관리자 CSRF 취약점 수정

2015-11-23 18:22:10 +09:00
parent 976c9d0f9b
commit 32d09cff7d
49 changed files with 179 additions and 62 deletions
--- a/adm/theme_update.php
+++ b/adm/theme_update.php
@ -5,6 +5,8 @@ include_once('./_common.php');
 if ($is_admin != 'super')
    die('최고관리자만 접근 가능합니다.');

+admin_referer_check();
+
 $theme = trim($_POST['theme']);
 $theme_dir = get_theme_dir();