쇼핑몰 관리자 CSRF 취약점 수정

2015-11-24 14:43:42 +09:00
parent bfaa429721
commit a155f4d659
34 changed files with 72 additions and 27 deletions
--- a/adm/shop_admin/orderformcartupdate.php
+++ b/adm/shop_admin/orderformcartupdate.php
@ -4,6 +4,8 @@ include_once('./_common.php');

 auth_check($auth[$sub_menu], "w");

+check_admin_token();
+
 $ct_chk_count = count($_POST['ct_chk']);
 if(!$ct_chk_count)
    alert('처리할 자료를 하나 이상 선택해 주십시오.');