From c906eae5d32c2354b39bbdad241b86bd4549e7e9 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Thu, 19 Mar 2026 17:35:42 +0900
Subject: [PATCH] Disallow GET requests to procMemberFindAccount, and add route
 to procMemberAuthEmailAddress

---
 modules/member/conf/module.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/modules/member/conf/module.xml b/modules/member/conf/module.xml
index a6aabadb5..df37dde24 100644
--- a/modules/member/conf/module.xml
+++ b/modules/member/conf/module.xml
@@ -40,10 +40,10 @@
 		<action name="procMemberInsert" type="controller" route="signup" />
 		<action name="procMemberCheckValue" type="controller" />
 		<action name="procMemberLogin" type="controller" route="login" />
-		<action name="procMemberFindAccount" type="controller" method="GET|POST" ruleset="findAccount" />
-		<action name="procMemberFindAccountByQuestion" type="controller" method="GET|POST" />
+		<action name="procMemberFindAccount" type="controller" ruleset="findAccount" />
+		<action name="procMemberFindAccountByQuestion" type="controller" />
 		<action name="procMemberAuthAccount" type="controller" method="GET|POST" route="auth/$member_srl/$auth_key" />
-		<action name="procMemberAuthEmailAddress" type="controller" method="GET|POST" />
+		<action name="procMemberAuthEmailAddress" type="controller" method="GET|POST" route="authEmail/$member_srl/$auth_key" />
 		<action name="procMemberResendAuthMail" type="controller" ruleset="resendAuthMail" />
 		<action name="procMemberSendVerificationSMS" type="controller" />
 		<action name="procMemberConfirmVerificationSMS" type="controller" />