관리자 CSRF 취약점 수정

2015-11-24 16:12:22 +09:00
parent a75e00f9e0
commit bb1fd4d3ab
57 changed files with 191 additions and 64 deletions
--- a/adm/newwinformupdate.php
+++ b/adm/newwinformupdate.php
@ -10,6 +10,8 @@ if ($w == 'd')
 else
    auth_check($auth[$sub_menu], "w");

+check_admin_token();
+
 $sql_common = " nw_device = '{$_POST['nw_device']}',
                nw_begin_time = '{$_POST['nw_begin_time']}',
                nw_end_time = '{$_POST['nw_end_time']}',