Index: branches/rel/html/contact/index.php
===================================================================
--- branches/rel/html/contact/index.php	(revision 12157)
+++ branches/rel/html/contact/index.php	(revision 15020)
@@ -111,6 +111,5 @@
 //¥¨¥é¡¼¥Á¥§¥Ã¥¯½èÍýÉô
 function lfErrorCheck($array) {
-
-	$objErr = new SC_CheckError($array);
+    $objErr = new SC_CheckError($array);
 	$objErr->doFunc(array("¤ªÌ¾Á°(À«)", 'name01', STEXT_LEN), array("EXIST_CHECK","SPTAB_CHECK","MAX_LENGTH_CHECK"));
 	$objErr->doFunc(array("¤ªÌ¾Á°(̾)", 'name02', STEXT_LEN), array("EXIST_CHECK","SPTAB_CHECK","MAX_LENGTH_CHECK"));
@@ -129,7 +128,11 @@
 	$objErr->doFunc(array("¤ªÅÅÏÃÈÖ¹æ3", 'tel03', TEL_ITEM_LEN), array("NUM_CHECK", "MAX_LENGTH_CHECK"));
 	
-
+    if (REVIEW_ALLOW_URL == false) {
+        // URL¤ÎÆþÎϤò¶Ø»ß
+        global $arrReviewDenyURL;
+        $objErr->doFunc(array("URL", "contents", $arrReviewDenyURL), array("PROHIBITED_STR_CHECK"));
+    }
+    
 	return $objErr->arrErr;
-
 }
 
Index: branches/rel/data/class/SC_CheckError.php
===================================================================
--- branches/rel/data/class/SC_CheckError.php	(revision 12157)
+++ branches/rel/data/class/SC_CheckError.php	(revision 15020)
@@ -812,5 +812,25 @@
 			$this->arrErr[$value[1]] = "¢¨ " . $value[0] . "¤Ï·ÈÂÓÅÅÏäΤâ¤Î¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£<br />";
 		}
-	}		
+	}
+    /**
+     * ¶Ø»ßʸ»úÎó¤Î¥Á¥§¥Ã¥¯
+     * value[0] = ¹àÌÜ̾ value[1] = ȽÄêÂоÝʸ»úÎó
+     * value[2] = ÆþÎϤò¶Ø»ß¤¹¤ëʸ»úÎó(ÇÛÎó)
+     * 
+     * @example $objErr->doFunc(array("URL", "contents", $arrReviewDenyURL), array("PROHIBITED_STR_CHECK"));
+     */ 
+    function PROHIBITED_STR_CHECK( $value ) {
+        if( isset($this->arrErr[$value[1]]) || empty($this->arrParam[$value[1]]) ) {
+            return;
+        }
+        
+        $targetStr     = $this->arrParam[$value[1]];
+        $prohibitedStr = str_replace(array('|', '/'), array('\|', '\/'), $value[2]);
+        
+        $pattern = '/' . join('|', $prohibitedStr) . '/i';
+        if(preg_match_all($pattern, $this->arrParam[$value[1]], $matches)) {
+            $this->arrErr[$value[1]] = "¢¨ " . $value[0] . "¤ÏÆþÎϤǤ­¤Þ¤»¤ó¡£<br />";
+        }
+    }
 }
 ?>