POST['wr_id_list']);
+
 $sql = " select distinct wr_num from $write_table where wr_id in ({$wr_id_list}) order by wr_id ";
 $result = sql_query($sql);
 while ($row = sql_fetch_array($result))