Lines 229-234
sub get_template_and_user {
Link Here
|
229 |
-value => '', |
229 |
-value => '', |
230 |
-expires => '', |
230 |
-expires => '', |
231 |
-HttpOnly => 1, |
231 |
-HttpOnly => 1, |
|
|
232 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
232 |
); |
233 |
); |
233 |
|
234 |
|
234 |
$template->param( |
235 |
$template->param( |
Lines 825-830
sub checkauth {
Link Here
|
825 |
-value => '', |
826 |
-value => '', |
826 |
-expires => '', |
827 |
-expires => '', |
827 |
-HttpOnly => 1, |
828 |
-HttpOnly => 1, |
|
|
829 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
828 |
); |
830 |
); |
829 |
$loggedin = 1; |
831 |
$loggedin = 1; |
830 |
} |
832 |
} |
Lines 925-931
sub checkauth {
Link Here
|
925 |
$cookie = $query->cookie( |
927 |
$cookie = $query->cookie( |
926 |
-name => 'CGISESSID', |
928 |
-name => 'CGISESSID', |
927 |
-value => $session->id, |
929 |
-value => $session->id, |
928 |
-HttpOnly => 1 |
930 |
-HttpOnly => 1, |
|
|
931 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
929 |
); |
932 |
); |
930 |
$session->param( 'lasttime', time() ); |
933 |
$session->param( 'lasttime', time() ); |
931 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
934 |
unless ( $sessiontype && $sessiontype eq 'anon' ) { #if this is an anonymous session, we want to update the session, but not behave as if they are logged in... |
Lines 954-960
sub checkauth {
Link Here
|
954 |
$cookie = $query->cookie( |
957 |
$cookie = $query->cookie( |
955 |
-name => 'CGISESSID', |
958 |
-name => 'CGISESSID', |
956 |
-value => $session->id, |
959 |
-value => $session->id, |
957 |
-HttpOnly => 1 |
960 |
-HttpOnly => 1, |
|
|
961 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
958 |
); |
962 |
); |
959 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
963 |
my $pki_field = C4::Context->preference('AllowPKIAuth'); |
960 |
if ( !defined($pki_field) ) { |
964 |
if ( !defined($pki_field) ) { |
Lines 1120-1126
sub checkauth {
Link Here
|
1120 |
$cookie = $query->cookie( |
1124 |
$cookie = $query->cookie( |
1121 |
-name => 'CGISESSID', |
1125 |
-name => 'CGISESSID', |
1122 |
-value => '', |
1126 |
-value => '', |
1123 |
-HttpOnly => 1 |
1127 |
-HttpOnly => 1, |
|
|
1128 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1124 |
); |
1129 |
); |
1125 |
$info{'wrongip'} = 1; |
1130 |
$info{'wrongip'} = 1; |
1126 |
} |
1131 |
} |
Lines 1198-1204
sub checkauth {
Link Here
|
1198 |
$cookie = $query->cookie( |
1203 |
$cookie = $query->cookie( |
1199 |
-name => 'CGISESSID', |
1204 |
-name => 'CGISESSID', |
1200 |
-value => '', |
1205 |
-value => '', |
1201 |
-HttpOnly => 1 |
1206 |
-HttpOnly => 1, |
|
|
1207 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1202 |
); |
1208 |
); |
1203 |
} |
1209 |
} |
1204 |
|
1210 |
|
Lines 1464-1469
sub check_api_auth {
Link Here
|
1464 |
-name => 'CGISESSID', |
1470 |
-name => 'CGISESSID', |
1465 |
-value => $session->id, |
1471 |
-value => $session->id, |
1466 |
-HttpOnly => 1, |
1472 |
-HttpOnly => 1, |
|
|
1473 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1467 |
); |
1474 |
); |
1468 |
$session->param( 'lasttime', time() ); |
1475 |
$session->param( 'lasttime', time() ); |
1469 |
my $flags = haspermission( $userid, $flagsrequired ); |
1476 |
my $flags = haspermission( $userid, $flagsrequired ); |
Lines 1518-1523
sub check_api_auth {
Link Here
|
1518 |
-name => 'CGISESSID', |
1525 |
-name => 'CGISESSID', |
1519 |
-value => $sessionID, |
1526 |
-value => $sessionID, |
1520 |
-HttpOnly => 1, |
1527 |
-HttpOnly => 1, |
|
|
1528 |
-secure => ( C4::Context->https_enabled() ? 1 : 0 ), |
1521 |
); |
1529 |
); |
1522 |
if ( $return == 1 ) { |
1530 |
if ( $return == 1 ) { |
1523 |
my ( |
1531 |
my ( |