View | Details | Raw Unified | Return to bug 38258
Collapse All | Expand All

(-)a/labels/label-create-csv.pl (-1 / +2 lines)
Lines 27-34 use C4::Labels; Link Here
27
use C4::Auth qw( check_cookie_auth );
27
use C4::Auth qw( check_cookie_auth );
28
28
29
my $cgi = CGI->new;
29
my $cgi = CGI->new;
30
my $session_cookie = $cgi->cookie('CGISESSID');
30
my ($auth_status) =
31
my ($auth_status) =
31
    check_cookie_auth( $cgi->cookie('CGISESSID'), { catalogue => 1 } );
32
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
32
if ( $auth_status ne "ok" ) {
33
if ( $auth_status ne "ok" ) {
33
    print $cgi->header( -type => 'text/plain', -status => '403 Forbidden' );
34
    print $cgi->header( -type => 'text/plain', -status => '403 Forbidden' );
34
    exit 0;
35
    exit 0;
(-)a/labels/label-create-xml.pl (-1 / +2 lines)
Lines 27-34 use C4::Labels; Link Here
27
use C4::Auth qw( check_cookie_auth );
27
use C4::Auth qw( check_cookie_auth );
28
28
29
my $cgi = CGI->new;
29
my $cgi = CGI->new;
30
my $session_cookie = $cgi->cookie('CGISESSID');
30
my ($auth_status) =
31
my ($auth_status) =
31
    check_cookie_auth( $cgi->cookie('CGISESSID'), { catalogue => 1 } );
32
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
32
if ( $auth_status ne "ok" ) {
33
if ( $auth_status ne "ok" ) {
33
    print $cgi->header( -type => 'text/plain', -status => '403 Forbidden' );
34
    print $cgi->header( -type => 'text/plain', -status => '403 Forbidden' );
34
    exit 0;
35
    exit 0;
(-)a/opac/svc/club/cancel_enrollment (-1 / +2 lines)
Lines 27-35 use C4::Auth qw(check_cookie_auth); Link Here
27
use Koha::Club::Enrollments;
27
use Koha::Club::Enrollments;
28
28
29
my $cgi = CGI->new;
29
my $cgi = CGI->new;
30
my $session_cookie = $cgi->cookie('CGISESSID');
30
31
31
my ( $auth_status ) =
32
my ( $auth_status ) =
32
  check_cookie_auth( $cgi->cookie('CGISESSID') );
33
  check_cookie_auth( $session_cookie );
33
if ( $auth_status ne "ok" ) {
34
if ( $auth_status ne "ok" ) {
34
    exit 0;
35
    exit 0;
35
}
36
}
(-)a/opac/svc/club/enroll (-1 / +2 lines)
Lines 29-37 use Koha::Club::Enrollment; Link Here
29
use Koha::Clubs;
29
use Koha::Clubs;
30
30
31
my $cgi = CGI->new;
31
my $cgi = CGI->new;
32
my $session_cookie = $cgi->cookie('CGISESSID');
32
33
33
my ($auth_status) =
34
my ($auth_status) =
34
    check_cookie_auth( $cgi->cookie('CGISESSID') );
35
    check_cookie_auth( $session_cookie );
35
if ( $auth_status ne "ok" ) {
36
if ( $auth_status ne "ok" ) {
36
    exit 0;
37
    exit 0;
37
}
38
}
(-)a/svc/article_request (-1 / +2 lines)
Lines 27-35 use C4::Auth qw(check_cookie_auth); Link Here
27
use Koha::ArticleRequests;
27
use Koha::ArticleRequests;
28
28
29
my $cgi = CGI->new;
29
my $cgi = CGI->new;
30
my $session_cookie = $cgi->cookie('CGISESSID');
30
31
31
my ( $auth_status ) =
32
my ( $auth_status ) =
32
  check_cookie_auth( $cgi->cookie('CGISESSID'), { circulate => 'circulate_remaining_permissions' } );
33
  check_cookie_auth( $session_cookie, { circulate => 'circulate_remaining_permissions' } );
