Changeset 13578

Timestamp:

2007/05/29 09:42:35 (16 years ago)

Author:

adati

Message:

 

File:

• branches/beta/html/mypage/index.php (modified) (3 diffs)

branches/beta/html/mypage/index.php

@@ -39 +39 @@
 
 //¥Ú¡¼¥¸Á÷¤êÍÑ
-$objPage->tpl_pageno = $_POST['pageno'];
-    
+if (isset($_POST['pageno'])) {
+    $objPage->tpl_pageno = htmlspecialchars($_POST['pageno'], ENT_QUOTES, CHAR_CODE);
+}
+
 $col = "order_id, create_date, payment_id, payment_total";
 $from = "dtb_order";
@@ -71 +73 @@
 
 //-------------------------------------------------------------------------------------------------------------------------
-                                            
+
 //¥¨¥é¡¼¥Á¥§¥Ã¥¯
 
@@ -80 +82 @@
     return $objErr->arrErr;
 }
-                
+
 ?>