관리자 CSRF 취약점 수정2
This commit is contained in:
@ -5,13 +5,12 @@ include_once('./_common.php');
|
||||
if ($w == "u" || $w == "d")
|
||||
check_demo();
|
||||
|
||||
if ($W == 'd') {
|
||||
admin_referer_check();
|
||||
if ($W == 'd')
|
||||
auth_check($auth[$sub_menu], "d");
|
||||
} else {
|
||||
check_admin_token();
|
||||
else
|
||||
auth_check($auth[$sub_menu], "w");
|
||||
}
|
||||
|
||||
check_admin_token();
|
||||
|
||||
$sql_common = " fa_subject = '$fa_subject',
|
||||
fa_content = '$fa_content',
|
||||
|
||||
Reference in New Issue
Block a user