View | Details | Raw Unified | Return to bug 9102
Collapse All | Expand All

(-)a/C4/Auth.pm (-10 / +19 lines)
Lines 264-275 sub get_template_and_user { Link Here
264
						       $_->{'time'},
264
						       $_->{'time'},
265
                            ) foreach @recentSearches;
265
                            ) foreach @recentSearches;
266
266
267
					# And then, delete the cookie's content
267
                    # And then, delete the cookie's content
268
					my $newsearchcookie = $in->{'query'}->cookie(
268
                    my $newsearchcookie = $in->{'query'}->cookie(
269
												-name => 'KohaOpacRecentSearches',
269
                                                -name => 'KohaOpacRecentSearches',
270
												-value => freeze([]),
270
                                                -value => freeze([]),
271
												-expires => ''
271
                                                -HttpOnly => 1,
272
											 );
272
                                                -expires => ''
273
                                             );
273
					$cookie = [$cookie, $newsearchcookie];
274
					$cookie = [$cookie, $newsearchcookie];
274
				}
275
				}
275
			}
276
			}
Lines 633-640 sub checkauth { Link Here
633
    # when using authentication against multiple CAS servers, as configured in Auth_cas_servers.yaml
634
    # when using authentication against multiple CAS servers, as configured in Auth_cas_servers.yaml
634
    my $casparam = $query->param('cas');
635
    my $casparam = $query->param('cas');
635
636
636
    if ( $userid = $ENV{'REMOTE_USER'} ) {
637
        if ( $userid = $ENV{'REMOTE_USER'} ) {
637
        # Using Basic Authentication, no cookies required
638
            # Using Basic Authentication, no cookies required
638
        $cookie = $query->cookie(
639
        $cookie = $query->cookie(
639
            -name     => 'CGISESSID',
640
            -name     => 'CGISESSID',
640
            -value    => '',
641
            -value    => '',
Lines 1136-1142 sub check_api_auth { Link Here
1136
                $sessionID = undef;
1137
                $sessionID = undef;
1137
                return ("expired", undef, undef);
1138
                return ("expired", undef, undef);
1138
            } else {
1139
            } else {
1139
                my $cookie = $query->cookie( CGISESSID => $session->id );
1140
                my $cookie = $query->cookie(
1141
                    -name  => 'CGISESSID',
1142
                    -value => $session->id,
1143
                    -HttpOnly => 1,
1144
                );
1140
                $session->param('lasttime',time());
1145
                $session->param('lasttime',time());
1141
                my $flags = haspermission($userid, $flagsrequired);
1146
                my $flags = haspermission($userid, $flagsrequired);
1142
                if ($flags) {
1147
                if ($flags) {
Lines 1180-1186 sub check_api_auth { Link Here
1180
1185
1181
            my $sessionID = $session->id;
1186
            my $sessionID = $session->id;
1182
            C4::Context->_new_userenv($sessionID);
1187
            C4::Context->_new_userenv($sessionID);
1183
            my $cookie = $query->cookie(CGISESSID => $sessionID);
1188
            my $cookie = $query->cookie(
1189
                -name  => 'CGISESSID',
1190
                -value => $sessionID,
1191
                -HttpOnly => 1,
1192
            );
1184
            if ( $return == 1 ) {
1193
            if ( $return == 1 ) {
1185
                my (
1194
                my (
1186
                    $borrowernumber, $firstname,  $surname,
1195
                    $borrowernumber, $firstname,  $surname,
(-)a/C4/Templates.pm (+1 lines)
Lines 305-310 sub setlanguagecookie { Link Here
305
    my $cookie = $query->cookie(
305
    my $cookie = $query->cookie(
306
        -name    => 'KohaOpacLanguage',
306
        -name    => 'KohaOpacLanguage',
307
        -value   => $language,
307
        -value   => $language,
308
        -HttpOnly => 1,
308
        -expires => '+3y'
309
        -expires => '+3y'
309
    );
310
    );
310
    print $query->redirect(
311
    print $query->redirect(
(-)a/cataloguing/additem.pl (+1 lines)
Lines 418-423 if ($op eq "additem") { Link Here
418
                    -name => 'LastCreatedItem',
418
                    -name => 'LastCreatedItem',
419
                    # We uri_escape the whole freezed structure so we're sure we won't have any encoding problems
419
                    # We uri_escape the whole freezed structure so we're sure we won't have any encoding problems
420
                    -value   => uri_escape_utf8( freeze( $record ) ),
420
                    -value   => uri_escape_utf8( freeze( $record ) ),
421
                    -HttpOnly => 1,
421
                    -expires => ''
422
                    -expires => ''
422
                );
423
                );
423
424
(-)a/installer/InstallAuth.pm (-3 / +12 lines)
Lines 262-268 sub checkauth { Link Here
262
                $session->param('emailaddress'),
262
                $session->param('emailaddress'),
263
                $session->param('branchprinter')
263
                $session->param('branchprinter')
264
            );
264
            );
265
            $cookie   = $query->cookie( CGISESSID => $session->id );
265
            $cookie = $query->cookie(
266
                -name     => 'CGISESSID',
267
                -value    => $session->id,
268
                -HttpOnly => 1,
269
            );
266
            $loggedin = 1;
270
            $loggedin = 1;
267
            $userid   = $session->param('cardnumber');
271
            $userid   = $session->param('cardnumber');
268
        }
272
        }
Lines 298-304 sub checkauth { Link Here
298
            # printf L "%20s from %16s logged in  at %30s.\n", $userid,
302
            # printf L "%20s from %16s logged in  at %30s.\n", $userid,
299
            #  $ENV{'REMOTE_ADDR'}, $time;
303
            #  $ENV{'REMOTE_ADDR'}, $time;
300
            # close L;
304
            # close L;
301
            $cookie = $query->cookie( CGISESSID => $sessionID );
305
            $cookie = $query->cookie(
306
                -name     => 'CGISESSID',
307
                -value    => $sessionID,
308
                -HttpOnly => 1,
309
            );
302
            if ( $return == 2 ) {
310
            if ( $return == 2 ) {
303
311
304
           #Only superlibrarian should have access to this page.
312
           #Only superlibrarian should have access to this page.
Lines 342-347 sub checkauth { Link Here
342
            $cookie = $query->cookie(
350
            $cookie = $query->cookie(
343
                -name    => 'CGISESSID',
351
                -name    => 'CGISESSID',
344
                -value   => '',
352
                -value   => '',
353
                -HttpOnly => 1,
345
                -expires => ''
354
                -expires => ''
346
            );
355
            );
347
        }
356
        }
Lines 382-387 sub checkauth { Link Here
382
    $cookie = $query->cookie(
391
    $cookie = $query->cookie(
383
        -name    => 'CGISESSID',
392
        -name    => 'CGISESSID',
384
        -value   => $sessionID,
393
        -value   => $sessionID,
394
        -HttpOnly => 1,
385
        -expires => ''
395
        -expires => ''
386
    );
396
    );
387
    print $query->header(
397
    print $query->header(
388
- 

Return to bug 9102