본문으로 건너뛰기

관리자 답변 게시글 보안 강화

PHP 7 · GODO25
변경 파일 수: 3개
변경 파일 목록
총 3개
변경 파일 코드
추가삭제
Component/Board/ArticleAdmin.php+3
변경 전ArticleAdmin.php
$data['eventEnd'] = date_format(date_create($data['eventEnd']), "Y.m.d");
}
$data['subject'] = $this->xssClean($data['subject']);
 
 
 
$data['replyStatusText'] = '-';
$data['replyComplete'] = false;
if ($this->cfg['bdReplyStatusFl'] == 'y' || $this->cfg['bdAnswerStatusFl'] == 'y') {
 
변경 후ArticleAdmin.php
$data['eventEnd'] = date_format(date_create($data['eventEnd']), "Y.m.d");
}
$data['subject'] = $this->xssClean($data['subject']);
if (isset($data['answerSubject'])) {
$data['answerSubject'] = $this->xssClean($data['answerSubject']);
}
$data['replyStatusText'] = '-';
$data['replyComplete'] = false;
if ($this->cfg['bdReplyStatusFl'] == 'y' || $this->cfg['bdAnswerStatusFl'] == 'y') {
 
Component/Board/BoardFront.php+3
변경 전BoardFront.php
}
}
$data['subject'] = $this->xssClean($data['subject']);
 
 
 
$data['replyStatusText'] = '-';
$data['replyComplete'] = false;
$isMobile = $data['isMobile'] == 'y' ? true : false;
 
변경 후BoardFront.php
}
}
$data['subject'] = $this->xssClean($data['subject']);
if (isset($data['answerSubject'])) {
$data['answerSubject'] = $this->xssClean($data['answerSubject']);
}
$data['replyStatusText'] = '-';
$data['replyComplete'] = false;
$isMobile = $data['isMobile'] == 'y' ? true : false;
 
Controller/Admin/Board/ArticlePsController.php+1
변경 전ArticlePsController.php
case 'replyQa' :
try {
/** @var \Bundle\Component\Board\ArticleActAdmin $articleActAdmin */
 
$req['answerContents'] = StringUtils::xssClean($req['answerContents']);
$articleActAdmin = new ArticleActAdmin($req);
$articleActAdmin->updateAnswer($msgs);
 
변경 후ArticlePsController.php
case 'replyQa' :
try {
/** @var \Bundle\Component\Board\ArticleActAdmin $articleActAdmin */
$req['answerSubject'] = StringUtils::xssClean($req['answerSubject']);
$req['answerContents'] = StringUtils::xssClean($req['answerContents']);
$articleActAdmin = new ArticleActAdmin($req);
$articleActAdmin->updateAnswer($msgs);