gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
8,105 Commits 39 Branches 720 Tags 6 GiB
Perl 44.2%
JavaScript 41.1%
HTML 6%
XSLT 3.1%
Vue 1.9%
Other 3.2%
Go to file
Galen Charlton 1cdfcdf12b close security holes in patron search autocompletion 
* Added authorization check - user must have a valid
  session cookie to use this feature; before this change,
  anybody could use circ/ysearch.pl to retrieve the entire
  patron directory without authorization.
* (bug 1953) now uses SQL placeholders

Note: this does, unfortunately, noticeably slow down automcompletion;
this indicates a need for factoring of C4::Auth to make authentication
for AJAX scripts as fast as possible.

Signed-off-by: Joshua Ferraro <jmf@liblime.com>
 		2008-05-12 10:02:56 -05:00
C4 Bug Fixing 1782 patch 2008-05-12 09:42:25 -05:00
acqui Fix for Bug 2086, Filter Button Misleading. This moves the filter form into the left-hand sidebar. 2008-05-11 06:45:11 -05:00
admin new editor for patron attribute types 2008-05-12 09:03:03 -05:00
authorities authorities: make tag editor links consistent with bib 2007-12-29 06:53:52 -06:00
catalogue BUGFIX (bloquing) moredetail & item edition 2008-05-12 09:24:48 -05:00
cataloguing XHTML correction - readonly attribute can contain only "readonly" 2008-04-21 11:17:32 -05:00
circ close security holes in patron search autocompletion 2008-05-12 10:02:56 -05:00
errors bug 1803 - fix error page handling 2008-02-18 19:32:07 -06:00
etc fixing anonymous permissions access to zebra via Z39.50 2008-04-24 13:38:21 -05:00
install_misc Add a new Debian package and GoogleJacket on OPAC detail page 2008-04-30 06:08:46 -05:00
installer DB Update 77 : add lastincrement column to accountlines 2008-05-12 09:33:31 -05:00
koha-tmpl Bug Fixing 1782 patch 2008-05-12 09:42:25 -05:00
labels BUGFIX labels - Adding labels was failing because of faulty "type" selection. 2008-04-30 06:09:05 -05:00
members Bug Fixing 1782 patch 2008-05-12 09:42:25 -05:00
misc C4::Circulation::FixOverduesOnReturn now handles dropbox mode. 2008-05-12 09:29:14 -05:00
opac patron attributes - OPAC display 2008-05-12 09:03:07 -05:00
reports Bug 2094: fixing two bugs in lost items report 2008-05-11 06:48:51 -05:00
reserve Report borrower's home library on reserves library mismatch. 2008-03-25 07:20:22 -05:00
reviews granular permissions - updated Tools 2008-04-10 15:53:30 -05:00
rss rel_3_0 moved to HEAD 2007-03-09 15:12:54 +00:00
serials IMPROVEMENT : serialsadditems at subscription level (bump 071) 2008-04-22 17:34:33 -05:00
skel installer: fixed chown invocation; added skel for KOHA_LOG_DIR 2007-12-17 09:13:53 -06:00
sms SMS - widespread cleanup and moving code away from Cyprus/Turkey-specific implementation. Much more needed. 2008-02-06 23:19:30 -06:00
suggestion Accept or reject : Bug Fix and improvements. 2008-04-17 05:52:47 -05:00
svc bib_profile web svc: report biblioitems.itemtype subfield as non-mandatory 2007-12-04 15:06:05 -06:00
t adjusted new C4::Scrubber test cases 2008-05-12 09:23:44 -05:00
tmp/modified_authorities changing DO_NOT_REMOVE to README.txt 2007-10-21 19:14:41 -05:00
tools patron attributes - batch import 2008-05-12 09:03:10 -05:00
virtualshelves Shelves consolidation to C4::VirtualShelves::Page. I can tell the consolidation 2008-01-14 16:45:21 -06:00
.htaccess bug 1803 - fix error page handling 2008-02-18 19:32:07 -06:00
INSTALL adding upgrade instructions to INSTALL and INSTALL.debain 2008-02-21 14:04:47 -06:00
INSTALL.debian Adding Fedora installation documentation 2008-04-30 19:47:25 -05:00
INSTALL.fedora7 kohabug 2076 - remove three tables (DB rev 077) 2008-05-01 18:59:28 -05:00
LICENSE re-naming some files prior to release 2007-12-30 12:13:39 -06:00
MANIFEST.SKIP Do not pack the git repository 2007-09-06 17:14:36 -05:00
Makefile.PL bug 2083: requiring that the test database have a different name from the production database 2008-05-11 06:43:39 -05:00
README adding README 2007-12-30 12:13:57 -06:00
about.pl don't sort @INC when displaying on about page 2008-02-15 08:24:43 -06:00
changelanguage.pl fixing bug 1754: Hide language chooser if only one translation is available 2008-03-17 21:28:31 -05:00
edithelp.pl edithelp.pl - cleanup, refactor and error feedback to user 2008-01-08 14:04:48 -06:00
fix-perl-path.PL installer: improvements to fix-path-perl.PL on Win32 2007-12-20 19:20:12 -06:00
help.pl Adding yuipath variable to help.pl, and doing some cleanup of help templates (standardizing structure, mostly, and correcting some nomenclature). 2008-01-09 14:50:20 -06:00
install-CPAN.pl BUGFIX: need to create authors/id if CPAN is unused 2007-09-07 05:26:16 -05:00
kohaversion.pl Incrementing DB revision 081 2008-05-12 09:36:13 -05:00
mainpage.pl fixing permissions requirements on mainpage.pl 2008-01-04 21:30:14 -06:00
rewrite-config.PL kohabug 1776 - try to locate Zebra during install 2008-04-22 17:59:00 -05:00

README 

Koha 3 - the next-generation release of the award-winning Koha open-source
integrated library system.

30 December 2007 - Joshua Ferraro <jmf AT liblime DOT com>

Koha is distributed under the GNU GPL. Please read the file LICENSE for
more details.

To install or upgrade Koha, please see the INSTALL file.

Please report any bugs to the koha mailing lists or bug tracker and we
will try to fix them in a future release. The main koha web site is
http://www.koha.org/