From 3d7fa045699aa4923ece21477869051a795d1b86 Mon Sep 17 00:00:00 2001 From: thisgun Date: Fri, 3 Jul 2026 10:00:59 +0000 Subject: [PATCH] =?UTF-8?q?=EA=B4=80=EB=A6=AC=EC=9E=90=20=EC=83=81?= =?UTF-8?q?=ED=83=9C=EB=B3=80=EA=B2=BD=20=EC=97=94=EB=93=9C=ED=8F=AC?= =?UTF-8?q?=EC=9D=B8=ED=8A=B8=EC=97=90=20=EC=9A=94=EC=B2=AD=20=EC=B6=9C?= =?UTF-8?q?=EC=B2=98=20=EA=B2=80=EC=A6=9D=20=EC=B6=94=EA=B0=80?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - 상품이벤트/개인결제복사/SMS 번호·그룹·폼·업로드/방문로그 삭제 등 POST 기반 상태변경 처리에 check_request_origin() 적용 (스킨 수정 불필요) Co-Authored-By: Claude Opus 4.8 (1M context) --- adm/shop_admin/itemeventlistupdate.php | 2 ++ adm/shop_admin/itemexcelupdate.php | 2 ++ adm/shop_admin/personalpaycopyupdate.php | 2 ++ adm/sms_admin/emoticon_move_update.php | 2 ++ adm/sms_admin/form_group_update.php | 2 ++ adm/sms_admin/num_book_file_upload.php | 2 ++ adm/sms_admin/num_book_multi_update.php | 2 ++ adm/sms_admin/num_book_update.php | 2 ++ adm/sms_admin/num_group_update.php | 2 ++ adm/sms_admin/number_move_update.php | 2 ++ adm/visit_delete_update.php | 2 ++ 11 files changed, 22 insertions(+) diff --git a/adm/shop_admin/itemeventlistupdate.php b/adm/shop_admin/itemeventlistupdate.php index e55174c04..4adbae801 100644 --- a/adm/shop_admin/itemeventlistupdate.php +++ b/adm/shop_admin/itemeventlistupdate.php @@ -6,6 +6,8 @@ check_demo(); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $post_it_id_count = (isset($_POST['it_id']) && is_array($_POST['it_id'])) ? count($_POST['it_id']) : 0; for ($i=0; $i<$post_it_id_count; $i++) diff --git a/adm/shop_admin/itemexcelupdate.php b/adm/shop_admin/itemexcelupdate.php index 773cb1a00..88698e6b8 100644 --- a/adm/shop_admin/itemexcelupdate.php +++ b/adm/shop_admin/itemexcelupdate.php @@ -8,6 +8,8 @@ ini_set('memory_limit', '50M'); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + function only_number($n) { return preg_replace('/[^0-9]/', '', (string)$n); diff --git a/adm/shop_admin/personalpaycopyupdate.php b/adm/shop_admin/personalpaycopyupdate.php index deb032ef3..51011e49f 100644 --- a/adm/shop_admin/personalpaycopyupdate.php +++ b/adm/shop_admin/personalpaycopyupdate.php @@ -4,6 +4,8 @@ include_once('./_common.php'); auth_check_menu($auth, $sub_menu, 'w'); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $_POST = array_map('trim', $_POST); if(!$_POST['pp_name']) diff --git a/adm/sms_admin/emoticon_move_update.php b/adm/sms_admin/emoticon_move_update.php index 3f398558a..c68cd3586 100644 --- a/adm/sms_admin/emoticon_move_update.php +++ b/adm/sms_admin/emoticon_move_update.php @@ -4,6 +4,8 @@ include_once('./_common.php'); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $post_chk_fg_no = (isset($_POST['chk_fg_no']) && is_array($_POST['chk_fg_no'])) ? $_POST['chk_fg_no'] : array(); if(!count($post_chk_fg_no)) diff --git a/adm/sms_admin/form_group_update.php b/adm/sms_admin/form_group_update.php index 824d6f2e4..c86d42050 100644 --- a/adm/sms_admin/form_group_update.php +++ b/adm/sms_admin/form_group_update.php @@ -4,6 +4,8 @@ include_once("./_common.php"); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $post_cnk = (isset($_POST['chk']) && is_array($_POST['chk'])) ? $_POST['chk'] : array(); if ($w == 'u') // 업데이트 diff --git a/adm/sms_admin/num_book_file_upload.php b/adm/sms_admin/num_book_file_upload.php index c7c40e479..7187aa57d 100644 --- a/adm/sms_admin/num_book_file_upload.php +++ b/adm/sms_admin/num_book_file_upload.php @@ -4,6 +4,8 @@ include_once("./_common.php"); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $upload_bg_no = isset($_REQUEST['upload_bg_no']) ? (int) $_REQUEST['upload_bg_no'] : 0; $confirm = isset($_REQUEST['confirm']) ? clean_xss_tags($_REQUEST['confirm'], 1, 1) : ''; diff --git a/adm/sms_admin/num_book_multi_update.php b/adm/sms_admin/num_book_multi_update.php index e1f579e76..e1b40b0c0 100644 --- a/adm/sms_admin/num_book_multi_update.php +++ b/adm/sms_admin/num_book_multi_update.php @@ -4,6 +4,8 @@ include_once("./_common.php"); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $g5['title'] = "전화번호부"; $post_bk_no = (isset($_POST['bk_no']) && is_array($_POST['bk_no'])) ? $_POST['bk_no'] : array(); diff --git a/adm/sms_admin/num_book_update.php b/adm/sms_admin/num_book_update.php index 6358e2017..c77fe8be3 100644 --- a/adm/sms_admin/num_book_update.php +++ b/adm/sms_admin/num_book_update.php @@ -4,6 +4,8 @@ include_once("./_common.php"); auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + $g5['title'] = "휴대폰번호 업데이트"; $g5['sms5_demo'] = 0; diff --git a/adm/sms_admin/num_group_update.php b/adm/sms_admin/num_group_update.php index b3ec46647..3e2af80e5 100644 --- a/adm/sms_admin/num_group_update.php +++ b/adm/sms_admin/num_group_update.php @@ -6,6 +6,8 @@ $post_chk = (isset($_POST['chk']) && is_array($_POST['chk'])) ? $_POST['chk'] : auth_check_menu($auth, $sub_menu, "w"); +if (function_exists('check_request_origin')) check_request_origin(G5_ADMIN_URL); + if ($w == 'u') // 업데이트 { for ($i=0; $i