관리자 CSRF 취약점 수정

2015-11-23 18:22:10 +09:00
parent 976c9d0f9b
commit 32d09cff7d
49 changed files with 179 additions and 62 deletions
--- a/adm/qa_config_update.php
+++ b/adm/qa_config_update.php
@ -6,7 +6,7 @@ check_demo();

 auth_check($auth[$sub_menu], 'w');

-check_token();
+check_admin_token();

 $sql = " update {$g5['qa_config_table']}
            set qa_title                = '{$_POST['qa_title']}',