그누보드 CSRF 취약점(KVE-2017-0883,0884,0923) 수정

2017-12-12 11:59:10 +09:00
parent 7f9664af0a
commit 875a326344
5 changed files with 19 additions and 2 deletions
--- a/adm/member_list_update.php
+++ b/adm/member_list_update.php
@ -10,6 +10,8 @@ if (!count($_POST['chk'])) {

 auth_check($auth[$sub_menu], 'w');

+check_admin_token();
+
 if ($_POST['act_button'] == "선택수정") {

    for ($i=0; $i<count($_POST['chk']); $i++)