qcaid 필터링 코드 추가

gnuboard · Jan 12, 2016 · 7fa9218 · 7fa9218
1 parent a28ece5
commit 7fa9218
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/mobile/shop/search.php b/mobile/shop/search.php
@@ -20,7 +20,7 @@
 $qname   = isset($_GET['qname']) ? trim($_GET['qname']) : '';
 $qexplan = isset($_GET['qexplan']) ? trim($_GET['qexplan']) : '';
 $qid     = isset($_GET['qid']) ? trim($_GET['qid']) : '';
-$qcaid   = isset($_GET['qcaid']) ? trim($_GET['qcaid']) : '';
+$qcaid   = isset($_GET['qcaid']) ? preg_replace('#[^a-z0-9]#i', '', trim($_GET['qcaid'])) : '';
 $qfrom   = isset($_GET['qfrom']) ? preg_replace('/[^0-9]/', '', trim($_GET['qfrom'])) : '';
 $qto     = isset($_GET['qto']) ? preg_replace('/[^0-9]/', '', trim($_GET['qto'])) : '';
 if (isset($_GET['qsort']))  {

diff --git a/shop/search.php b/shop/search.php
@@ -25,7 +25,7 @@
 $qname   = isset($_GET['qname']) ? trim($_GET['qname']) : '';
 $qexplan = isset($_GET['qexplan']) ? trim($_GET['qexplan']) : '';
 $qid     = isset($_GET['qid']) ? trim($_GET['qid']) : '';
-$qcaid   = isset($_GET['qcaid']) ? trim($_GET['qcaid']) : '';
+$qcaid   = isset($_GET['qcaid']) ? preg_replace('#[^a-z0-9]#i', '', trim($_GET['qcaid'])) : '';
 $qfrom   = isset($_GET['qfrom']) ? preg_replace('/[^0-9]/', '', trim($_GET['qfrom'])) : '';
 $qto     = isset($_GET['qto']) ? preg_replace('/[^0-9]/', '', trim($_GET['qto'])) : '';
 if (isset($_GET['qsort']))  {