Hide_D/tm_sam
3
2
Fork 0
Code Issues Pull Requests Releases Wiki Activity

개별 서버 리셋 과정에서 운영자의 권한을 제대로 확인하지 않는 문제점을 수정

Browse Source 
- 임시적인 우회책임.
This commit is contained in:
Hide_D
2018-02-16 22:27:54 +09:00
parent 1e60711f87
commit 4cb9e84106
2 changed files with 50 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
che_close/install2_ok.php
+25
View File
@@ -4,6 +4,31 @@ include "func.php";
$connect=dbConn(); $connect=dbConn();
$query = "select count(no) as cnt from general where user_id = 'admin'";
$result = MYDB_query($query, $connect) or Error(__LINE__.MYDB_error($connect),"");
$me = MYDB_fetch_array($result);
if($me['cnt']) {
echo "
<html>
<head>
<title>관리메뉴</title>
<meta HTTP-EQUIV='Content-Type' CONTENT='text/html; charset=utf-8'>
<link rel=stylesheet href=stylesheet.php type=text/css>
</head>
<body oncontextmenu='return false'>
서버가 제대로 초기화되지 않았습니다.<br>
";
banner();
echo "
</body>
</html>";
exit();
}
switch($scenario) { switch($scenario) {
case 0: $startyear = 180; break; case 0: $startyear = 180; break;
case 1: $startyear = 184 - 3; break; case 1: $startyear = 184 - 3; break;
che_close/reset.php
+25 -1
View File
@@ -5,10 +5,34 @@ include "schema.sql";
$connect = dbConn(); $connect = dbConn();
print_r($_SESSION);
$query = "select userlevel from general where user_id='$_SESSION[p_id]'";
$result = MYDB_query($query, $connect) or Error(__LINE__.MYDB_error($connect),"");
$me = MYDB_fetch_array($result);
if($me[userlevel] < 5) {
echo "
<html>
<head>
<title>관리메뉴</title>
<meta HTTP-EQUIV='Content-Type' CONTENT='text/html; charset=utf-8'>
<link rel=stylesheet href=stylesheet.php type=text/css>
</head>
<body oncontextmenu='return false'>
로그인 정보가 없습니다.<br>관리자라면 폐쇄중 로그인을 1회 실행해 주십시오.<br>
";
banner();
echo "
</body>
</html>";
exit();
}
// 삭제 // 삭제
unlink("d_setting/set.php"); unlink("d_setting/set.php");
// DB에 커넥트 하고 DB NAME으로 select DB
$connect = @MYDB_connect($hostname,$user_id,$password) or Error("MySQL-DB Connect<br>Error!!!",""); $connect = @MYDB_connect($hostname,$user_id,$password) or Error("MySQL-DB Connect<br>Error!!!","");
if(MYDB_error($connect)) Error(__LINE__.MYDB_error($connect),""); if(MYDB_error($connect)) Error(__LINE__.MYDB_error($connect),"");
MYDB_select_db($dbname, $connect ) or Error("MySQL-DB Select<br>Error!!!",""); MYDB_select_db($dbname, $connect ) or Error("MySQL-DB Select<br>Error!!!","");