sst 변수 필터링 특수문자 추가

gnuboard · Apr 20, 2016 · b6207c1 · b6207c1
1 parent b6f3f50
commit b6207c1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/common.php b/common.php
@@ -255,7 +255,7 @@ function sql_escape_string($str)
 
 if (isset($_REQUEST['sst']))  {
     $sst = trim($_REQUEST['sst']);
-    $sst = preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\s]/", "", $sst);
+    $sst = preg_replace("/[\<\>\'\"\\\'\\\"\%\=\(\)\/\^\*\s]/", "", $sst);
     if ($sst)
         $qstr .= '&amp;sst=' . urlencode($sst); // search sort (검색 정렬 필드)
 } else {