View | Details | Raw Unified | Return to bug 38258
Collapse All | Expand All

(-)a/acqui/check_uniqueness.pl (-1 / +2 lines)
Lines 38-45 use C4::Items qw( SearchItems ); Link Here
38
use C4::Auth   qw( check_cookie_auth );
38
use C4::Auth   qw( check_cookie_auth );
39
39
40
my $input = CGI->new;
40
my $input = CGI->new;
41
my $session_cookie = $input->cookie('CGISESSID');
41
my ($auth_status) =
42
my ($auth_status) =
42
    check_cookie_auth( $input->cookie('CGISESSID'), { catalogue => 1 } );
43
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
43
if ( $auth_status ne "ok" ) {
44
if ( $auth_status ne "ok" ) {
44
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
45
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
45
    exit 0;
46
    exit 0;
(-)a/catalogue/image.pl (-1 / +2 lines)
Lines 34-41 use Koha::CoverImages; Link Here
34
$| = 1;
34
$| = 1;
35
35
36
my $input = CGI->new;
36
my $input = CGI->new;
37
my $session_cookie = $input->cookie('CGISESSID');
37
my ($auth_status) =
38
my ($auth_status) =
38
    check_cookie_auth( $input->cookie('CGISESSID'), { catalogue => 1 } );
39
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
39
if ( $auth_status ne "ok" ) {
40
if ( $auth_status ne "ok" ) {
40
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
41
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
41
    exit 0;
42
    exit 0;
(-)a/cataloguing/plugin_launcher.pl (-1 / +2 lines)
Lines 24-31 use C4::Auth qw( check_cookie_auth ); Link Here
24
use Koha::FrameworkPlugin;
24
use Koha::FrameworkPlugin;
25
25
26
my $input = CGI->new;
26
my $input = CGI->new;
27
my $session_cookie = $input->cookie('CGISESSID');
27
my ($auth_status) =
28
my ($auth_status) =
28
    check_cookie_auth( $input->cookie('CGISESSID'), { catalogue => 1 } );
29
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
29
if ( $auth_status ne "ok" ) {
30
if ( $auth_status ne "ok" ) {
30
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
31
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
31
    exit 0;
32
    exit 0;
(-)a/cataloguing/value_builder/barcode.pl (-1 / +2 lines)
Lines 32-39 use Algorithm::CheckDigits qw( CheckDigits ); Link Here
32
use CGI qw ( -utf8 );
32
use CGI qw ( -utf8 );
33
use C4::Auth qw( check_cookie_auth );
33
use C4::Auth qw( check_cookie_auth );
34
my $input = CGI->new;
34
my $input = CGI->new;
35
my $session_cookie = $input->cookie('CGISESSID');
35
my ($auth_status) =
36
my ($auth_status) =
36
    check_cookie_auth( $input->cookie('CGISESSID'), { catalogue => 1 } );
37
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
37
if ( $auth_status ne "ok" ) {
38
if ( $auth_status ne "ok" ) {
38
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
39
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
39
    exit 0;
40
    exit 0;
(-)a/cataloguing/value_builder/barcode_manual.pl (-1 / +2 lines)
Lines 30-37 use Koha::DateUtils qw( dt_from_string ); Link Here
30
use CGI qw ( -utf8 );
30
use CGI qw ( -utf8 );
31
use C4::Auth qw( check_cookie_auth );
31
use C4::Auth qw( check_cookie_auth );
32
my $input = CGI->new;
32
my $input = CGI->new;
33
my $session_cookie = $input->cookie('CGISESSID');
33
my ($auth_status) =
34
my ($auth_status) =
34
    check_cookie_auth( $input->cookie('CGISESSID'), { catalogue => 1 } );
35
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
35
if ( $auth_status ne "ok" ) {
36
if ( $auth_status ne "ok" ) {
36
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
37
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
37
    exit 0;
38
    exit 0;
