Lines 230-235
sub get_template_and_user {
Link Here
|
230 |
-value => '', |
230 |
-value => '', |
231 |
-expires => '', |
231 |
-expires => '', |
232 |
-HttpOnly => 1, |
232 |
-HttpOnly => 1, |
|
|
233 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
233 |
); |
234 |
); |
234 |
|
235 |
|
235 |
$template->param( |
236 |
$template->param( |
Lines 826-831
sub checkauth {
Link Here
|
826 |
-value => '', |
827 |
-value => '', |
827 |
-expires => '', |
828 |
-expires => '', |
828 |
-HttpOnly => 1, |
829 |
-HttpOnly => 1, |
|
|
830 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
829 |
); |
831 |
); |
830 |
$loggedin = 1; |
832 |
$loggedin = 1; |
831 |
} |
833 |
} |
Lines 926-932
sub checkauth {
Link Here
|
926 |
$cookie = $query->cookie( |
928 |
$cookie = $query->cookie( |
927 |
-name => 'CGISESSID', |
929 |
-name => 'CGISESSID', |
928 |
-value => $session->id, |
930 |
-value => $session->id, |
929 |
-HttpOnly => 1 |
931 |
-HttpOnly => 1, |
|
|
932 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
930 |
); |
933 |
); |
931 |
$session->param( 'lasttime', time() ); |
934 |
$session->param( 'lasttime', time() ); |
932 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
935 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
Lines 955-961
sub checkauth {
Link Here
|
955 |
$cookie = $query->cookie( |
958 |
$cookie = $query->cookie( |
956 |
-name => 'CGISESSID', |
959 |
-name => 'CGISESSID', |
957 |
-value => $session->id, |
960 |
-value => $session->id, |
958 |
-HttpOnly => 1 |
961 |
-HttpOnly => 1, |
|
|
962 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
959 |
); |
963 |
); |
960 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
964 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
961 |
if ( !defined($pki_field) ) { |
965 |
if ( !defined($pki_field) ) { |
Lines 1126-1132
sub checkauth {
Link Here
|
1126 |
$cookie = $query->cookie( |
1130 |
$cookie = $query->cookie( |
1127 |
-name => 'CGISESSID', |
1131 |
-name => 'CGISESSID', |
1128 |
-value => '', |
1132 |
-value => '', |
1129 |
-HttpOnly => 1 |
1133 |
-HttpOnly => 1, |
|
|
1134 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1130 |
); |
1135 |
); |
1131 |
$info{'wrongip'} = 1; |
1136 |
$info{'wrongip'} = 1; |
1132 |
} |
1137 |
} |
Lines 1207-1213
sub checkauth {
Link Here
|
1207 |
$cookie = $query->cookie( |
1212 |
$cookie = $query->cookie( |
1208 |
-name => 'CGISESSID', |
1213 |
-name => 'CGISESSID', |
1209 |
-value => '', |
1214 |
-value => '', |
1210 |
-HttpOnly => 1 |
1215 |
-HttpOnly => 1, |
|
|
1216 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1211 |
); |
1217 |
); |
1212 |
} |
1218 |
} |
1213 |
|
1219 |
|
Lines 1474-1479
sub check_api_auth {
Link Here
|
1474 |
-name => 'CGISESSID', |
1480 |
-name => 'CGISESSID', |
1475 |
-value => $session->id, |
1481 |
-value => $session->id, |
1476 |
-HttpOnly => 1, |
1482 |
-HttpOnly => 1, |
|
|
1483 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1477 |
); |
1484 |
); |
1478 |
$session->param( 'lasttime', time() ); |
1485 |
$session->param( 'lasttime', time() ); |
1479 |
my $flags = haspermission( $userid, $flagsrequired ); |
1486 |
my $flags = haspermission( $userid, $flagsrequired ); |
Lines 1528-1533
sub check_api_auth {
Link Here
|
1528 |
-name => 'CGISESSID', |
1535 |
-name => 'CGISESSID', |
1529 |
-value => $sessionID, |
1536 |
-value => $sessionID, |
1530 |
-HttpOnly => 1, |
1537 |
-HttpOnly => 1, |
|
|
1538 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1531 |
); |
1539 |
); |
1532 |
if ( $return == 1 ) { |
1540 |
if ( $return == 1 ) { |
1533 |
my ( |
1541 |
my ( |