|
Lines 244-250
sub get_template_and_user {
Link Here
|
| 244 |
-value => '', |
244 |
-value => '', |
| 245 |
-expires => '', |
245 |
-expires => '', |
| 246 |
-HttpOnly => 1, |
246 |
-HttpOnly => 1, |
| 247 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
247 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 248 |
); |
248 |
); |
| 249 |
|
249 |
|
| 250 |
$template->param( |
250 |
$template->param( |
|
Lines 863-869
sub checkauth {
Link Here
|
| 863 |
-value => '', |
863 |
-value => '', |
| 864 |
-expires => '', |
864 |
-expires => '', |
| 865 |
-HttpOnly => 1, |
865 |
-HttpOnly => 1, |
| 866 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
866 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 867 |
); |
867 |
); |
| 868 |
$loggedin = 1; |
868 |
$loggedin = 1; |
| 869 |
} |
869 |
} |
|
Lines 996-1002
sub checkauth {
Link Here
|
| 996 |
-name => 'CGISESSID', |
996 |
-name => 'CGISESSID', |
| 997 |
-value => $session->id, |
997 |
-value => $session->id, |
| 998 |
-HttpOnly => 1, |
998 |
-HttpOnly => 1, |
| 999 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
999 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1000 |
); |
1000 |
); |
| 1001 |
$session->param( 'lasttime', time() ); |
1001 |
$session->param( 'lasttime', time() ); |
| 1002 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
1002 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
|
Lines 1026-1032
sub checkauth {
Link Here
|
| 1026 |
-name => 'CGISESSID', |
1026 |
-name => 'CGISESSID', |
| 1027 |
-value => $session->id, |
1027 |
-value => $session->id, |
| 1028 |
-HttpOnly => 1, |
1028 |
-HttpOnly => 1, |
| 1029 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1029 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1030 |
); |
1030 |
); |
| 1031 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
1031 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
| 1032 |
if ( !defined($pki_field) ) { |
1032 |
if ( !defined($pki_field) ) { |
|
Lines 1220-1226
sub checkauth {
Link Here
|
| 1220 |
-name => 'CGISESSID', |
1220 |
-name => 'CGISESSID', |
| 1221 |
-value => '', |
1221 |
-value => '', |
| 1222 |
-HttpOnly => 1, |
1222 |
-HttpOnly => 1, |
| 1223 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1223 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1224 |
); |
1224 |
); |
| 1225 |
$info{'wrongip'} = 1; |
1225 |
$info{'wrongip'} = 1; |
| 1226 |
} |
1226 |
} |
|
Lines 1310-1316
sub checkauth {
Link Here
|
| 1310 |
-name => 'CGISESSID', |
1310 |
-name => 'CGISESSID', |
| 1311 |
-value => '', |
1311 |
-value => '', |
| 1312 |
-HttpOnly => 1, |
1312 |
-HttpOnly => 1, |
| 1313 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1313 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1314 |
); |
1314 |
); |
| 1315 |
} |
1315 |
} |
| 1316 |
|
1316 |
|
|
Lines 1726-1732
sub check_api_auth {
Link Here
|
| 1726 |
-name => 'CGISESSID', |
1726 |
-name => 'CGISESSID', |
| 1727 |
-value => $session->id, |
1727 |
-value => $session->id, |
| 1728 |
-HttpOnly => 1, |
1728 |
-HttpOnly => 1, |
| 1729 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1729 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1730 |
); |
1730 |
); |
| 1731 |
$session->param( 'lasttime', time() ); |
1731 |
$session->param( 'lasttime', time() ); |
| 1732 |
my $flags = haspermission( $userid, $flagsrequired ); |
1732 |
my $flags = haspermission( $userid, $flagsrequired ); |
|
Lines 1781-1787
sub check_api_auth {
Link Here
|
| 1781 |
-name => 'CGISESSID', |
1781 |
-name => 'CGISESSID', |
| 1782 |
-value => $sessionID, |
1782 |
-value => $sessionID, |
| 1783 |
-HttpOnly => 1, |
1783 |
-HttpOnly => 1, |
| 1784 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1784 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1785 |
); |
1785 |
); |
| 1786 |
if ( $return == 1 ) { |
1786 |
if ( $return == 1 ) { |
| 1787 |
my ( |
1787 |
my ( |