(-)a/cataloguing/value_builder/dateaccessioned.pl (-1 / +2 lines)
Lines 24-31 use Modern::Perl; Link Here
24
use CGI qw ( -utf8 );
24
use CGI qw ( -utf8 );
25
use C4::Auth qw( check_cookie_auth );
25
use C4::Auth qw( check_cookie_auth );
26
my $input = CGI->new;
26
my $input = CGI->new;
27
my $session_cookie = $input->cookie('CGISESSID');
27
my ($auth_status) =
28
my ($auth_status) =
28
    check_cookie_auth( $input->cookie('CGISESSID'), { catalogue => 1 } );
29
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
29
if ( $auth_status ne "ok" ) {
30
if ( $auth_status ne "ok" ) {
30
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
31
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
31
    exit 0;
32
    exit 0;
(-)a/cataloguing/value_builder/marc21_field_005.pl (-1 / +2 lines)
Lines 24-31 use Modern::Perl; Link Here
24
use CGI qw ( -utf8 );
24
use CGI qw ( -utf8 );
25
use C4::Auth qw( check_cookie_auth );
25
use C4::Auth qw( check_cookie_auth );
26
my $input = CGI->new;
26
my $input = CGI->new;
27
my $session_cookie = $input->cookie('CGISESSID');
27
my ($auth_status) =
28
my ($auth_status) =
28
    check_cookie_auth( $input->cookie('CGISESSID'), { catalogue => 1 } );
29
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
29
if ( $auth_status ne "ok" ) {
30
if ( $auth_status ne "ok" ) {
30
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
31
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
31
    exit 0;
32
    exit 0;
(-)a/cataloguing/value_builder/marc21_field_245h.pl (-1 / +2 lines)
Lines 24-31 use Modern::Perl; Link Here
24
use CGI qw ( -utf8 );
24
use CGI qw ( -utf8 );
25
use C4::Auth qw( check_cookie_auth );
25
use C4::Auth qw( check_cookie_auth );
26
my $input = CGI->new;
26
my $input = CGI->new;
27
my $session_cookie = $input->cookie('CGISESSID');
27
my ($auth_status) =
28
my ($auth_status) =
28
    check_cookie_auth( $input->cookie('CGISESSID'), { catalogue => 1 } );
29
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
29
if ( $auth_status ne "ok" ) {
30
if ( $auth_status ne "ok" ) {
30
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
31
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
31
    exit 0;
32
    exit 0;
(-)a/cataloguing/value_builder/marc21_field_260b.pl (-1 / +2 lines)
Lines 30-37 use C4::Context; Link Here
30
use CGI qw ( -utf8 );
30
use CGI qw ( -utf8 );
31
use C4::Auth qw( check_cookie_auth );
31
use C4::Auth qw( check_cookie_auth );
32
my $input = CGI->new;
32
my $input = CGI->new;
33
my $session_cookie = $input->cookie('CGISESSID');
33
my ($auth_status) =
34
my ($auth_status) =
34
    check_cookie_auth( $input->cookie('CGISESSID'), { catalogue => 1 } );
35
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
35
if ( $auth_status ne "ok" ) {
36
if ( $auth_status ne "ok" ) {
36
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
37
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
37
    exit 0;
38
    exit 0;
(-)a/cataloguing/value_builder/marc21_orgcode.pl (-1 / +2 lines)
Lines 27-34 use Koha::Libraries; Link Here
27
use CGI qw ( -utf8 );
27
use CGI qw ( -utf8 );
28
use C4::Auth qw( check_cookie_auth );
28
use C4::Auth qw( check_cookie_auth );
29
my $input = CGI->new;
29
my $input = CGI->new;
30
my $session_cookie = $input->cookie('CGISESSID');
30
my ($auth_status) =
31
my ($auth_status) =
31
    check_cookie_auth( $input->cookie('CGISESSID'), { catalogue => 1 } );
32
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
32
if ( $auth_status ne "ok" ) {
33
if ( $auth_status ne "ok" ) {
33
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
