gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'security/21.11.x' into 21.11.x

This commit is contained in:
Kyle Hall 2022-02-25 10:57:26 -05:00
parent dca673eee6 2a4fa92458
commit 3e12c6c9af
5 changed files with 24 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-advsearch.tt
View File

@ -9,7 +9,7 @@
</head>
[% INCLUDE 'bodytag.inc' bodyid='advsearch' bodyclass='scrollto' %]
[% INCLUDE 'masthead.inc' %]
<form action="/cgi-bin/koha/opac-search.pl" method="get">
<form id="advsearch_form" action="/cgi-bin/koha/opac-search.pl" method="get">
<input type="hidden" name="advsearch" value="1"/>
<div class="main">
<nav id="breadcrumbs" aria-label="Breadcrumb" class="breadcrumbs">
@ -500,7 +500,7 @@ $(document).ready(function() {
jQuery.removeCookie("form_serialized_limits", { path: '/'});
jQuery.removeCookie("search_path_code", { path: '/'});
[% END %]
$('#advsearch form').submit(function() {
$('#advsearch_form').submit(function() {
$('[name^="limit"]').each(function(){
if( $(this).val() == '' ){
$(this).prop("disabled","disabled");

13
opac/opac-patron-image.pl
View File

@ -32,13 +32,14 @@ unless (C4::Context->preference('OPACpatronimages')) {
exit;
}
my $needed_flags;
my %cookies = CGI::Cookie->fetch;
my $sessid = $cookies{'CGISESSID'}->value;
my ($auth_status) = check_cookie_auth($sessid, $needed_flags);
my $borrowernumber = C4::Context->userenv->{'number'};
my ($auth_status) = check_cookie_auth( $query->cookie('CGISESSID') );
if( $auth_status ne 'ok' ) {
print CGI::header( '-status' => '401' );
exit 0;
}
my $patron_image = Koha::Patron::Images->find($borrowernumber);
my $userenv = C4::Context->userenv;
my $patron_image = $userenv ? Koha::Patron::Images->find( $userenv->{number} ) : undef;
if ($patron_image) {
print $query->header(

7
plugins/plugins-enable.pl
View File

@ -27,8 +27,11 @@ die("Koha plugins are disabled!") unless C4::Context->config("enable_plugins");
my $input = CGI->new;
my ( $auth_status ) =
check_cookie_auth( $input->cookie('CGISESSID'), { plugins => 'manage' } );
my ( $auth_status ) = check_cookie_auth( $input->cookie('CGISESSID'), { plugins => 'manage' } );
if( $auth_status ne 'ok' ) {
print CGI::header( '-status' => '401' );
exit 0;
}
my $class = $input->param('class');
my $method = $input->param('method');

7
svc/checkouts
View File

@ -33,8 +33,11 @@ use Koha::ItemTypes;
my $input = CGI->new;
my ( $auth_status, $session ) =
check_cookie_auth( $input->cookie('CGISESSID'));
my ( $auth_status, $session ) = check_cookie_auth( $input->cookie('CGISESSID'));
if( $auth_status ne 'ok' ) {
print CGI::header( '-status' => '401' );
exit 0;
}
my $userid = $session->param('id');

7
svc/return_claims
View File

@ -31,8 +31,11 @@ use Koha::Patrons;
my $input = CGI->new;
my ( $auth_status, $session ) =
check_cookie_auth( $input->cookie('CGISESSID') );
my ( $auth_status, $session ) = check_cookie_auth( $input->cookie('CGISESSID') );
if( $auth_status ne 'ok' ) {
print CGI::header( '-status' => '401' );
exit 0;
}
my $userid = $session->param('id');