From 3df5de5eb573471641f4a20fcfb01fcdbb068e8b Mon Sep 17 00:00:00 2001
From: hide_d <hided62@gmail.com>
Date: Sun, 25 Mar 2018 00:48:44 +0900
Subject: [PATCH] =?UTF-8?q?=EA=B4=80=EB=A6=AC=EC=9E=90=EB=8F=84=20?=
 =?UTF-8?q?=EB=A1=9C=EA=B7=B8=EC=9D=B8=ED=95=A0=20=EC=88=98=20=EC=97=86?=
 =?UTF-8?q?=EB=8A=94=20=EB=AC=B8=EC=A0=9C=20=ED=95=B4=EA=B2=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 j_login.php | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/j_login.php b/j_login.php
index 460799e2..ac47e311 100644
--- a/j_login.php
+++ b/j_login.php
@@ -20,14 +20,6 @@ if(!$username || !$password){
     ]);
 }
 
-$canLogin = RootDB::db()->queryFirstField('SELECT `LOGIN` FROM `SYSTEM` WHERE `NO` = 1');
-if($canLogin != 'Y'){
-    Json::die([
-        'result'=>false,
-        'reason'=>'현재는 로그인이 금지되어있습니다!'
-    ]);
-}
-
 $userInfo = RootDB::db()->queryFirstRow(
     'SELECT `no`, `id`, `name`, `grade`, `delete_after` '.
     'from member where id=%s_username AND '.
@@ -43,6 +35,14 @@ if(!$userInfo){
     ]);
 }
 
+$canLogin = RootDB::db()->queryFirstField('SELECT `LOGIN` FROM `SYSTEM` WHERE `NO` = 1');
+if($canLogin != 'Y' && $userInfo['grade'] < 5){
+    Json::die([
+        'result'=>false,
+        'reason'=>'현재는 로그인이 금지되어있습니다!'
+    ]);
+}
+
 $nowDate = TimeUtil::DatetimeNow();
 if($userInfo['delete_after']){
     if($userInfo['delete_after'] < $nowDate){