그누보드 5.0.38 수정내역 적용 및 CSRF 취약점 수정

2015-06-29 10:36:44 +09:00
parent 6e90622328
commit 8821583e8f
37 changed files with 128 additions and 123 deletions
--- a/adm/sms_admin/install.php
+++ b/adm/sms_admin/install.php
@ -10,7 +10,7 @@ $setup = $_POST['setup'];

 include_once(G5_ADMIN_PATH.'/admin.head.php');
 ?>
-<form name="hidden_form" method="post" action="<?php echo $_SERVER['PHP_SELF']?>">
+<form name="hidden_form" method="post" action="<?php echo $_SERVER['SCRIPT_NAME']?>">
 <input type="hidden" name="setup">
 </form>
 <?php