From 2ae22e9d2ac5ae57dafd2aedf47de4d90e814d18 Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Tue, 29 Oct 2019 14:54:26 +0900
Subject: [PATCH] =?UTF-8?q?=EA=B4=80=EB=A6=AC=EC=9E=90=EC=97=90=EC=84=9C?=
 =?UTF-8?q?=20=EA=B6=8C=ED=95=9C=EC=B2=B4=ED=81=AC=20=EC=BD=94=EB=93=9C=20?=
 =?UTF-8?q?=EC=88=98=EC=A0=95=ED=95=A8?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/view.php | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/adm/view.php b/adm/view.php
index 717a7888f..777bd326e 100644
--- a/adm/view.php
+++ b/adm/view.php
@@ -3,10 +3,18 @@ include_once('./_common.php');
 
 $call = isset($_REQUEST['call']) ?  strtolower(preg_replace('/[^a-z0-9_]/i', '', $_REQUEST['call'])) : '';
 
-if( ! $call || ! $is_admin ){
+if( ! $call ){
     return;
 }
 
+if( ! $is_admin ){
+	$sql = " select count(*) as cnt from {$g5['auth_table']} where mb_id = '{$member['mb_id']}' ";
+	$row = sql_fetch($sql);
+	if ( ! $row['cnt']) {
+		return;
+	}
+}
+
 run_event('admin_request_handler_'.$call, $arr_query, $token);
 
 $sub_menu = admin_menu_find_by($call, 'sub_menu');