View | Details | Raw Unified | Return to bug 9102
Collapse All | Expand All

(-)a/C4/Auth.pm (-10 / +19 lines)
Lines 264-275 sub get_template_and_user { Link Here
264
						       $_->{'time'},
264
						       $_->{'time'},
265
                            ) foreach @recentSearches;
265
                            ) foreach @recentSearches;
266
266
267
					# And then, delete the cookie's content
267
                    # And then, delete the cookie's content
268
					my $newsearchcookie = $in->{'query'}->cookie(
268
                    my $newsearchcookie = $in->{'query'}->cookie(
269
												-name => 'KohaOpacRecentSearches',
269
                                                -name => 'KohaOpacRecentSearches',
270
												-value => freeze([]),
270
                                                -value => freeze([]),
271
												-expires => ''
271
                                                -HttpOnly => 1,
272
											 );
272
                                                -expires => ''
273
                                             );
273
					$cookie = [$cookie, $newsearchcookie];
274
					$cookie = [$cookie, $newsearchcookie];
274
				}
275
				}
275
			}
276
			}
Lines 630-637 sub checkauth { Link Here
630
    # when using authentication against multiple CAS servers, as configured in Auth_cas_servers.yaml
631
    # when using authentication against multiple CAS servers, as configured in Auth_cas_servers.yaml
631
    my $casparam = $query->param('cas');
632
    my $casparam = $query->param('cas');
632
633
633
    if ( $userid = $ENV{'REMOTE_USER'} ) {
634
        if ( $userid = $ENV{'REMOTE_USER'} ) {
634
        # Using Basic Authentication, no cookies required
635
            # Using Basic Authentication, no cookies required
635
        $cookie = $query->cookie(
636
        $cookie = $query->cookie(
636
            -name     => 'CGISESSID',
637
            -name     => 'CGISESSID',
637
            -value    => '',
638
            -value    => '',
Lines 1138-1144 sub check_api_auth { Link Here
1138
                $sessionID = undef;
1139
                $sessionID = undef;
1139
                return ("expired", undef, undef);
1140
                return ("expired", undef, undef);
1140
            } else {
1141
            } else {
1141
                my $cookie = $query->cookie( CGISESSID => $session->id );
1142
                my $cookie = $query->cookie(
1143
                    -name  => 'CGISESSID',
1144
                    -value => $session->id,
1145
                    -HttpOnly => 1,
1146
                );
1142
                $session->param('lasttime',time());
1147
                $session->param('lasttime',time());
1143
                my $flags = haspermission($userid, $flagsrequired);
1148
                my $flags = haspermission($userid, $flagsrequired);
1144
                if ($flags) {
1149
                if ($flags) {
Lines 1182-1188 sub check_api_auth { Link Here
1182
1187
1183
            my $sessionID = $session->id;
1188
            my $sessionID = $session->id;
1184
            C4::Context->_new_userenv($sessionID);
1189
            C4::Context->_new_userenv($sessionID);
1185
            my $cookie = $query->cookie(CGISESSID => $sessionID);
1190
            my $cookie = $query->cookie(
1191
                -name  => 'CGISESSID',
1192
                -value => $sessionID,
1193
                -HttpOnly => 1,
1194
            );
1186
            if ( $return == 1 ) {
1195
            if ( $return == 1 ) {
1187
                my (
1196
                my (
1188
                    $borrowernumber, $firstname,  $surname,
1197
                    $borrowernumber, $firstname,  $surname,
(-)a/C4/Templates.pm (+1 lines)
Lines 305-310 sub setlanguagecookie { Link Here
305
    my $cookie = $query->cookie(
305
    my $cookie = $query->cookie(
306
        -name    => 'KohaOpacLanguage',
306
        -name    => 'KohaOpacLanguage',
307
        -value   => $language,
307
        -value   => $language,
308
        -HttpOnly => 1,
308
        -expires => '+3y'
309
        -expires => '+3y'
309
    );
310
    );
310
    print $query->redirect(
311
    print $query->redirect(
(-)a/cataloguing/additem.pl (+1 lines)
Lines 419-424 if ($op eq "additem") { Link Here
419
                    -name => 'LastCreatedItem',
419
                    -name => 'LastCreatedItem',
420
                    # We uri_escape the whole freezed structure so we're sure we won't have any encoding problems
420
                    # We uri_escape the whole freezed structure so we're sure we won't have any encoding problems
421
                    -value   => uri_escape_utf8( freeze( $record ) ),
421
                    -value   => uri_escape_utf8( freeze( $record ) ),
422
                    -HttpOnly => 1,
422
                    -expires => ''
423
                    -expires => ''
423
                );
424
                );
424
425
(-)a/installer/InstallAuth.pm (-3 / +12 lines)
Lines 262-268 sub checkauth { Link Here
262
                $session->param('emailaddress'),
262
                $session->param('emailaddress'),
263
                $session->param('branchprinter')
263
                $session->param('branchprinter')
264
            );
264
            );
265
            $cookie   = $query->cookie( CGISESSID => $session->id );
265
            $cookie = $query->cookie(
266
                -name     => 'CGISESSID',
267
                -value    => $session->id,
268
                -HttpOnly => 1,
269
            );
266
            $loggedin = 1;
270
            $loggedin = 1;
267
            $userid   = $session->param('cardnumber');
271
            $userid   = $session->param('cardnumber');
268
        }
272
        }
Lines 298-304 sub checkauth { Link Here
298
            # printf L "%20s from %16s logged in  at %30s.\n", $userid,
302
            # printf L "%20s from %16s logged in  at %30s.\n", $userid,
299
            #  $ENV{'REMOTE_ADDR'}, $time;
303
            #  $ENV{'REMOTE_ADDR'}, $time;
300
            # close L;
304
            # close L;
301
            $cookie = $query->cookie( CGISESSID => $sessionID );
305
            $cookie = $query->cookie(
306
                -name     => 'CGISESSID',
307
                -value    => $sessionID,
308
                -HttpOnly => 1,
309
            );
302
            if ( $return == 2 ) {
310
            if ( $return == 2 ) {
303
311
304
           #Only superlibrarian should have access to this page.
312
           #Only superlibrarian should have access to this page.
Lines 342-347 sub checkauth { Link Here
342
            $cookie = $query->cookie(
350
            $cookie = $query->cookie(
343
                -name    => 'CGISESSID',
351
                -name    => 'CGISESSID',
344
                -value   => '',
352
                -value   => '',
353
                -HttpOnly => 1,
345
                -expires => ''
354
                -expires => ''
346
            );
355
            );
347
        }
356
        }
Lines 382-387 sub checkauth { Link Here
382
    $cookie = $query->cookie(
391
    $cookie = $query->cookie(
383
        -name    => 'CGISESSID',
392
        -name    => 'CGISESSID',
384
        -value   => $sessionID,
393
        -value   => $sessionID,
394
        -HttpOnly => 1,
385
        -expires => ''
395
        -expires => ''
386
    );
396
    );
387
    print $query->header(
397
    print $query->header(
388
- 

Return to bug 9102