* Added authorization check - user must have a valid session cookie to use this feature; before this change, anybody could use circ/ysearch.pl to retrieve the entire patron directory without authorization. * (bug 1953) now uses SQL placeholders Note: this does, unfortunately, noticeably slow down automcompletion; this indicates a need for factoring of C4::Auth to make authentication for AJAX scripts as fast as possible. Signed-off-by: Joshua Ferraro <jmf@liblime.com> |
||
|---|---|---|
| .. | ||
| billing.pl | ||
| bookcount.pl | ||
| branchoverdues.pl | ||
| branchtransfers.pl | ||
| circulation-home.pl | ||
| circulation.pl | ||
| hold-transfer-slip.pl | ||
| overdue.pl | ||
| pendingreserves.pl | ||
| reserveratios.pl | ||
| returns.pl | ||
| selectbranchprinter.pl | ||
| stats.pl | ||
| transferstodo.pl | ||
| transferstoreceive.pl | ||
| waitingreserves.pl | ||
| ysearch.pl | ||