전체 post 요청에 대한 checkCSRF() 적용

This commit is contained in:
bnu 2015-10-16 17:46:57 +09:00
parent 87b07e8a88
commit 3e34fd08df

View file

@ -411,7 +411,7 @@ class ModuleHandler extends Handler
$logged_info = Context::get('logged_info');
// check CSRF for admin actions
if($kind === 'admin' && Context::getRequestMethod() === 'POST' && !checkCSRF()) {
if(Context::getRequestMethod() === 'POST' && !checkCSRF()) {
$this->error = 'msg_invalid_request';
$oMessageObject = ModuleHandler::getModuleInstance('message', $display_mode);
$oMessageObject->setError(-1);