[KVE-2020-1276,1546] CSRF 취약점 제보로 1:1 문의 토큰 체크 코드 추가

2021-01-04 17:47:14 +09:00
parent 83b4c80964
commit a7fa3a20fc
14 changed files with 122 additions and 4 deletions
--- a/bbs/qawrite.php
+++ b/bbs/qawrite.php
@ -13,6 +13,8 @@ if($is_guest)
    alert('회원이시라면 로그인 후 이용해 보십시오.', './login.php?url='.urlencode(G5_BBS_URL.'/qalist.php'));

 $qaconfig = get_qa_config();
+$token = _token();
+set_session('ss_qa_write_token', $token);

 $g5['title'] = $qaconfig['qa_title'];
 include_once('./qahead.php');