|
View Articles |
|
|
Name |
|
|
Homepage |
http://www.sehiro.com |
Date |
2004³â 09¿ù02 ÀÏ 18:34 |
|
Subject |
Æ÷±âÇßÁö¸¸ ±×µ¿¾È ¸ðÀº ÀÚ·áµé...(1) |
|
|
¼Ò°³±ÛÀ» html ű׷ΠÃâ·Â+»ç¿ëÇÒÅÂ±× ÁöÁ¤Çϱâ[¼öÁ¤] |
Çæ·©ÀÌ (Homepage) |
2004-05-26 21:56:18, Á¶È¸ : 911, Ãßõ : 0 |
À̹æ¹ýÀº ȸ¿ø°¡ÀԽà ¶Ç´Â °¡ÀÔÈÄ Á¤º¸¼öÁ¤¿¡¼ º»ÀÎÀÇ ¼Ò°³±ÛÀ» html ű׸¦ »ç¿ëÇÏ¿© ÀÛ¼º½Ã (À̹ÌÁö ¸µÅ© µî) ȸ¿øÁ¤º¸ º¸±â¸¦Çϸé űװ¡ ±×´ë·Î ³ëÃâµÇ¾î ÁöÀúºÐ? ÇØ º¸ÀÏ°Ì´Ï´Ù. ÀÌ·²¶© ´ë·« ³°¨ÇÏÁÒ.?
º»ÀμҰ³¿¡ À̹ÌÁö ¸µÅ©³ª ÆùƮű׸¦ »ç¿ëÇÏ¿´À» °æ¿ì űװ¡ Àû¿ëµÈ »óÅ·ΠÃâ·Â ½ÃÅ°´Â ¹æ¹ý ÀÔ´Ï´Ù. ¹æ¹ýÀº ¾ÆÁÖ °£´Ü ÇÕ´Ï´Ù.^^
Á¦·Îº¸µå/view_info2.php ÀÇ ³»¿ëÁß ¾Æ·¡¼Ò½º¸¦
<? if($data[open_comment]&&$data[comment]) {?> <tr><td align=right><img src=images/vi_comment.gif align=absmiddle> </td><td align=left><img src="images/t.gif" width="10" height="3"><br><?=nl2br(del_html($data[comment]))?></td></tr> <tr> <td colspan="5" bgcolor="#EBD9D9" align="center"><img src="images/t.gif" width="10" height="1"></td> </tr> <? } ?>
---------------------------------------------------------------
¾Æ·¡Ã³·³ ¹Ù²Ù¾î ÁÖ¼¼¿ä.
<? if($data[open_comment]&&$data[comment]) {?> <tr><td align=right><img src=images/j_intro.gif align=absmiddle> </td><td align=left><img src="images/t.gif" width="10" height="3"><br><?=nl2br(($data[comment]))?></td></tr> <tr> <td colspan="5" height="1" background="images/dot_row.gif"></td> </tr> <? } ?>
¹Ù²ïºÎºÐÀº °£´ÜÇÏ°Ô
<?=nl2br(del_html($data[comment]))?> ÀÌ°ÍÀ»
<?=nl2br(($data[comment]))?> ÀÌ·¸°Ô ÇÑ°Ì´Ï´Ù.
ÀÌ°÷¿¡¼ ã¾ÆºÁµµ ¾ø±æ·¡(¸øãÀº°ÇÁö?) ¿Ã·Áº¾´Ï´Ù.
------------------------Ãß °¡-------------------------
°³ÀÎÁ¤º¸º¸±â ¿¡¼ html »ç¿ëÀ¸·Î ÀÎÇÏ¿© º¸¾È¹ö±×°¡ ÀÖ´Ù´Â DeX ´Ô²²¼ ÁöÀûÇØ Áּ̳׿ä^^ °¨»çÇÕ´Ï´Ù.
°³ÀÎÁ¤º¸ ¼öÁ¤½Ã ű׸¦ ±¸ºÐÇÏ¿© ÁöÁ¤µÈ űװ¡ ¾Æ´Ò°æ¿ì html ÀÌ¾Æ´Ñ ¼Ò½º»óÅ·ΠÃâ·Â Çϵµ·Ï ÇغýÀ´Ï´Ù. À̹æ¹ýÀº ¾ßÈ£¹Ì ´ÔÀÇ ¼¸í±â´ÉÆÁ¿¡¼ ÀÀ¿ë ÇÏ¿´À¸¹Ç·Î ¹®Á¦Á¡ÀÌ ÀÖÀ»¼öµµ ÀÖ½À´Ï´Ù. Å×½ºÆ®ÇÑ ¹Ù·Î´Â ÀߵǴµí ÇÕ´Ï´Ù¸¸ ¹®Á¦Á¡ÀÌ ÀÖÀ»°æ¿ì ÁöÀû ºÎŹ µå¸³´Ï´Ù.
