amber/AvocadoAmber
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

remove get_magic_quotes_gpc

Browse source
This commit is contained in:
Amberstone 2024-09-30 18:36:48 +09:00
parent 1d086f7706
commit ecf7751bcf
Signed by: amber
GPG key ID: 094B0E55F98D8BF1
3 changed files with 57 additions and 34 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
AvocadoEdition_Light/bbs/write_update.php
View file

@ -596,9 +596,7 @@ if ($upload_count != 0) {
// 나중에 테이블에 저장하는 이유는 $wr_id 값을 저장해야 하기 때문입니다. // 나중에 테이블에 저장하는 이유는 $wr_id 값을 저장해야 하기 때문입니다.
for ($i = 0; $i < count($upload); $i++) { for ($i = 0; $i < count($upload); $i++) {
if (!get_magic_quotes_gpc()) { $upload[$i]['source'] = handle_magic_quotes($upload[$i]['source']);
$upload[$i]['source'] = addslashes($upload[$i]['source']);
}
$row = sql_fetch("SELECT count(*) as cnt FROM {$g5['board_file_table']} where bo_table = '{$bo_table}' and wr_id = '{$wr_id}' and bf_no = '{$i}' "); $row = sql_fetch("SELECT count(*) as cnt FROM {$g5['board_file_table']} where bo_table = '{$bo_table}' and wr_id = '{$wr_id}' and bf_no = '{$i}' ");
if ($row['cnt']) { if ($row['cnt']) {

4
AvocadoEdition_Light/bbs/write_update_file.php
View file

@ -582,9 +582,7 @@ for ($i = 0; $i < count($_FILES['bf_file']['name']); $i++) {
// 나중에 테이블에 저장하는 이유는 $wr_id 값을 저장해야 하기 때문입니다. // 나중에 테이블에 저장하는 이유는 $wr_id 값을 저장해야 하기 때문입니다.
for ($i = 0; $i < count($upload); $i++) { for ($i = 0; $i < count($upload); $i++) {
if (!get_magic_quotes_gpc()) { $upload[$i]['source'] = handle_magic_quotes($upload[$i]['source']);
$upload[$i]['source'] = addslashes($upload[$i]['source']);
}
$row = sql_fetch("SELECT count(*) as cnt FROM {$g5['board_file_table']} where bo_table = '{$bo_table}' and wr_id = '{$wr_id}' and bf_no = '{$i}' "); $row = sql_fetch("SELECT count(*) as cnt FROM {$g5['board_file_table']} where bo_table = '{$bo_table}' and wr_id = '{$wr_id}' and bf_no = '{$i}' ");
if ($row['cnt']) { if ($row['cnt']) {

33
AvocadoEdition_Light/common.php
View file

@ -158,6 +158,25 @@ function array_map_deep($fn, $array)
return $array; return $array;
} }
/**
* Magic Quotes와 호환되는 방식으로 문자열을 처리합니다.
* PHP 5.6부터 PHP 8.3까지 호환됩니다.
*
* @param string $value 처리할 문자열
* @return string 처리된 문자열
*/
function handle_magic_quotes($value)
{
if (version_compare(PHP_VERSION, '7.4.0', '>=')) {
return addslashes($value);
} else {
if (!get_magic_quotes_gpc()) {
return addslashes($value);
}
}
return $value;
}
// SQL Injection 대응 문자열 필터링 // SQL Injection 대응 문자열 필터링
function sql_escape_string($str) function sql_escape_string($str)
{ {
@ -377,11 +396,13 @@ if (file_exists($dbconfig_file)) {
} else { } else {
?><!doctype html> ?><!doctype html>
<html lang="ko"> <html lang="ko">
<head> <head>
<meta charset="utf-8"> <meta charset="utf-8">
<title>오류! <?php echo G5_VERSION ?> 설치하기</title> <title>오류! <?php echo G5_VERSION ?> 설치하기</title>
<link rel="stylesheet" href="install/install.css"> <link rel="stylesheet" href="install/install.css">
</head> </head>
<body> <body>
<div id="ins_bar"> <div id="ins_bar">
<span id="bar_img">AVOCADO EDITION</span> <span id="bar_img">AVOCADO EDITION</span>
@ -403,7 +424,8 @@ if (file_exists($dbconfig_file)) {
<p>GPL! OPEN SOURCE GNUBOARD</p> <p>GPL! OPEN SOURCE GNUBOARD</p>
</div> </div>
</body> </body>
</html><?php
</html><?php
exit; exit;
} }
@ -417,13 +439,16 @@ if (strstr($url, 'adm')) {
if (!defined('G5_IS_ADMIN')) { if (!defined('G5_IS_ADMIN')) {
$cssconfig_file = G5_DATA_PATH . '/css/_design.config.css'; $cssconfig_file = G5_DATA_PATH . '/css/_design.config.css';
if (!file_exists($cssconfig_file)) { if (!file_exists($cssconfig_file)) {
?><!doctype html> ?>
<!doctype html>
<html lang="ko"> <html lang="ko">
<head> <head>
<meta charset="utf-8"> <meta charset="utf-8">
<title>오류! <?php echo G5_VERSION ?> 설치하기</title> <title>오류! <?php echo G5_VERSION ?> 설치하기</title>
<link rel="stylesheet" href="<?= G5_URL ?>/install/install.css"> <link rel="stylesheet" href="<?= G5_URL ?>/install/install.css">
</head> </head>
<body> <body>
<div id="ins_bar"> <div id="ins_bar">
<span id="bar_img">AVOCADO EDITION</span> <span id="bar_img">AVOCADO EDITION</span>
@ -444,7 +469,9 @@ if (!defined('G5_IS_ADMIN')) {
<p>GPL! OPEN SOURCE GNUBOARD</p> <p>GPL! OPEN SOURCE GNUBOARD</p>
</div> </div>
</body> </body>
</html><?php exit;
</html>
<?php exit;
} }
} }