34
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
34
    exit 0;
35
    exit 0;
(-)a/cataloguing/value_builder/stocknumber.pl (-1 / +2 lines)
Lines 24-31 use C4::Context; Link Here
24
use CGI qw ( -utf8 );
24
use CGI qw ( -utf8 );
25
use C4::Auth qw( check_cookie_auth );
25
use C4::Auth qw( check_cookie_auth );
26
my $input = CGI->new;
26
my $input = CGI->new;
27
my $session_cookie = $input->cookie('CGISESSID');
27
my ($auth_status) =
28
my ($auth_status) =
28
    check_cookie_auth( $input->cookie('CGISESSID'), { catalogue => 1 } );
29
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
29
if ( $auth_status ne "ok" ) {
30
if ( $auth_status ne "ok" ) {
30
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
31
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
31
    exit 0;
32
    exit 0;
(-)a/cataloguing/value_builder/upload.pl (-1 / +2 lines)
Lines 33-40 use Modern::Perl; Link Here
33
use CGI qw ( -utf8 );
33
use CGI qw ( -utf8 );
34
use C4::Auth qw( check_cookie_auth );
34
use C4::Auth qw( check_cookie_auth );
35
my $input = CGI->new;
35
my $input = CGI->new;
36
my $session_cookie = $input->cookie('CGISESSID');
36
my ($auth_status) =
37
my ($auth_status) =
37
    check_cookie_auth( $input->cookie('CGISESSID'), { catalogue => 1 } );
38
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
38
if ( $auth_status ne "ok" ) {
39
if ( $auth_status ne "ok" ) {
39
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
40
    print $input->header( -type => 'text/plain', -status => '403 Forbidden' );
40
    exit 0;
41
    exit 0;
(-)a/cataloguing/ysearch.pl (-1 / +2 lines)
Lines 35-40 my $input = CGI->new; Link Here
35
my $query = $input->param('term');
35
my $query = $input->param('term');
36
my $table = $input->param('table');
36
my $table = $input->param('table');
37
my $field = $input->param('field');
37
my $field = $input->param('field');
38
my $session_cookie = $input->cookie('CGISESSID');
38
39
39
# Prevent from disclosing data
40
# Prevent from disclosing data
40
die() unless ( $table eq "biblioitems" );
41
die() unless ( $table eq "biblioitems" );
Lines 43-49 die() unless ( $field eq 'publishercode' || $field eq 'collectiontitle' ); Link Here
43
binmode STDOUT, ":encoding(UTF-8)";
44
binmode STDOUT, ":encoding(UTF-8)";
44
print $input->header( -type => 'text/plain', -charset => 'UTF-8' );
45
print $input->header( -type => 'text/plain', -charset => 'UTF-8' );
45
46
46
my ( $auth_status ) = check_cookie_auth( $input->cookie('CGISESSID'), { editcatalogue => '*' } );
47
my ( $auth_status ) = check_cookie_auth( $session_cookie, { editcatalogue => '*' } );
47
if ( $auth_status ne "ok" ) {
48
if ( $auth_status ne "ok" ) {
48
    exit 0;
49
    exit 0;
49
}
50
}
(-)a/plugins/plugins-enable.pl (-1 / +2 lines)
Lines 26-33 use Koha::Plugins::Handler; Link Here
26
die("Koha plugins are disabled!") unless C4::Context->config("enable_plugins");
26
die("Koha plugins are disabled!") unless C4::Context->config("enable_plugins");
27
27
28
my $input = CGI->new;
28
my $input = CGI->new;
29
my $session_cookie = $input->cookie('CGISESSID');
29
30
30
my ( $auth_status ) = check_cookie_auth( $input->cookie('CGISESSID'), { plugins => 'manage' } );
31
my ( $auth_status ) = check_cookie_auth( $session_cookie, { plugins => 'manage' } );
31
if( $auth_status ne 'ok' ) {
32
if( $auth_status ne 'ok' ) {
32
    print CGI::header( '-status' => '401' );
33
    print CGI::header( '-status' => '401' );
33
    exit 0;
34
    exit 0;
(-)a/serials/create-numberpattern.pl (-1 / +2 lines)