(Á¤º¸¼öÁ¤ ¼Ò°³±Û¿¡¼ ű׻ç¿ë½Ã ÁöÁ¤ÇÑ Å±װ¡ ¾Æ´Ò°æ¿ì ÅÂ±× Ã¹¸Ó¸®¸¦ À߶ó¹ö¸®´Â ¹æ¹ý ÀÔ´Ï´Ù.)
Á¦·Îº¸µå/member_modify_ok.php ÀÇ ³»¿ëÁß
// DB ¿¬°á if(!$connect) $connect=dbConn();
¹Ù·Î ¾Æ·¡ºÎºÐ¿¡ ¾Æ·¡ÀÇ ³»¿ëÀ» ³Ö¾î ÁÖ¼¼¿ä.
// ¼Ò°³±Û¿¡ ÀÔ·ÂµÈ ÅÂ±× º¯È¯ $comment = str_replace("<","&@lt;",$comment); $tag = "img|font|br|div|b|embed"; $num = explode("|",$tag); for($c=0;$c<count($num);$c++){ $comment=eregi_replace("&@lt;".$num[$c],"<".$num[$c],$comment); $comment=eregi_replace("&@lt;/".$num[$c],"</".$num[$c],$comment); }
Á¦·Îº¸µå/member_join_ok.php ÀÇ
// ºó¹®ÀÚ¿ÀÎÁö¸¦ °Ë»ç <-¹Ù·ÎÀ§¿¡ À§ÀÇ ³»¿ëÀ» ³Ö¾îÁÝ´Ï´Ù.
-----------------------------------------------------
¼Ò°³±ÛÀÇ Å±׿¡¼ ½ºÅ©¸³Æ® ´Ü¾î°¡ µé¾î°¥ °æ¿ì °Ë»çÇÏ¿© ¿¡·¯ ³ª¿À°ÔÇϱâ À̹æ¹ýÀº ¼¸íÀ» »ç¿ëÇÏ´Â °÷¿¡µµ ÀÀ¿ëÇÏ¿© »ç¿ëÇÏ¸é µË´Ï´Ù.
Á¦·Îº¸µå/member_modify_ok.php ¿Í member_join_ok.php ÀÇ ³»¿ëÁß
if(isblank($name)) Error("À̸§À» ÀÔ·ÂÇÏ¼Å¾ß ÇÕ´Ï´Ù"); if(eregi("<",$name)||eregi(">",$name)) Error("À̸§¿¡´Â ű׸¦ »ç¿ëÇϽǼö ¾ø½À´Ï´Ù.");
¹Ù·Î¾Æ·¡¿¡ ¾Æ·¡ÀÇ ³»¿ëÀ» Ãß°¡ÇÕ´Ï´Ù. ¼Ò°³±Û³»¿ëÁß ÅÂ±× »ç¿ë½Ã ½ºÅ©¸³Æ® ´Ü¾î°¡ µé¾î°¡¸é °Ë»çÇÏ¿© ¿¡·¯¸¦ º¸¿©ÁÖ¸ç ±ÝÁöÇÒ ´Ü¾î¸¦ ´ë/¼Ò¹®ÀÚ ±¸ºÐÇÏ¿© °è¼Ó Ãß°¡ÇØÁÖ¸é µË´Ï´Ù.
ÄÚ¸àÆ®ÀǼҰ³±Û »ç¿ë½Ã if(eregi("javascript",$comment)||eregi("JAVASCRIPT",$comment)||eregi("SCRIPT",$comment)||eregi("script",$comment)) Error("¼Ò°³±Û¿¡ ÀÚ¹Ù¸¦ »ç¿ëÇϽǼö ¾ø½À´Ï´Ù.");
¼¸í±â´É¿¡¼ »ç¿ë½Ã (Á¤º¸¼öÁ¤¿¡¼ »ç¿ë) if(eregi("javascript",$sign)||eregi("JAVASCRIPT",$sign)||eregi("SCRIPT",$sign)||eregi("script",$sign)) Error("¼¸í±Û¿¡ ÀÚ¹Ù¸¦ »ç¿ëÇϽǼö ¾ø½À´Ï´Ù.");
¼³¸í À§ÀÇ ³»¿ëÀº ¼Ò°³±ÛÀ» ű׻ç¿ë½Ã $tag = "img|font|br|div|b|embed"; ¿©±â¼ ÁöÁ¤ÇÑ ÅÂ±× ¿Ü¿¡´Â ű×ÀÇ Ã¹¸Ó¸® < ¸¦ ©¶ó¼ µðºñ¿¡ ÀúÀå ÇÕ´Ï´Ù.
¾Æ·¡ÀÇ ³»¿ëÀº ¼Ò°³±Û ´Ü¾îÁß ½ºÅ©¸³Æ®³ª ƯÁ¤ ´Ü¾î°¡ µé¾î°¡¸é ¿¡·¯¸¦ º¸¿©ÁÝ´Ï´Ù.
À§ÀÇ ³»¿ë¿¡¼ ¹®Á¦Àְųª Ãß°¡»çÇ×Àº ¸®Çà ºÎŹÇØ¿ä^^
-´ë·«³¡-
| | | | |
|
|