From f19d200fe55ededc5014512e9d155ecd03d8f465 Mon Sep 17 00:00:00 2001
From: whitedot <whitedot@naver.com>
Date: Mon, 18 Feb 2013 17:38:27 +0900
Subject: [PATCH] =?UTF-8?q?=EA=B4=80=EB=A6=AC=EC=9E=90:=20=EA=B4=80?=
 =?UTF-8?q?=EB=A6=AC=EA=B6=8C=ED=95=9C=20=EC=B6=94=EA=B0=80=20=EC=8A=A4?=
 =?UTF-8?q?=ED=83=80=EC=9D=BC?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/auth_list.php  | 60 +++++++++++++++++++++++++++++++---------------
 adm/point_list.php | 18 ++++----------
 2 files changed, 45 insertions(+), 33 deletions(-)

diff --git a/adm/auth_list.php b/adm/auth_list.php
index e055b6d3d..dee71659c 100644
--- a/adm/auth_list.php
+++ b/adm/auth_list.php
@@ -160,30 +160,52 @@ $colspan = 5;
     <h2>관리권한 추가</h2>
     <p>다음 양식에서 회원에게 관리권한을 부여하실 수 있습니다.</p>
 
-    <label for="mb_id">회원아이디<strong class="sound_only">필수</strong></label>
-    <input type="text" id="mb_id" name="mb_id" class="required frm_input" required value="<?=$mb_id?>" title="회원아이디">
-    <label for="au_menu">접근가능메뉴<strong class="sound_only">필수</strong></label>
-    <select id="au_menu" name="au_menu" required title="접근가능메뉴">
-        <option value=''>선택하세요
-        <?
-        foreach($auth_menu as $key=>$value)
-        {
-            if (!(substr($key, -3) == '000' || $key == '-' || !$key))
-                echo '<option value="'.$key.'">'.$key.' '.$value;
-        }
-        ?>
-    </select>
-    <input type="checkbox" id="r" name="r" value="r" checked>
-    <label for="r">r (읽기)</label>
-    <input type="checkbox" id="w" name="w" value="w">
-    <label for="w">w (쓰기)</label>
-    <input type="checkbox" id="d" name="d" value="d">
-    <label for="d">d (삭제)</label>
+    <table class="frm_tbl">
+    <colgroup>
+        <col class="grid_3">
+        <col>
+    </colgroup>
+    <tbody>
+    <tr>
+        <th scope="row"><label for="mb_id">회원아이디<strong class="sound_only">필수</strong></label></th>
+        <td><input type="text" id="mb_id" name="mb_id" class="required frm_input" required value="<?=$mb_id?>" title="회원아이디"></td>
+    </tr>
+    <tr>
+        <th scope="row"><label for="au_menu">접근가능메뉴<strong class="sound_only">필수</strong></label></th>
+        <td>
+            <select id="au_menu" name="au_menu" required title="접근가능메뉴">
+                <option value=''>선택하세요
+                <?
+                foreach($auth_menu as $key=>$value)
+                {
+                    if (!(substr($key, -3) == '000' || $key == '-' || !$key))
+                        echo '<option value="'.$key.'">'.$key.' '.$value;
+                }
+                ?>
+            </select>
+        </td>
+    </tr>
+    <tr>
+        <th scope="row">권한지정</th>
+        <td>
+            <input type="checkbox" id="r" name="r" value="r" checked>
+            <label for="r">r (읽기)</label>
+            <input type="checkbox" id="w" name="w" value="w">
+            <label for="w">w (쓰기)</label>
+            <input type="checkbox" id="d" name="d" value="d">
+            <label for="d">d (삭제)</label>
+        </td>
+    </tr>
+    </tbody>
+    </table>
+
     <fieldset id="admin_confirm">
+        <legend>XSS 혹은 CSRF 방지</legend>
         <p>관리자 권한을 탈취당하는 경우를 대비하여 패스워드를 다시 한번 확인합니다.</p>
         <label for="admin_password">관리자 패스워드</label>
         <input type="password" id="admin_password" name="admin_password" class="required frm_input" required>
     </fieldset>
+
     <div class="btn_confirm">
         <input type="submit" class="btn_submit" value="완료">
     </div>
diff --git a/adm/point_list.php b/adm/point_list.php
index 8acdd22bb..b36b8874d 100644
--- a/adm/point_list.php
+++ b/adm/point_list.php
@@ -104,7 +104,7 @@ function point_clear()
 <section class="cbox">
     <h2>포인트 내역</h2>
 
-    <form id="fpointlist" name="fpointlist" method="post" action="./point_list_delete.php" onsubmit="return fpointlist_submit(this);">
+    <form id="fpointlist" name="fpointlist" method="post">
     <input type="hidden" name="sst" value="<?=$sst?>">
     <input type="hidden" name="sod" value="<?=$sod?>">
     <input type="hidden" name="sfl" value="<?=$sfl?>">
@@ -167,7 +167,7 @@ function point_clear()
     </table>
 
     <div class="btn_list">
-        <button>선택삭제</button>
+        <button onclick="btn_check(this.form, 'delete')">선택삭제</button>
     </div>
 
     </form>
@@ -190,6 +190,7 @@ function point_clear()
     <colgroup>
         <col class="grid_3">
         <col>
+    </colgroup>
     <tbody>
     <tr>
         <th scope="row"><label for="mb_id">회원아이디<strong class="sound_only">필수</strong></label></th>
@@ -203,6 +204,7 @@ function point_clear()
         <th scope="row"><label for="po_point">포인트<strong class="sound_only">필수</strong></label></th>
         <td><input type="text" id="po_point" name="po_point" class="required frm_input" required></td>
     </tr>
+    </tbody>
     </table>
 
     <fieldset id="admin_confirm">
@@ -220,18 +222,6 @@ function point_clear()
 
 </fieldset>
 
-<script>
-function fpointlist_submit(f)
-{
-    if (!is_checked("chk[]")) {
-        alert("선택삭제 하실 항목을 하나 이상 선택하세요.");
-        return false;
-    }
-
-    return true;
-}
-</script>
-
 <?
 include_once ('./admin.tail.php');
 ?>