From c58fd62b5090e561202f1ec81aa917af892147e5 Mon Sep 17 00:00:00 2001
From: YJSoft <yjsoft@yjsoft.pe.kr>
Date: Tue, 20 Oct 2015 16:34:10 +0900
Subject: [PATCH] =?UTF-8?q?#1787=20IE+XpressEditor=EC=97=90=EC=84=9C=20?=
 =?UTF-8?q?=EC=97=85=EB=A1=9C=EB=93=9C=EA=B0=80=20=EB=90=98=EC=A7=80=20?=
 =?UTF-8?q?=EC=95=8A=EB=8A=94=20=EB=AC=B8=EC=A0=9C=EC=A0=90=20=EC=88=98?=
 =?UTF-8?q?=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

IE+SwfUploader 사용시 procFileUpload 가 호출될 때 referer가 포함되지 않아, 업로드가 되지 않는 문제점을 수정합니다.
---
 classes/module/ModuleHandler.class.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/classes/module/ModuleHandler.class.php b/classes/module/ModuleHandler.class.php
index 16291fefb..56b775604 100644
--- a/classes/module/ModuleHandler.class.php
+++ b/classes/module/ModuleHandler.class.php
@@ -410,8 +410,8 @@ class ModuleHandler extends Handler
 
 		$logged_info = Context::get('logged_info');
 
-		// check CSRF for admin actions
-		if(Context::getRequestMethod() === 'POST' && Context::isInstalled() && !checkCSRF()) {
+		// check CSRF for POST actions
+		if(Context::getRequestMethod() === 'POST' && Context::isInstalled() && $this->act !== 'procFileUpload' && !checkCSRF()) {
 			$this->error = 'msg_invalid_request';
 			$oMessageObject = ModuleHandler::getModuleInstance('message', $display_mode);
 			$oMessageObject->setError(-1);