그누보드 5.0.38 수정내역 적용 및 CSRF 취약점 수정

2015-06-29 10:36:44 +09:00
parent 6e90622328
commit 8821583e8f
37 changed files with 128 additions and 123 deletions
--- a/adm/sms_admin/_common.php
+++ b/adm/sms_admin/_common.php
@ -3,7 +3,7 @@ define('G5_IS_ADMIN', true);
 include_once ('../../common.php');
 include_once(G5_ADMIN_PATH.'/admin.lib.php');

-if (!strstr($_SERVER['PHP_SELF'], 'install.php')) {
+if (!strstr($_SERVER['SCRIPT_NAME'], 'install.php')) {
    if(!mysql_num_rows(mysql_query(" show tables like '{$g5['sms5_config_table']}' ")))
        goto_url('install.php');