관리자 CSRF 취약점 수정

2015-11-24 16:12:22 +09:00
parent a75e00f9e0
commit bb1fd4d3ab
57 changed files with 191 additions and 64 deletions
--- a/adm/auth_update.php
+++ b/adm/auth_update.php
@ -9,7 +9,7 @@ $mb = get_member($mb_id);
 if (!$mb['mb_id'])
    alert('존재하는 회원아이디가 아닙니다.');

-check_token();
+check_admin_token();

 $sql = " insert into {$g5['auth_table']}
            set mb_id   = '{$_POST['mb_id']}',