View | Details | Raw Unified | Return to bug 22543
Collapse All | Expand All

(-)a/C4/Auth.pm (-1 / +12 lines)
Lines 1208-1213 sub checkauth { Link Here
1208
            );
1208
            );
1209
        }
1209
        }
1210
1210
1211
        # In case, that this request was a login attempt, we want to prevent that users can repost the opac login
1212
        # request. We therefore redirect the user to the requested page again without the login parameters.
1213
        # See Post/Redirect/Get (PRG) design pattern: https://en.wikipedia.org/wiki/Post/Redirect/Get
1214
        if ( $type eq "opac" && $query->param('koha_login_context') && $query->param('password') && $query->param('userid') ) {
1215
            my $uri = URI->new($query->url(-relative=>1, -query_string=>1));
1216
            $uri->query_param_delete('userid');
1217
            $uri->query_param_delete('password');
1218
            $uri->query_param_delete('koha_login_context');
1219
            print $query->redirect(-uri => $uri->as_string, -cookie => $cookie, -status=>'303 See other');
1220
            exit;
1221
        }
1222
1211
        track_login_daily( $userid );
1223
        track_login_daily( $userid );
1212
1224
1213
        return ( $userid, $cookie, $sessionID, $flags );
1225
        return ( $userid, $cookie, $sessionID, $flags );
1214
- 

Return to bug 22543