diff --git a/adm/shop_admin/itemeventlistupdate.php b/adm/shop_admin/itemeventlistupdate.php index e55174c04..4adbae801 100644 --- a/adm/shop_admin/itemeventlistupdate.php +++ b/adm/shop_admin/itemeventlistupdate.php @@ -6,6 +6,8 @@ check_demo(); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $post_it_id_count = (isset($_POST['it_id']) && is_array($_POST['it_id'])) ? count($_POST['it_id']) : 0; for ($i=0; $i<$post_it_id_count; $i++) diff --git a/adm/shop_admin/itemexcelupdate.php b/adm/shop_admin/itemexcelupdate.php index 773cb1a00..88698e6b8 100644 --- a/adm/shop_admin/itemexcelupdate.php +++ b/adm/shop_admin/itemexcelupdate.php @@ -8,6 +8,8 @@ ini_set('memory_limit', '50M'); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + function only_number($n) { return preg_replace('/[^0-9]/', '', (string)$n); diff --git a/adm/shop_admin/personalpaycopyupdate.php b/adm/shop_admin/personalpaycopyupdate.php index deb032ef3..51011e49f 100644 --- a/adm/shop_admin/personalpaycopyupdate.php +++ b/adm/shop_admin/personalpaycopyupdate.php @@ -4,6 +4,8 @@ include_once('./_common.php'); auth_check_menu($auth, $sub_menu, 'w'); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $_POST = array_map('trim', $_POST); if(!$_POST['pp_name']) diff --git a/adm/sms_admin/emoticon_move_update.php b/adm/sms_admin/emoticon_move_update.php index 3f398558a..c68cd3586 100644 --- a/adm/sms_admin/emoticon_move_update.php +++ b/adm/sms_admin/emoticon_move_update.php @@ -4,6 +4,8 @@ include_once('./_common.php'); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $post_chk_fg_no = (isset($_POST['chk_fg_no']) && is_array($_POST['chk_fg_no'])) ? $_POST['chk_fg_no'] : array(); if(!count($post_chk_fg_no)) diff --git a/adm/sms_admin/form_group_update.php b/adm/sms_admin/form_group_update.php index 824d6f2e4..c86d42050 100644 --- a/adm/sms_admin/form_group_update.php +++ b/adm/sms_admin/form_group_update.php @@ -4,6 +4,8 @@ include_once("./_common.php"); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $post_cnk = (isset($_POST['chk']) && is_array($_POST['chk'])) ? $_POST['chk'] : array(); if ($w == 'u') // 업데이트 diff --git a/adm/sms_admin/num_book_file_upload.php b/adm/sms_admin/num_book_file_upload.php index c7c40e479..7187aa57d 100644 --- a/adm/sms_admin/num_book_file_upload.php +++ b/adm/sms_admin/num_book_file_upload.php @@ -4,6 +4,8 @@ include_once("./_common.php"); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $upload_bg_no = isset($_REQUEST['upload_bg_no']) ? (int) $_REQUEST['upload_bg_no'] : 0; $confirm = isset($_REQUEST['confirm']) ? clean_xss_tags($_REQUEST['confirm'], 1, 1) : ''; diff --git a/adm/sms_admin/num_book_multi_update.php b/adm/sms_admin/num_book_multi_update.php index e1f579e76..e1b40b0c0 100644 --- a/adm/sms_admin/num_book_multi_update.php +++ b/adm/sms_admin/num_book_multi_update.php @@ -4,6 +4,8 @@ include_once("./_common.php"); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $g5['title'] = "전화번호부"; $post_bk_no = (isset($_POST['bk_no']) && is_array($_POST['bk_no'])) ? $_POST['bk_no'] : array(); diff --git a/adm/sms_admin/num_book_update.php b/adm/sms_admin/num_book_update.php index 6358e2017..c77fe8be3 100644 --- a/adm/sms_admin/num_book_update.php +++ b/adm/sms_admin/num_book_update.php @@ -4,6 +4,8 @@ include_once("./_common.php"); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $g5['title'] = "휴대폰번호 업데이트"; $g5['sms5_demo'] = 0; diff --git a/adm/sms_admin/num_group_update.php b/adm/sms_admin/num_group_update.php index b3ec46647..3e2af80e5 100644 --- a/adm/sms_admin/num_group_update.php +++ b/adm/sms_admin/num_group_update.php @@ -6,6 +6,8 @@ $post_chk = (isset($_POST['chk']) && is_array($_POST['chk'])) ? $_POST['chk'] : auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + if ($w == 'u') // 업데이트 { for ($i=0; $i