권한 없이도 reset.php에 접속하면 초기화 가능한 문제 해결 -_-;

2018-02-04 04:22:30 +09:00
parent 26ab9044f0
commit 4624e511fc
1 changed files with 11 additions and 0 deletions
@@ -3,8 +3,19 @@ include "lib.php";
 include "func.php";
 include "schema.php";

+$userID = getUserID();
+$userLevel = toInt(getRootDB()->queryFirstField('select userlevel from member where no=%i',$userID));
+
+if($userLevel < 5){
+    echo '관리자 아님';
+    die();
+}
+
 $connect = dbConn();

+
+
+
 // 삭제
 unlink("d_setting/set.php");