관리자 CSRF 취약점 수정

2015-11-23 18:22:10 +09:00
parent 976c9d0f9b
commit 32d09cff7d
49 changed files with 179 additions and 62 deletions
--- a/adm/member_delete.php
+++ b/adm/member_delete.php
@ -17,7 +17,7 @@ else if (is_admin($mb['mb_id']) == "super")
 else if ($mb['mb_level'] >= $member['mb_level'])
    alert("자신보다 권한이 높거나 같은 회원은 삭제할 수 없습니다.");

-check_token();
+check_admin_token();

 // 회원자료 삭제
 member_delete($mb['mb_id']);