From 422991aaf50e37578f7fc6209dfd6631c59766eb Mon Sep 17 00:00:00 2001
From: Lectom C Han <hchy0730@gmail.com>
Date: Thu, 5 Feb 2026 12:53:59 +0900
Subject: [PATCH] =?UTF-8?q?=EC=84=B8=EC=85=98=20=EA=B2=BD=EB=A1=9C=20?=
 =?UTF-8?q?=ED=95=98=EB=93=9C=EC=BD=94=EB=94=A9=20=EC=A0=9C=EA=B1=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 kngil/auth/oidc-callback.php    |  1 +
 kngil/bbs/adm.php               |  6 ++----
 kngil/bbs/adm_guard.php         |  6 ++----
 kngil/bbs/env.php               | 12 ++++++++++++
 kngil/bbs/login.php             |  1 +
 kngil/bbs/logout.php            |  3 ++-
 kngil/bbs/mypage01.php          |  3 ++-
 kngil/bbs/mypage02.php          |  3 ++-
 kngil/bbs/mypage03.php          |  3 ++-
 kngil/bbs/qa_comment.php        |  3 ++-
 kngil/bbs/qa_comment_delete.php |  3 ++-
 kngil/bbs/qa_comment_update.php |  3 ++-
 kngil/bbs/qa_detail.php         |  6 ++----
 kngil/bbs/qa_list.php           |  6 ++----
 kngil/bbs/qa_status.php         |  6 ++----
 kngil/bbs/qa_write.php          |  6 ++----
 kngil/skin/index.php            |  5 ++---
 17 files changed, 42 insertions(+), 34 deletions(-)

diff --git a/kngil/auth/oidc-callback.php b/kngil/auth/oidc-callback.php
index 586e8c3..e524f63 100644
--- a/kngil/auth/oidc-callback.php
+++ b/kngil/auth/oidc-callback.php
@@ -253,6 +253,7 @@ try {
     }
 
     // 3. 세션 설정 (bbs/login.php 와 동일한 구조)
+    session_regenerate_id(true);
     $_SESSION['login'] = [
         'member_id' => $user['member_id'],
         'user_id'   => $user['user_id'],
diff --git a/kngil/bbs/adm.php b/kngil/bbs/adm.php
index 771e133..8b911e1 100644
--- a/kngil/bbs/adm.php
+++ b/kngil/bbs/adm.php
@@ -3,10 +3,8 @@ error_reporting(E_ALL);
 ini_set('display_errors', 1);
 header('Content-Type: application/json; charset=utf-8');
 
-if (session_status() === PHP_SESSION_NONE) {
-    session_start();
-}
-
+require_once __DIR__ . '/env.php';
+kngil_start_session();
 require_once __DIR__ . '/db_conn.php';
 
 /* =================================================
diff --git a/kngil/bbs/adm_guard.php b/kngil/bbs/adm_guard.php
index 50b3b35..5172f45 100644
--- a/kngil/bbs/adm_guard.php
+++ b/kngil/bbs/adm_guard.php
@@ -1,8 +1,6 @@
 <?php
-if (session_status() === PHP_SESSION_NONE) {
-    session_start();
-}
-
+require_once __DIR__ . '/env.php';
+kngil_start_session();
 /* =========================
    1. 로그인 체크
 ========================= */
diff --git a/kngil/bbs/env.php b/kngil/bbs/env.php
index 916f9ec..ad62590 100644
--- a/kngil/bbs/env.php
+++ b/kngil/bbs/env.php
@@ -67,6 +67,18 @@ function kngil_start_session(): void
 
     $params = session_get_cookie_params();
     $samesite = $params['samesite'] ?? 'Lax';
+    $cookieName = session_name();
+
+    if (!empty($_COOKIE[$cookieName])) {
+        setcookie($cookieName, '', [
+            'expires' => time() - 3600,
+            'path' => '/kngil',
+            'domain' => $params['domain'],
+            'secure' => $params['secure'],
+            'httponly' => $params['httponly'],
+            'samesite' => $samesite,
+        ]);
+    }
 
     session_set_cookie_params([
         'lifetime' => $params['lifetime'],
diff --git a/kngil/bbs/login.php b/kngil/bbs/login.php
index 85a6cb8..34c9195 100644
--- a/kngil/bbs/login.php
+++ b/kngil/bbs/login.php
@@ -55,6 +55,7 @@ if ($user['user_pw'] !== $pw) {
 }
 
 // ✅ 로그인 성공
+session_regenerate_id(true);
 $_SESSION['login'] = [
     'member_id' => $user['member_id'],
     'user_id'   => $user['user_id'],
diff --git a/kngil/bbs/logout.php b/kngil/bbs/logout.php
index 0692c77..741e329 100644
--- a/kngil/bbs/logout.php
+++ b/kngil/bbs/logout.php
@@ -1,5 +1,6 @@
 <?php
-session_start();
+require_once __DIR__ . '/env.php';
+kngil_start_session();
 session_destroy();
 
 header('Location: /');
diff --git a/kngil/bbs/mypage01.php b/kngil/bbs/mypage01.php
index 4931891..9d12906 100644
--- a/kngil/bbs/mypage01.php
+++ b/kngil/bbs/mypage01.php
@@ -1,6 +1,7 @@
 <?php
 //mypage01.php
-session_start();
+require_once __DIR__ . '/env.php';
+kngil_start_session();
 require_once $_SERVER['DOCUMENT_ROOT'].'/kngil/bbs/db_conn.php';
 
