Lines 64-87
use CGI qw(-utf8 ); # we will loose -utf8 under plack, otherwise
Link Here
|
64 |
$q->param( 'debug_programming_error', "'$original_op' must start with 'cud-' for $request_method" ); |
64 |
$q->param( 'debug_programming_error', "'$original_op' must start with 'cud-' for $request_method" ); |
65 |
} |
65 |
} |
66 |
|
66 |
|
67 |
if ( $csrf_token ) { |
67 |
die "Programming error - No CSRF token passed for $request_method" |
68 |
unless ( |
68 |
unless $csrf_token; |
69 |
Koha::Token->new->check_csrf( |
69 |
|
70 |
{ |
70 |
unless ( |
71 |
session_id => scalar $q->cookie('CGISESSID'), |
71 |
Koha::Token->new->check_csrf( |
72 |
token => $csrf_token, |
72 |
{ |
73 |
} |
73 |
session_id => scalar $q->cookie('CGISESSID'), |
74 |
) |
74 |
token => $csrf_token, |
75 |
) |
75 |
} |
76 |
{ |
76 |
) |
77 |
Koha::Logger->get->debug("The form submission failed (Wrong CSRF token)."); |
77 |
) |
78 |
$q->param( 'op', '' ); |
78 |
{ |
79 |
$q->param( 'invalid_csrf_token', 1); |
79 |
Koha::Logger->get->debug("The form submission failed (Wrong CSRF token)."); |
80 |
} |
|
|
81 |
} else { |
82 |
Koha::Logger->get->warn("Programming error - No CSRF token passed for $request_method"); |
83 |
$q->param( 'op', '' ); |
80 |
$q->param( 'op', '' ); |
84 |
$q->param( 'debug_programming_error', "No CSRF token passed for $request_method" ); |
81 |
$q->param( 'invalid_csrf_token', 1); |
85 |
} |
82 |
} |
86 |
} |
83 |
} |
87 |
|
84 |
|
88 |
- |
|
|