View | Details | Raw Unified | Return to bug 38258
Collapse All | Expand All

(-)a/authorities/ysearch.pl (-1 / +2 lines)
Lines 39-46 use Koha::SearchEngine::Search; Link Here
39
use Koha::SearchEngine::QueryBuilder;
39
use Koha::SearchEngine::QueryBuilder;
40
40
41
my $query = CGI->new;
41
my $query = CGI->new;
42
my $session_cookie = $query->cookie('CGISESSID');
42
43
43
my ( $auth_status) = check_cookie_auth( $query->cookie('CGISESSID'), { catalogue => 1 } );
44
my ( $auth_status) = check_cookie_auth( $session_cookie, { catalogue => 1 } );
44
45
45
if ( $auth_status ne "ok" ) {
46
if ( $auth_status ne "ok" ) {
46
    # send empty response
47
    # send empty response
(-)a/opac/opac-patron-image.pl (-1 / +2 lines)
Lines 26-38 use C4::Auth qw( check_cookie_auth ); Link Here
26
use Koha::Patron::Images;
26
use Koha::Patron::Images;
27
27
28
my $query = CGI->new;
28
my $query = CGI->new;
29
my $session_cookie = $query->cookie('CGISESSID');
29
30
30
unless (C4::Context->preference('OPACpatronimages')) {
31
unless (C4::Context->preference('OPACpatronimages')) {
31
    print $query->header(status => '403 Forbidden - displaying patron images in the OPAC not enabled');
32
    print $query->header(status => '403 Forbidden - displaying patron images in the OPAC not enabled');
32
    exit;
33
    exit;
33
}
34
}
34
35
35
my ($auth_status) = check_cookie_auth( $query->cookie('CGISESSID') );
36
my ($auth_status) = check_cookie_auth( $session_cookie );
36
if( $auth_status ne 'ok' ) {
37
if( $auth_status ne 'ok' ) {
37
    print CGI::header( '-status' => '401' );
38
    print CGI::header( '-status' => '401' );
38
    exit 0;
39
    exit 0;
(-)a/opac/svc/checkout_notes (-1 / +2 lines)
Lines 43-49 svc/checkout_notes - Web service for setting patron notes on items Link Here
43
# AJAX requests
43
# AJAX requests
44
my $is_ajax = is_ajax();
44
my $is_ajax = is_ajax();
45
my $query = CGI->new;
45
my $query = CGI->new;
46
my ( $auth_status ) = check_cookie_auth( $query->cookie('CGISESSID'), {} );
46
my $session_cookie = $query->cookie('CGISESSID');
47
my ( $auth_status ) = check_cookie_auth( $session_cookie, {} );
47
if ( $auth_status ne "ok" ) {
48
if ( $auth_status ne "ok" ) {
48
    exit 0;
49
    exit 0;
49
}
50
}
(-)a/serials/lateissues-export.pl (-1 / +2 lines)
Lines 28-35 use Koha::CsvProfiles; Link Here
28
use Text::CSV_XS;
28
use Text::CSV_XS;
29
29
30
my $query = CGI->new;
30
my $query = CGI->new;
31
my $session_cookie = $query->cookie('CGISESSID');
31
my ($auth_status) =
32
my ($auth_status) =
32
    check_cookie_auth( $query->cookie('CGISESSID'), { catalogue => 1 } );
33
    check_cookie_auth( $session_cookie, { catalogue => 1 } );
33
if ( $auth_status ne "ok" ) {
34
if ( $auth_status ne "ok" ) {
34
    print $query->header( -type => 'text/plain', -status => '403 Forbidden' );
35
    print $query->header( -type => 'text/plain', -status => '403 Forbidden' );
35
    exit 0;
36
    exit 0;
(-)a/svc/checkout_notes (-1 / +2 lines)
Lines 36-42 svc/checkout_notes - Web service for managing patron notes set on issues Link Here
36
# AJAX requests
36
# AJAX requests
37
my $is_ajax = is_ajax();
37
my $is_ajax = is_ajax();
38
my $query = CGI->new;
38
my $query = CGI->new;
39
my ( $auth_status ) = check_cookie_auth( $query->cookie('CGISESSID'), { circulate => 'manage_checkout_notes' } );
39
my $session_cookie = $query->cookie('CGISESSID');
40
my ( $auth_status ) = check_cookie_auth( $session_cookie, { circulate => 'manage_checkout_notes' } );
40
if ( $auth_status ne "ok" ) {
41
if ( $auth_status ne "ok" ) {
41
    exit 0;
42
    exit 0;
42
}
43
}
(-)a/svc/problem_reports (-2 / +2 lines)
Lines 36-42 svc/problem_reports - Web service for managing OPAC problem reports Link Here
36
# AJAX requests
36
# AJAX requests
37
my $is_ajax = is_ajax();
37
my $is_ajax = is_ajax();
38
my $query = CGI->new;
38
my $query = CGI->new;
39
my ( $auth_status ) = check_cookie_auth( $query->cookie('CGISESSID'), { problem_reports => 1 } );
39
my $session_cookie = $query->cookie('CGISESSID');
40
my ( $auth_status ) = check_cookie_auth( $session_cookie, { problem_reports => 1 } );
40
if ( $auth_status ne "ok" ) {
41
if ( $auth_status ne "ok" ) {
41
    exit 0;
42
    exit 0;
42
}
43
}
43
- 

Return to bug 38258