diff --git a/bbs/current_connect.php b/bbs/current_connect.php index 38650a622..4d7c8c593 100644 --- a/bbs/current_connect.php +++ b/bbs/current_connect.php @@ -18,7 +18,7 @@ for ($i=0; $row=sql_fetch_array($result); $i++) { if ($row['mb_id']) { $list[$i]['name'] = get_sideview($row['mb_id'], cut_str($row['mb_nick'], $config['cf_cut_name']), $row['mb_email'], $row['mb_homepage']); } else { - if ($is_admin) + if ($is_admin === 'super') $list[$i]['name'] = $row['lo_ip']; else $list[$i]['name'] = preg_replace("/([0-9]+).([0-9]+).([0-9]+).([0-9]+)/", G5_IP_DISPLAY, $row['lo_ip']); diff --git a/bbs/poll_etc_update.php b/bbs/poll_etc_update.php index 860887fdb..8cd00b6b9 100644 --- a/bbs/poll_etc_update.php +++ b/bbs/poll_etc_update.php @@ -61,7 +61,8 @@ else if ($w == 'd') if ($member['mb_id'] || $is_admin == 'super') { $sql = " delete from {$g5['poll_etc_table']} where pc_id = '{$pc_id}' "; - if (!$is_admin) + // 최고관리자가 아니면 본인 기타의견만 삭제 (게시판/그룹 관리자 문맥으로 우회 불가) + if ($is_admin !== 'super') $sql .= " and mb_id = '{$member['mb_id']}' "; sql_query($sql); } diff --git a/shop/itemqaformupdate.php b/shop/itemqaformupdate.php index 364466027..dc232c91d 100644 --- a/shop/itemqaformupdate.php +++ b/shop/itemqaformupdate.php @@ -57,7 +57,7 @@ if ($w == "") } else if ($w == "u") { - if (!$is_admin) + if ($is_admin !== 'super') { $sql = " select count(*) as cnt from {$g5['g5_shop_item_qa_table']} where mb_id = '{$member['mb_id']}' and iq_id = '$iq_id' "; $row = sql_fetch($sql); @@ -86,7 +86,7 @@ else if ($w == "u") } else if ($w == "d") { - if (!$is_admin) + if ($is_admin !== 'super') { $sql = " select iq_answer from {$g5['g5_shop_item_qa_table']} where mb_id = '{$member['mb_id']}' and iq_id = '$iq_id' "; $row = sql_fetch($sql); diff --git a/shop/itemuseformupdate.php b/shop/itemuseformupdate.php index 358a2c376..c95afa12f 100644 --- a/shop/itemuseformupdate.php +++ b/shop/itemuseformupdate.php @@ -91,7 +91,7 @@ else if ($w == "u") } else if ($w == "d") { - if (!$is_admin) + if ($is_admin !== 'super') { $sql = " select count(*) as cnt from {$g5['g5_shop_item_use_table']} where mb_id = '{$member['mb_id']}' and is_id = '$is_id' "; $row = sql_fetch($sql); diff --git a/shop/kakaopay/kakaopay_cancel.php b/shop/kakaopay/kakaopay_cancel.php index 94ffdd75e..cdb3800f3 100644 --- a/shop/kakaopay/kakaopay_cancel.php +++ b/shop/kakaopay/kakaopay_cancel.php @@ -50,7 +50,7 @@ if($cancelFlag == "true") $db_check = 1; $cancel_msg = "DB FAIL"; - if( $is_admin ){ + if( $is_admin === 'super' ){ $tmp = sql_fetch("select * from `{$g5['g5_shop_order_table']}` where od_tno = '".trim($_REQUEST['TID'])."' "); if( $tmp['od_pg'] === 'KAKAOPAY' ){