Lines 27-34 use C4::Serials::Numberpattern qw( Link Here
27
use C4::Auth qw( check_cookie_auth );
27
use C4::Auth qw( check_cookie_auth );
28
28
29
my $input = CGI->new;
29
my $input = CGI->new;
30
my $session_cookie = $input->cookie('CGISESSID');
30
31
31
my ($auth_status) = check_cookie_auth($input->cookie('CGISESSID'), { serials => '*' });
32
my ($auth_status) = check_cookie_auth( $session_cookie, { serials => '*' });
32
if ($auth_status ne "ok") {
33
if ($auth_status ne "ok") {
33
    print $input->header(-type => 'text/plain', -status => '403 Forbidden');
34
    print $input->header(-type => 'text/plain', -status => '403 Forbidden');
34
    exit 0;
35
    exit 0;
(-)a/serials/subscription-frequency.pl (-1 / +2 lines)
Lines 25-32 use C4::Auth qw( check_cookie_auth ); Link Here
25
use JSON qw( to_json );
25
use JSON qw( to_json );
26
26
27
my $input=CGI->new;
27
my $input=CGI->new;
28
my $session_cookie = $input->cookie('CGISESSID');
28
my $frqid=$input->param("frequency_id");
29
my $frqid=$input->param("frequency_id");
29
my ($auth_status) = check_cookie_auth($input->cookie('CGISESSID'), { serials => '*' });
30
my ($auth_status) = check_cookie_auth( $session_cookie, { serials => '*' });
30
if ($auth_status ne "ok") {
31
if ($auth_status ne "ok") {
31
    exit 0;
32
    exit 0;
32
}
33
}
(-)a/serials/subscription-numberpattern.pl (-1 / +2 lines)
Lines 24-31 use C4::Auth qw( check_cookie_auth ); Link Here
24
use JSON qw( to_json );
24
use JSON qw( to_json );
25
25
26
my $input=CGI->new;
26
my $input=CGI->new;
27
my $session_cookie = $input->cookie('CGISESSID');
27
28
28
my ($auth_status) = check_cookie_auth($input->cookie('CGISESSID'), { serials => '*' });
29
my ($auth_status) = check_cookie_auth( $session_cookie, { serials => '*' } );
29
if ($auth_status ne "ok") {
30
if ($auth_status ne "ok") {
30
    print $input->header(-type => 'text/plain', -status => '403 Forbidden');
31
    print $input->header(-type => 'text/plain', -status => '403 Forbidden');
31
    exit 0;
32
    exit 0;
(-)a/svc/barcode (-1 / +2 lines)
Lines 105-112 my %type_mapping = ( Link Here
105
);
105
);
106
106
107
my $input = CGI->new;
107
my $input = CGI->new;
108
my $session_cookie = $input->cookie('CGISESSID');
108
109
109
my ( $auth_status ) = check_cookie_auth( $input->cookie('CGISESSID'), { catalogue => '*' } );
110
my ( $auth_status ) = check_cookie_auth( $session_cookie, { catalogue => '*' } );
110
111
111
if ( $auth_status ne "ok" ) {
112
if ( $auth_status ne "ok" ) {
112
    exit 0;
113
    exit 0;
(-)a/svc/cataloguing/automatic_linker.pl (-1 / +2 lines)
Lines 25-35 use C4::Biblio qw( BiblioAutoLink TransformHtmlToMarc ); Link Here
25
use C4::Context;
25
use C4::Context;
26
26
27
my $input = CGI->new;
27
my $input = CGI->new;
28
my $session_cookie = $input->cookie('CGISESSID');
28
print $input->header('application/json');
29
print $input->header('application/json');
29
30
30
# Check the user's permissions
31
# Check the user's permissions
31
my ( $auth_status ) =
32
my ( $auth_status ) =
32
  C4::Auth::check_cookie_auth( $input->cookie('CGISESSID'), {
33
  C4::Auth::check_cookie_auth( $session_cookie, {
33
    editauthorities => 1,
34
    editauthorities => 1,
34
    editcatalogue => 'edit_catalogue'
35
    editcatalogue => 'edit_catalogue'
35
  });
36
  });
(-)a/svc/checkin (-1 / +2 lines)
Lines 30-38 use Koha::Checkouts; Link Here
30
use Koha::Items;
30
use Koha::Items;
31
31
32
my $input = CGI->new;
32
my $input = CGI->new;
33
my $session_cookie = $input->cookie('CGISESSID');
33
34
34
my ( $auth_status ) =
35
my ( $auth_status ) =
35
