Lines 229-235
sub get_template_and_user {
Link Here
|
229 |
-value => '', |
229 |
-value => '', |
230 |
-expires => '', |
230 |
-expires => '', |
231 |
-HttpOnly => 1, |
231 |
-HttpOnly => 1, |
232 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
232 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
233 |
); |
233 |
); |
234 |
|
234 |
|
235 |
$template->param( |
235 |
$template->param( |
Lines 830-836
sub checkauth {
Link Here
|
830 |
-value => '', |
830 |
-value => '', |
831 |
-expires => '', |
831 |
-expires => '', |
832 |
-HttpOnly => 1, |
832 |
-HttpOnly => 1, |
833 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
833 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
834 |
); |
834 |
); |
835 |
$loggedin = 1; |
835 |
$loggedin = 1; |
836 |
} |
836 |
} |
Lines 932-938
sub checkauth {
Link Here
|
932 |
-name => 'CGISESSID', |
932 |
-name => 'CGISESSID', |
933 |
-value => $session->id, |
933 |
-value => $session->id, |
934 |
-HttpOnly => 1, |
934 |
-HttpOnly => 1, |
935 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
935 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
936 |
); |
936 |
); |
937 |
$session->param( 'lasttime', time() ); |
937 |
$session->param( 'lasttime', time() ); |
938 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
938 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
Lines 962-968
sub checkauth {
Link Here
|
962 |
-name => 'CGISESSID', |
962 |
-name => 'CGISESSID', |
963 |
-value => $session->id, |
963 |
-value => $session->id, |
964 |
-HttpOnly => 1, |
964 |
-HttpOnly => 1, |
965 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
965 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
966 |
); |
966 |
); |
967 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
967 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
968 |
if ( !defined($pki_field) ) { |
968 |
if ( !defined($pki_field) ) { |
Lines 1129-1135
sub checkauth {
Link Here
|
1129 |
-name => 'CGISESSID', |
1129 |
-name => 'CGISESSID', |
1130 |
-value => '', |
1130 |
-value => '', |
1131 |
-HttpOnly => 1, |
1131 |
-HttpOnly => 1, |
1132 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1132 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1133 |
); |
1133 |
); |
1134 |
$info{'wrongip'} = 1; |
1134 |
$info{'wrongip'} = 1; |
1135 |
} |
1135 |
} |
Lines 1208-1214
sub checkauth {
Link Here
|
1208 |
-name => 'CGISESSID', |
1208 |
-name => 'CGISESSID', |
1209 |
-value => '', |
1209 |
-value => '', |
1210 |
-HttpOnly => 1, |
1210 |
-HttpOnly => 1, |
1211 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1211 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1212 |
); |
1212 |
); |
1213 |
} |
1213 |
} |
1214 |
|
1214 |
|
Lines 1475-1481
sub check_api_auth {
Link Here
|
1475 |
-name => 'CGISESSID', |
1475 |
-name => 'CGISESSID', |
1476 |
-value => $session->id, |
1476 |
-value => $session->id, |
1477 |
-HttpOnly => 1, |
1477 |
-HttpOnly => 1, |
1478 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1478 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1479 |
); |
1479 |
); |
1480 |
$session->param( 'lasttime', time() ); |
1480 |
$session->param( 'lasttime', time() ); |
1481 |
my $flags = haspermission( $userid, $flagsrequired ); |
1481 |
my $flags = haspermission( $userid, $flagsrequired ); |
Lines 1530-1536
sub check_api_auth {
Link Here
|
1530 |
-name => 'CGISESSID', |
1530 |
-name => 'CGISESSID', |
1531 |
-value => $sessionID, |
1531 |
-value => $sessionID, |
1532 |
-HttpOnly => 1, |
1532 |
-HttpOnly => 1, |
1533 |
-secure => ( $ENV{HTTPS} ? 1 : 0 ), |
1533 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1534 |
); |
1534 |
); |
1535 |
if ( $return == 1 ) { |
1535 |
if ( $return == 1 ) { |
1536 |
my ( |
1536 |
my ( |