diff --git a/j_login.php b/j_login.php
index b431f6e6..5c5c33ee 100644
--- a/j_login.php
+++ b/j_login.php
@@ -5,6 +5,8 @@ namespace sammo;
 require(__DIR__ . '/vendor/autoload.php');
 require(__DIR__ . '/oauth_kakao/lib.join.php');
 
+WebUtil::requireAJAX();
+
 use \kakao\Kakao_REST_API_Helper as Kakao_REST_API_Helper;
 
 $RootDB = RootDB::db();
@@ -13,8 +15,8 @@ if ($session->isLoggedIn()) {
     $session->logout();
 }
 
-$username = mb_strtolower(Util::getReq('username'), 'utf-8');
-$password = Util::getReq('password');
+$username = mb_strtolower(Util::getPost('username'), 'utf-8');
+$password = Util::getPost('password');
 
 if (!$username || !$password) {
     Json::die([
diff --git a/j_updateServer.php b/j_updateServer.php
index 023cf638..7cad2607 100644
--- a/j_updateServer.php
+++ b/j_updateServer.php
@@ -4,6 +4,8 @@ namespace sammo;
 
 require(__DIR__ . '/vendor/autoload.php');
 
+WebUtil::requireAJAX();
+
 function getVersion($target = null)
 {
     if ($target) {
@@ -39,7 +41,7 @@ if (!$v->validate()) {
     ]);
 }
 
-$target = Util::getReq('target');
+$target = Util::getPost('target');
 
 $server = basename($request['server']);