관리자 CSRF 취약점 수정

2015-11-23 18:22:10 +09:00
parent 976c9d0f9b
commit 32d09cff7d
49 changed files with 179 additions and 62 deletions
--- a/adm/board_list_update.php
+++ b/adm/board_list_update.php
@ -51,7 +51,7 @@ if ($_POST['act_button'] == "선택수정") {

    auth_check($auth[$sub_menu], 'd');

-    check_token();
+    check_admin_token();

    // _BOARD_DELETE_ 상수를 선언해야 board_delete.inc.php 가 정상 작동함
    define('_BOARD_DELETE_', true);