관리자 CSRF 취약점 수정

2015-11-23 18:22:10 +09:00
parent 976c9d0f9b
commit 32d09cff7d
49 changed files with 179 additions and 62 deletions
--- a/adm/auth_update.php
+++ b/adm/auth_update.php
@ -9,7 +9,7 @@ $mb = get_member($mb_id);
 if (!$mb['mb_id'])
    alert('존재하는 회원아이디가 아닙니다.');

-check_token();
+check_admin_token();

 $sql = " insert into {$g5['auth_table']}
            set mb_id   = '{$_POST['mb_id']}',