Lines 244-250
sub get_template_and_user {
Link Here
|
244 |
-value => '', |
244 |
-value => '', |
245 |
-expires => '', |
245 |
-expires => '', |
246 |
-HttpOnly => 1, |
246 |
-HttpOnly => 1, |
247 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
247 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
248 |
); |
248 |
); |
249 |
|
249 |
|
250 |
$template->param( |
250 |
$template->param( |
Lines 863-869
sub checkauth {
Link Here
|
863 |
-value => '', |
863 |
-value => '', |
864 |
-expires => '', |
864 |
-expires => '', |
865 |
-HttpOnly => 1, |
865 |
-HttpOnly => 1, |
866 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
866 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
867 |
); |
867 |
); |
868 |
$loggedin = 1; |
868 |
$loggedin = 1; |
869 |
} |
869 |
} |
Lines 996-1002
sub checkauth {
Link Here
|
996 |
-name => 'CGISESSID', |
996 |
-name => 'CGISESSID', |
997 |
-value => $session->id, |
997 |
-value => $session->id, |
998 |
-HttpOnly => 1, |
998 |
-HttpOnly => 1, |
999 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
999 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1000 |
); |
1000 |
); |
1001 |
$session->param( 'lasttime', time() ); |
1001 |
$session->param( 'lasttime', time() ); |
1002 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
1002 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
Lines 1026-1032
sub checkauth {
Link Here
|
1026 |
-name => 'CGISESSID', |
1026 |
-name => 'CGISESSID', |
1027 |
-value => $session->id, |
1027 |
-value => $session->id, |
1028 |
-HttpOnly => 1, |
1028 |
-HttpOnly => 1, |
1029 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1029 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1030 |
); |
1030 |
); |
1031 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
1031 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
1032 |
if ( !defined($pki_field) ) { |
1032 |
if ( !defined($pki_field) ) { |
Lines 1220-1226
sub checkauth {
Link Here
|
1220 |
-name => 'CGISESSID', |
1220 |
-name => 'CGISESSID', |
1221 |
-value => '', |
1221 |
-value => '', |
1222 |
-HttpOnly => 1, |
1222 |
-HttpOnly => 1, |
1223 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1223 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1224 |
); |
1224 |
); |
1225 |
$info{'wrongip'} = 1; |
1225 |
$info{'wrongip'} = 1; |
1226 |
} |
1226 |
} |
Lines 1310-1316
sub checkauth {
Link Here
|
1310 |
-name => 'CGISESSID', |
1310 |
-name => 'CGISESSID', |
1311 |
-value => '', |
1311 |
-value => '', |
1312 |
-HttpOnly => 1, |
1312 |
-HttpOnly => 1, |
1313 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1313 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1314 |
); |
1314 |
); |
1315 |
} |
1315 |
} |
1316 |
|
1316 |
|
Lines 1726-1732
sub check_api_auth {
Link Here
|
1726 |
-name => 'CGISESSID', |
1726 |
-name => 'CGISESSID', |
1727 |
-value => $session->id, |
1727 |
-value => $session->id, |
1728 |
-HttpOnly => 1, |
1728 |
-HttpOnly => 1, |
1729 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1729 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1730 |
); |
1730 |
); |
1731 |
$session->param( 'lasttime', time() ); |
1731 |
$session->param( 'lasttime', time() ); |
1732 |
my $flags = haspermission( $userid, $flagsrequired ); |
1732 |
my $flags = haspermission( $userid, $flagsrequired ); |
Lines 1781-1787
sub check_api_auth {
Link Here
|
1781 |
-name => 'CGISESSID', |
1781 |
-name => 'CGISESSID', |
1782 |
-value => $sessionID, |
1782 |
-value => $sessionID, |
1783 |
-HttpOnly => 1, |
1783 |
-HttpOnly => 1, |
1784 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1784 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1785 |
); |
1785 |
); |
1786 |
if ( $return == 1 ) { |
1786 |
if ( $return == 1 ) { |
1787 |
my ( |
1787 |
my ( |