From 431dd18a6149532828faf10fe76bcbb149925623 Mon Sep 17 00:00:00 2001 From: Mark Tompsett Date: Thu, 11 Feb 2016 09:51:52 -0500 Subject: [PATCH] Bug 15747 Auth.pm flooding error log with "CGI::param called in list context" TEST PLAN --------- 1) git checkout -b bug_15747 origin/master 2) echo > ~/koha-dev/var/log/koha-error_log 3) open up staff interface and log in. 4) cat ~/koha-dev/var/log/koha-error_log --- BEGIN SNIP --- [Thu Feb 11 09:49:43.627711 2016] [cgi:error] [pid 2132] [client 192.168.71.222: 51107] AH01215: [Thu Feb 11 09:49:43 2016] mainpage.pl: CGI::param called in lis t context from package C4::Auth line 401, this can lead to vulnerabilities. See the warning in "Fetching the value or values of a single named parameter" at /us r/share/perl5/CGI.pm line 436., referer: http://library-admin.debiankoha.ca/ --- END SNIP --- 5) logout 6) echo > ~/koha-dev/var/log/koha-error_log 7) log back in. 8) cat ~/koha-dev/var/log/koha-error_log -- this time should not be there. 9) koha qa test tools --- C4/Auth.pm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/C4/Auth.pm b/C4/Auth.pm index 9481f73..ac055fe 100644 --- a/C4/Auth.pm +++ b/C4/Auth.pm @@ -398,7 +398,8 @@ sub get_template_and_user { $template->param( dateformat => C4::Context->preference('dateformat') ); } - $template->param(auth_forwarded_hash => $in->{'query'}->param('auth_forwarded_hash')); + my $auth_forwarded_hash = $in->{'query'}->param('auth_forwarded_hash'); + $template->param(auth_forwarded_hash => $auth_forwarded_hash); # these template parameters are set the same regardless of $in->{'type'} -- 2.1.4