우편번호 필터링 코드 추가(skinfosec 유원태님 제보)

gnuboard · Dec 10, 2015 · f2332e6 · f2332e6
1 parent f629c34
commit f2332e6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/shop/ordersendcost.php b/shop/ordersendcost.php
@@ -1,7 +1,7 @@
 <?php
 include_once('./_common.php');
 
-$code = $_POST['zipcode'];
+$code = preg_replace('#[^0-9]#', '', $_POST['zipcode']);
 
 if(!$code)
     die('0');