  check_cookie_auth( $input->cookie('CGISESSID'),
36
  check_cookie_auth( $session_cookie,
36
    { circulate => 'circulate_remaining_permissions' } );
37
    { circulate => 'circulate_remaining_permissions' } );
37
38
38
my $op = $input->param('op') || q{};
39
my $op = $input->param('op') || q{};
(-)a/svc/checkouts (-1 / +2 lines)
Lines 33-40 use Koha::Items; Link Here
33
use Koha::ItemTypes;
33
use Koha::ItemTypes;
34
34
35
my $input = CGI->new;
35
my $input = CGI->new;
36
my $session_cookie = $input->cookie('CGISESSID');
36
37
37
my ( $auth_status, $session ) = check_cookie_auth( $input->cookie('CGISESSID'));
38
my ( $auth_status, $session ) = check_cookie_auth( $session_cookie );
38
if( $auth_status ne 'ok' ) {
39
if( $auth_status ne 'ok' ) {
39
    print CGI::header( '-status' => '401' );
40
    print CGI::header( '-status' => '401' );
40
    exit 0;
41
    exit 0;
(-)a/svc/holds (-1 / +2 lines)
Lines 32-40 use Koha::ItemTypes; Link Here
32
use Koha::Libraries;
32
use Koha::Libraries;
33
33
34
my $input = CGI->new;
34
my $input = CGI->new;
35
my $session_cookie = $input->cookie('CGISESSID');
35
36
36
my ( $auth_status ) =
37
my ( $auth_status ) =
37
  check_cookie_auth( $input->cookie('CGISESSID'),
38
  check_cookie_auth( $session_cookie,
38
    { circulate => 'circulate_remaining_permissions' } );
39
    { circulate => 'circulate_remaining_permissions' } );
39
40
40
if ( $auth_status ne "ok" ) {
41
if ( $auth_status ne "ok" ) {
(-)a/svc/mana/increment (-1 / +2 lines)
Lines 28-38 use JSON; Link Here
28
28
29
29
30
my $input = CGI->new;
30
my $input = CGI->new;
31
my $session_cookie = $input->cookie('CGISESSID');
31
binmode STDOUT, ":encoding(UTF-8)";
32
binmode STDOUT, ":encoding(UTF-8)";
32
print $input->header( -type => 'application/json', -charset => 'UTF-8' );
33
print $input->header( -type => 'application/json', -charset => 'UTF-8' );
33
34
34
my ( $auth_status ) =
35
my ( $auth_status ) =
35
  check_cookie_auth( $input->cookie('CGISESSID'),
36
  check_cookie_auth( $session_cookie,
36
    { serials => 'create_subscription' } );
37
    { serials => 'create_subscription' } );
37
38
38
if ( $auth_status ne "ok" || $input->request_method ne "POST" ) {
39
if ( $auth_status ne "ok" || $input->request_method ne "POST" ) {
(-)a/svc/mana/share (-1 / +2 lines)
Lines 27-37 use CGI; Link Here
27
use JSON;
27
use JSON;
28
28
29
my $input = CGI->new;
29
my $input = CGI->new;
30
my $session_cookie = $input->cookie('CGISESSID');
30
binmode STDOUT, ":encoding(UTF-8)";
31
binmode STDOUT, ":encoding(UTF-8)";
31
print $input->header( -type => 'application/json', -charset => 'UTF-8' );
32
print $input->header( -type => 'application/json', -charset => 'UTF-8' );
32
33
33
my ( $auth_status ) =
34
my ( $auth_status ) =
34
  check_cookie_auth( $input->cookie('CGISESSID'),
35
  check_cookie_auth( $session_cookie,
35
    { serials => 'create_subscription' } );
36
    { serials => 'create_subscription' } );
36
37
37
if ( $auth_status ne "ok" || $input->request_method ne "POST" ) {
38
if ( $auth_status ne "ok" || $input->request_method ne "POST" ) {
(-)a/svc/mana/use (-1 / +2 lines)
Lines 29-39 use JSON; Link Here
29
29
30
30
31
my $input = CGI->new;
31
my $input = CGI->new;
32
my $session_cookie = $input->cookie('CGISESSID');
32
binmode STDOUT, ":encoding(UTF-8)";
33
binmode STDOUT, ":encoding(UTF-8)";
33
print $input->header( -type => 'application/json', -charset => 'UTF-8' );
34
print $input->header( -type => 'application/json', -charset => 'UTF-8' );
34
35
35
my ( $auth_status ) =
36
my ( $auth_status ) =
