|
Lines 230-235
sub get_template_and_user {
Link Here
|
| 230 |
-value => '', |
230 |
-value => '', |
| 231 |
-expires => '', |
231 |
-expires => '', |
| 232 |
-HttpOnly => 1, |
232 |
-HttpOnly => 1, |
|
|
233 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 233 |
); |
234 |
); |
| 234 |
|
235 |
|
| 235 |
$template->param( |
236 |
$template->param( |
|
Lines 826-831
sub checkauth {
Link Here
|
| 826 |
-value => '', |
827 |
-value => '', |
| 827 |
-expires => '', |
828 |
-expires => '', |
| 828 |
-HttpOnly => 1, |
829 |
-HttpOnly => 1, |
|
|
830 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 829 |
); |
831 |
); |
| 830 |
$loggedin = 1; |
832 |
$loggedin = 1; |
| 831 |
} |
833 |
} |
|
Lines 926-932
sub checkauth {
Link Here
|
| 926 |
$cookie = $query->cookie( |
928 |
$cookie = $query->cookie( |
| 927 |
-name => 'CGISESSID', |
929 |
-name => 'CGISESSID', |
| 928 |
-value => $session->id, |
930 |
-value => $session->id, |
| 929 |
-HttpOnly => 1 |
931 |
-HttpOnly => 1, |
|
|
932 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 930 |
); |
933 |
); |
| 931 |
$session->param( 'lasttime', time() ); |
934 |
$session->param( 'lasttime', time() ); |
| 932 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
935 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
|
Lines 955-961
sub checkauth {
Link Here
|
| 955 |
$cookie = $query->cookie( |
958 |
$cookie = $query->cookie( |
| 956 |
-name => 'CGISESSID', |
959 |
-name => 'CGISESSID', |
| 957 |
-value => $session->id, |
960 |
-value => $session->id, |
| 958 |
-HttpOnly => 1 |
961 |
-HttpOnly => 1, |
|
|
962 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 959 |
); |
963 |
); |
| 960 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
964 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
| 961 |
if ( !defined($pki_field) ) { |
965 |
if ( !defined($pki_field) ) { |
|
Lines 1126-1132
sub checkauth {
Link Here
|
| 1126 |
$cookie = $query->cookie( |
1130 |
$cookie = $query->cookie( |
| 1127 |
-name => 'CGISESSID', |
1131 |
-name => 'CGISESSID', |
| 1128 |
-value => '', |
1132 |
-value => '', |
| 1129 |
-HttpOnly => 1 |
1133 |
-HttpOnly => 1, |
|
|
1134 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1130 |
); |
1135 |
); |
| 1131 |
$info{'wrongip'} = 1; |
1136 |
$info{'wrongip'} = 1; |
| 1132 |
} |
1137 |
} |
|
Lines 1207-1213
sub checkauth {
Link Here
|
| 1207 |
$cookie = $query->cookie( |
1212 |
$cookie = $query->cookie( |
| 1208 |
-name => 'CGISESSID', |
1213 |
-name => 'CGISESSID', |
| 1209 |
-value => '', |
1214 |
-value => '', |
| 1210 |
-HttpOnly => 1 |
1215 |
-HttpOnly => 1, |
|
|
1216 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1211 |
); |
1217 |
); |
| 1212 |
} |
1218 |
} |
| 1213 |
|
1219 |
|
|
Lines 1474-1479
sub check_api_auth {
Link Here
|
| 1474 |
-name => 'CGISESSID', |
1480 |
-name => 'CGISESSID', |
| 1475 |
-value => $session->id, |
1481 |
-value => $session->id, |
| 1476 |
-HttpOnly => 1, |
1482 |
-HttpOnly => 1, |
|
|
1483 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1477 |
); |
1484 |
); |
| 1478 |
$session->param( 'lasttime', time() ); |
1485 |
$session->param( 'lasttime', time() ); |
| 1479 |
my $flags = haspermission( $userid, $flagsrequired ); |
1486 |
my $flags = haspermission( $userid, $flagsrequired ); |
|
Lines 1528-1533
sub check_api_auth {
Link Here
|
| 1528 |
-name => 'CGISESSID', |
1535 |
-name => 'CGISESSID', |
| 1529 |
-value => $sessionID, |
1536 |
-value => $sessionID, |
| 1530 |
-HttpOnly => 1, |
1537 |
-HttpOnly => 1, |
|
|
1538 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
| 1531 |
); |
1539 |
); |
| 1532 |
if ( $return == 1 ) { |
1540 |
if ( $return == 1 ) { |
| 1533 |
my ( |
1541 |
my ( |