관리자에서 권한체크 코드 수정함

2019-10-29 14:54:26 +09:00
parent dd3e84340f
commit 2ae22e9d2a
1 changed files with 9 additions and 1 deletions
@@ -3,10 +3,18 @@ include_once('./_common.php');

 $call = isset($_REQUEST['call']) ?  strtolower(preg_replace('/[^a-z0-9_]/i', '', $_REQUEST['call'])) : '';

-if( ! $call || ! $is_admin ){
+if( ! $call ){
    return;
 }

+if( ! $is_admin ){
+	$sql = " select count(*) as cnt from {$g5['auth_table']} where mb_id = '{$member['mb_id']}' ";
+	$row = sql_fetch($sql);
+	if ( ! $row['cnt']) {
+		return;
+	}
+}
+
 run_event('admin_request_handler_'.$call, $arr_query, $token);

 $sub_menu = admin_menu_find_by($call, 'sub_menu');