|
Lines 229-234
sub get_template_and_user {
Link Here
|
| 229 |
-value => '', |
229 |
-value => '', |
| 230 |
-expires => '', |
230 |
-expires => '', |
| 231 |
-HttpOnly => 1, |
231 |
-HttpOnly => 1, |
|
|
232 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 232 |
); |
233 |
); |
| 233 |
|
234 |
|
| 234 |
$template->param( |
235 |
$template->param( |
|
Lines 825-830
sub checkauth {
Link Here
|
| 825 |
-value => '', |
826 |
-value => '', |
| 826 |
-expires => '', |
827 |
-expires => '', |
| 827 |
-HttpOnly => 1, |
828 |
-HttpOnly => 1, |
|
|
829 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 828 |
); |
830 |
); |
| 829 |
$loggedin = 1; |
831 |
$loggedin = 1; |
| 830 |
} |
832 |
} |
|
Lines 925-931
sub checkauth {
Link Here
|
| 925 |
$cookie = $query->cookie( |
927 |
$cookie = $query->cookie( |
| 926 |
-name => 'CGISESSID', |
928 |
-name => 'CGISESSID', |
| 927 |
-value => $session->id, |
929 |
-value => $session->id, |
| 928 |
-HttpOnly => 1 |
930 |
-HttpOnly => 1, |
|
|
931 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 929 |
); |
932 |
); |
| 930 |
$session->param( 'lasttime', time() ); |
933 |
$session->param( 'lasttime', time() ); |
| 931 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
934 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
|
Lines 954-960
sub checkauth {
Link Here
|
| 954 |
$cookie = $query->cookie( |
957 |
$cookie = $query->cookie( |
| 955 |
-name => 'CGISESSID', |
958 |
-name => 'CGISESSID', |
| 956 |
-value => $session->id, |
959 |
-value => $session->id, |
| 957 |
-HttpOnly => 1 |
960 |
-HttpOnly => 1, |
|
|
961 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 958 |
); |
962 |
); |
| 959 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
963 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
| 960 |
if ( !defined($pki_field) ) { |
964 |
if ( !defined($pki_field) ) { |
|
Lines 1120-1126
sub checkauth {
Link Here
|
| 1120 |
$cookie = $query->cookie( |
1124 |
$cookie = $query->cookie( |
| 1121 |
-name => 'CGISESSID', |
1125 |
-name => 'CGISESSID', |
| 1122 |
-value => '', |
1126 |
-value => '', |
| 1123 |
-HttpOnly => 1 |
1127 |
-HttpOnly => 1, |
|
|
1128 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1124 |
); |
1129 |
); |
| 1125 |
$info{'wrongip'} = 1; |
1130 |
$info{'wrongip'} = 1; |
| 1126 |
} |
1131 |
} |
|
Lines 1198-1204
sub checkauth {
Link Here
|
| 1198 |
$cookie = $query->cookie( |
1203 |
$cookie = $query->cookie( |
| 1199 |
-name => 'CGISESSID', |
1204 |
-name => 'CGISESSID', |
| 1200 |
-value => '', |
1205 |
-value => '', |
| 1201 |
-HttpOnly => 1 |
1206 |
-HttpOnly => 1, |
|
|
1207 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1202 |
); |
1208 |
); |
| 1203 |
} |
1209 |
} |
| 1204 |
|
1210 |
|
|
Lines 1464-1469
sub check_api_auth {
Link Here
|
| 1464 |
-name => 'CGISESSID', |
1470 |
-name => 'CGISESSID', |
| 1465 |
-value => $session->id, |
1471 |
-value => $session->id, |
| 1466 |
-HttpOnly => 1, |
1472 |
-HttpOnly => 1, |
|
|
1473 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1467 |
); |
1474 |
); |
| 1468 |
$session->param( 'lasttime', time() ); |
1475 |
$session->param( 'lasttime', time() ); |
| 1469 |
my $flags = haspermission( $userid, $flagsrequired ); |
1476 |
my $flags = haspermission( $userid, $flagsrequired ); |
|
Lines 1518-1523
sub check_api_auth {
Link Here
|
| 1518 |
-name => 'CGISESSID', |
1525 |
-name => 'CGISESSID', |
| 1519 |
-value => $sessionID, |
1526 |
-value => $sessionID, |
| 1520 |
-HttpOnly => 1, |
1527 |
-HttpOnly => 1, |
|
|
1528 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1521 |
); |
1529 |
); |
| 1522 |
if ( $return == 1 ) { |
1530 |
if ( $return == 1 ) { |
| 1523 |
my ( |
1531 |
my ( |