fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-05-10 04:24:14 +09:00
Code Issues Projects Releases Packages Wiki Activity

전체 post 요청에 대한 checkCSRF() 적용

Browse source
This commit is contained in:
bnu 2015-10-16 17:46:57 +09:00
parent 87b07e8a88
commit 3e34fd08df
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
classes/module/ModuleHandler.class.php
View file

@ -411,7 +411,7 @@ class ModuleHandler extends Handler
$logged_info = Context::get('logged_info'); $logged_info = Context::get('logged_info');
// check CSRF for admin actions // check CSRF for admin actions
if($kind === 'admin' && Context::getRequestMethod() === 'POST' && !checkCSRF()) { if(Context::getRequestMethod() === 'POST' && !checkCSRF()) {
$this->error = 'msg_invalid_request'; $this->error = 'msg_invalid_request';
$oMessageObject = ModuleHandler::getModuleInstance('message', $display_mode); $oMessageObject = ModuleHandler::getModuleInstance('message', $display_mode);
$oMessageObject->setError(-1); $oMessageObject->setError(-1);