Update orderpay.pgkcp.php

This commit is contained in:
Namhyeon Go 2019-10-14 00:43:14 +09:00 committed by GitHub
parent 05dee1b4b9
commit d746bf15c6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -2,6 +2,7 @@
/**
* @file orderpay.pgkcp.php
* @date 2018-08-25
* @updated 2019-10-14
* @author Go Namhyeon <gnh1201@gmail.com>
* @brief KCP PG(Payment Gateway) Controller
*/
@ -9,6 +10,7 @@
if(!defined("_DEF_RSF_")) set_error_exit("do not allow access");
$debug = get_requested_value("debug");
$mode = get_requested_value("mode");
if($debug != "true") {
// 필수 항목 체크
@ -20,7 +22,7 @@ if($debug != "true") {
}
// detect CSRF attack
if(check_token_abuse_by_requests("_token")) {
if($mode != "widget" && check_token_abuse_by_requests("_token")) {
set_error("Security violation: Access denied. May be your session is expired or abused.");
show_errors();
}