[security]그누보드5 XSS, SQL Injection 취약점 수정
This commit is contained in:
1 parent
c38de4c94b
commit
f2e7dbc5ed
24 files changed
+49
-49
No files matched your search
+1
-1
@@ -389,7 +389,7 @@ function order_select($fld, $sel = '')
|
||||
// 불법접근을 막도록 토큰을 생성하면서 토큰값을 리턴
|
||||
function get_admin_token()
|
||||
{
|
||||
$token = md5(uniqid(rand(), true));
|
||||
$token = get_random_token_string(16);
|
||||
set_session('ss_admin_token', $token);
|
||||
|
||||
return $token;
|
||||
|
||||
Reference in new issue
Block a user