33
if ( $auth_status ne "ok" ) {
34
if ( $auth_status ne "ok" ) {
34
    exit 0;
35
    exit 0;
35
}
36
}
(-)a/svc/club/cancel_enrollment (-1 / +2 lines)
Lines 28-36 use C4::Auth qw(check_cookie_auth); Link Here
28
use Koha::Club::Enrollments;
28
use Koha::Club::Enrollments;
29
29
30
my $cgi = CGI->new;
30
my $cgi = CGI->new;
31
my $session_cookie = $cgi->cookie('CGISESSID');
31
32
32
my ( $auth_status ) =
33
my ( $auth_status ) =
33
  check_cookie_auth( $cgi->cookie('CGISESSID'), { clubs => 'enroll' } );
34
  check_cookie_auth( $session_cookie, { clubs => 'enroll' } );
34
if ( $auth_status ne "ok" ) {
35
if ( $auth_status ne "ok" ) {
35
    exit 0;
36
    exit 0;
36
}
37
}
(-)a/svc/club/delete (-1 / +2 lines)
Lines 27-34 use C4::Auth qw(check_cookie_auth); Link Here
27
use Koha::Clubs;
27
use Koha::Clubs;
28
28
29
my $cgi = CGI->new;
29
my $cgi = CGI->new;
30
my $session_cookie = $cgi->cookie('CGISESSID');
30
31
31
my ( $auth_status ) = check_cookie_auth( $cgi->cookie('CGISESSID'), { clubs => 'edit_clubs' } );
32
my ( $auth_status ) = check_cookie_auth( $session_cookie, { clubs => 'edit_clubs' } );
32
if ( $auth_status ne "ok" ) {
33
if ( $auth_status ne "ok" ) {
33
    exit 0;
34
    exit 0;
34
}
35
}
(-)a/svc/club/enroll (-1 / +2 lines)
Lines 29-37 use Koha::Club::Enrollments; Link Here
29
use Koha::Clubs;
29
use Koha::Clubs;
30
30
31
my $cgi = CGI->new;
31
my $cgi = CGI->new;
32
my $session_cookie = $cgi->cookie('CGISESSID');
32
33
33
my ($auth_status) =
34
my ($auth_status) =
34
    check_cookie_auth( $cgi->cookie('CGISESSID'), { clubs => 'enroll' } );
35
    check_cookie_auth( $session_cookie, { clubs => 'enroll' } );
35
if ( $auth_status ne "ok" ) {
36
if ( $auth_status ne "ok" ) {
36
    exit 0;
37
    exit 0;
37
}
38
}
(-)a/svc/club/template/delete (-1 / +2 lines)
Lines 28-35 use C4::Auth qw(check_cookie_auth); Link Here
28
use Koha::Club::Templates;
28
use Koha::Club::Templates;
29
29
30
my $cgi = CGI->new;
30
my $cgi = CGI->new;
31
my $session_cookie = $cgi->cookie('CGISESSID');
31
32
32
my ( $auth_status ) = check_cookie_auth( $cgi->cookie('CGISESSID'), { clubs => 'edit_templates' } );
33
my ( $auth_status ) = check_cookie_auth( $session_cookie, { clubs => 'edit_templates' } );
33
if ( $auth_status ne "ok" ) {
34
if ( $auth_status ne "ok" ) {
34
    exit 0;
35
    exit 0;
35
}
36
}
(-)a/svc/creator_batches (-2 / +2 lines)
Lines 39-45 svc/creator_batches - Web service for managing AJAX functionality for patroncard Link Here
39
# AJAX requests
39
# AJAX requests
40
my $is_ajax = is_ajax();
40
my $is_ajax = is_ajax();
41
my $cgi = CGI->new;
41
my $cgi = CGI->new;
42
my ( $auth_status ) = check_cookie_auth( $cgi->cookie('CGISESSID'), { catalogue => 1 } );
42
my $session_cookie = $cgi->cookie('CGISESSID');
43
my ( $auth_status ) = check_cookie_auth( $session_cookie, { catalogue => 1 } );
43
if ( $auth_status ne "ok" ) {
44
if ( $auth_status ne "ok" ) {
44
    exit 0;
45
    exit 0;
45
}
46
}
46
- 

Return to bug 38258