 if (!isset($_SESSION['login'])) {
diff --git a/kngil/bbs/mypage02.php b/kngil/bbs/mypage02.php
index 7f38b34..5a4cea4 100644
--- a/kngil/bbs/mypage02.php
+++ b/kngil/bbs/mypage02.php
@@ -1,5 +1,6 @@
 <?php
-session_start();
+require_once __DIR__ . '/env.php';
+kngil_start_session();
 require_once $_SERVER['DOCUMENT_ROOT'].'/kngil/bbs/db_conn.php';
 
 header('Content-Type: application/json');
diff --git a/kngil/bbs/mypage03.php b/kngil/bbs/mypage03.php
index 4a2d103..4cc448a 100644
--- a/kngil/bbs/mypage03.php
+++ b/kngil/bbs/mypage03.php
@@ -1,5 +1,6 @@
 <?php
-session_start();
+require_once __DIR__ . '/env.php';
+kngil_start_session();
 require_once $_SERVER['DOCUMENT_ROOT'].'/kngil/bbs/db_conn.php';
 
 header('Content-Type: application/json');
diff --git a/kngil/bbs/qa_comment.php b/kngil/bbs/qa_comment.php
index 70bad7d..b439d0d 100644
--- a/kngil/bbs/qa_comment.php
+++ b/kngil/bbs/qa_comment.php
@@ -1,5 +1,6 @@
 <?php
-session_start();
+require_once __DIR__ . '/env.php';
+kngil_start_session();
 header('Content-Type: application/json');
 
 if (empty($_SESSION['login'])) {
diff --git a/kngil/bbs/qa_comment_delete.php b/kngil/bbs/qa_comment_delete.php
index 57e9980..4ad6135 100644
--- a/kngil/bbs/qa_comment_delete.php
+++ b/kngil/bbs/qa_comment_delete.php
@@ -1,5 +1,6 @@
 <?php
-session_start();
+require_once __DIR__ . '/env.php';
+kngil_start_session();
 header('Content-Type: application/json');
 
 require_once __DIR__.'/db_conn.php';
diff --git a/kngil/bbs/qa_comment_update.php b/kngil/bbs/qa_comment_update.php
index fc294a2..f112e4e 100644
--- a/kngil/bbs/qa_comment_update.php
+++ b/kngil/bbs/qa_comment_update.php
@@ -1,5 +1,6 @@
 <?php
-session_start();
+require_once __DIR__ . '/env.php';
+kngil_start_session();
 header('Content-Type: application/json');
 
 require_once __DIR__.'/db_conn.php';
diff --git a/kngil/bbs/qa_detail.php b/kngil/bbs/qa_detail.php
index 0ff584b..2063e12 100644
--- a/kngil/bbs/qa_detail.php
+++ b/kngil/bbs/qa_detail.php
@@ -7,10 +7,8 @@ error_reporting(E_ALL);
 /* ===============================
    1. 세션 & 로그인 체크
 =============================== */
-if (session_status() === PHP_SESSION_NONE) {
-    session_start();
-}
-
+require_once __DIR__ . '/env.php';
+kngil_start_session();
 if (empty($_SESSION['login'])) {
     echo "<script>
         alert('로그인 후 이용 가능합니다.');
diff --git a/kngil/bbs/qa_list.php b/kngil/bbs/qa_list.php
index fce207e..f2deb49 100644
--- a/kngil/bbs/qa_list.php
+++ b/kngil/bbs/qa_list.php
@@ -7,10 +7,8 @@
 ini_set('display_errors', 1);
 error_reporting(E_ALL);
 
-if (session_status() === PHP_SESSION_NONE) {
-    session_start();
-}
-
+require_once __DIR__ . '/env.php';
+kngil_start_session();
 require_once $_SERVER['DOCUMENT_ROOT'].'/kngil/bbs/db_conn.php';
 
 /* =========================
diff --git a/kngil/bbs/qa_status.php b/kngil/bbs/qa_status.php
index a4358c4..e4ce4fa 100644
--- a/kngil/bbs/qa_status.php
+++ b/kngil/bbs/qa_status.php
@@ -1,8 +1,6 @@
 <?php
-if (session_status() === PHP_SESSION_NONE) {
-    session_start();
-}
-
+require_once __DIR__ . '/env.php';
+kngil_start_session();
 require_once $_SERVER['DOCUMENT_ROOT'].'/kngil/bbs/db_conn.php';
 require_once $_SERVER['DOCUMENT_ROOT'].'/kngil/bbs/adm_guard.php';
 
diff --git a/kngil/bbs/qa_write.php b/kngil/bbs/qa_write.php
index eb65b68..5a859bd 100644
--- a/kngil/bbs/qa_write.php
+++ b/kngil/bbs/qa_write.php
@@ -6,10 +6,8 @@ error_reporting(E_ALL);
 /* ===============================
    1. 세션 & 로그인 체크
 =============================== */
-if (session_status() === PHP_SESSION_NONE) {
-    session_start();
-}
-
+require_once __DIR__ . '/env.php';
+kngil_start_session();
 // echo '<pre>';
 // var_dump($_SESSION['login']);
 // exit;
diff --git a/kngil/skin/index.php b/kngil/skin/index.php
index 2f395a2..539fc21 100644
--- a/kngil/skin/index.php
+++ b/kngil/skin/index.php
@@ -1,7 +1,6 @@
 <?php
-if (session_status() === PHP_SESSION_NONE) {
-    session_start();
-}
+require_once __DIR__ . '/../bbs/env.php';
+kngil_start_session();
 ?>
 <!DOCTYPE html>
 <!--index.php-->