36
  check_cookie_auth( $input->cookie('CGISESSID'),
37
  check_cookie_auth( $session_cookie,
37
    { serials => 'create_subscription' } );
38
    { serials => 'create_subscription' } );
38
39
39
if ( $auth_status ne "ok" || $input->request_method ne "POST" ) {
40
if ( $auth_status ne "ok" || $input->request_method ne "POST" ) {
(-)a/svc/recall (-1 / +2 lines)
Lines 28-36 use C4::Circulation qw(AddReturn); Link Here
28
use Koha::Recalls;
28
use Koha::Recalls;
29
29
30
my $input = CGI->new;
30
my $input = CGI->new;
31
my $session_cookie = $input->cookie('CGISESSID');
31
my $json = encode_json({ success => 0 });
32
my $json = encode_json({ success => 0 });
32
33
33
my ( $auth_status, $sessionID ) = check_cookie_auth( $input->cookie('CGISESSID'), { recall => 'manage_recalls' } );
34
my ( $auth_status, $sessionID ) = check_cookie_auth( $session_cookie, { recall => 'manage_recalls' } );
34
35
35
if ( $auth_status ne "ok" ) {
36
if ( $auth_status ne "ok" ) {
36
    print $input->header(-type => 'application/json', -status => '403 Forbidden');
37
    print $input->header(-type => 'application/json', -status => '403 Forbidden');
(-)a/svc/renew (-1 / +2 lines)
Lines 30-38 use C4::Auth qw(check_cookie_auth); Link Here
30
use Koha::DateUtils qw(output_pref dt_from_string);
30
use Koha::DateUtils qw(output_pref dt_from_string);
31
31
32
my $input = CGI->new;
32
my $input = CGI->new;
33
my $session_cookie = $input->cookie('CGISESSID');
33
34
34
my ( $auth_status ) =
35
my ( $auth_status ) =
35
  check_cookie_auth( $input->cookie('CGISESSID'),
36
  check_cookie_auth( $session_cookie,
36
    { circulate => 'circulate_remaining_permissions' } );
37
    { circulate => 'circulate_remaining_permissions' } );
37
38
38
if ( $auth_status ne "ok" ) {
39
if ( $auth_status ne "ok" ) {
(-)a/svc/return_claims (-1 / +2 lines)
Lines 30-37 use Koha::DateUtils qw( dt_from_string output_pref ); Link Here
30
use Koha::Patrons;
30
use Koha::Patrons;
31
31
32
my $input = CGI->new;
32
my $input = CGI->new;
33
my $session_cookie = $input->cookie('CGISESSID');
33
34
34
my ( $auth_status, $session ) = check_cookie_auth( $input->cookie('CGISESSID') );
35
my ( $auth_status, $session ) = check_cookie_auth( $session_cookie );
35
if( $auth_status ne 'ok' ) {
36
if( $auth_status ne 'ok' ) {
36
    print CGI::header( '-status' => '401' );
37
    print CGI::header( '-status' => '401' );
37
    exit 0;
38
    exit 0;
(-)a/tools/batch_records_ajax.pl (-2 / +2 lines)
Lines 39-44 use C4::Auth qw( check_cookie_auth ); Link Here
39
use C4::ImportBatch qw( GetImportBatch GetImportRecordsRange GetImportRecordMatches );
39
use C4::ImportBatch qw( GetImportBatch GetImportRecordsRange GetImportRecordMatches );
40
40
41
my $input = CGI->new;
41
my $input = CGI->new;
42
my $session_cookie = $input->cookie('CGISESSID');
42
43
43
my @sort_columns =
44
my @sort_columns =
44
  qw/import_record_id title status overlay_status overlay_status/;
45
  qw/import_record_id title status overlay_status overlay_status/;
Lines 56-62 binmode STDOUT, ":encoding(UTF-8)"; Link Here
56
print $input->header( -type => 'text/plain', -charset => 'UTF-8' );
57
print $input->header( -type => 'text/plain', -charset => 'UTF-8' );
57
58
58
my ( $auth_status ) =
59
my ( $auth_status ) =
59
  check_cookie_auth( $input->cookie('CGISESSID'), { tools => 'manage_staged_marc' } );
60
  check_cookie_auth( $session_cookie, { tools => 'manage_staged_marc' } );
60
if ( $auth_status ne "ok" ) {
61
if ( $auth_status ne "ok" ) {
61
    exit 0;
62
    exit 0;
62
}
63
}
63
- 

Return to bug 38258