Koha-clms/circ
Galen Charlton 1cdfcdf12b close security holes in patron search autocompletion
* Added authorization check - user must have a valid
  session cookie to use this feature; before this change,
  anybody could use circ/ysearch.pl to retrieve the entire
  patron directory without authorization.
* (bug 1953) now uses SQL placeholders

Note: this does, unfortunately, noticeably slow down automcompletion;
this indicates a need for factoring of C4::Auth to make authentication
for AJAX scripts as fast as possible.

Signed-off-by: Joshua Ferraro <jmf@liblime.com>
2008-05-12 10:02:56 -05:00
..
billing.pl more XHTML corrections for new circ reports 2008-04-03 14:42:21 -05:00
bookcount.pl created old_issues and old_reserves tables 2008-03-15 08:36:31 -05:00
branchoverdues.pl fix errors with using today's date and format_date 2008-03-15 08:37:21 -05:00
branchtransfers.pl Fix for bug 1400, some variables not being passed to the branch transfers 2008-01-09 14:49:59 -06:00
circulation-home.pl Adding new circulation-home, what we ultimately hope to be a "dashboard" interface for circulation functions. circulation-home.pl was created by copy-and-paste, so it should be reviewed. Circulation sub-pages' breadcrumb links have been updated to point to circulation-home. 2007-10-18 16:26:04 -05:00
circulation.pl Bug Fixing 1782 patch 2008-05-12 09:42:25 -05:00
hold-transfer-slip.pl Add print slip to hold confirmation dialog. 2008-03-25 07:20:25 -05:00
overdue.pl various date-related cleanups in circ 2008-04-03 14:42:14 -05:00
pendingreserves.pl more XHTML corrections for new circ reports 2008-04-03 14:42:21 -05:00
reserveratios.pl more XHTML corrections for new circ reports 2008-04-03 14:42:21 -05:00
returns.pl adjust dropboxdate to allow for holidays calendar. 2008-05-12 09:29:10 -05:00
selectbranchprinter.pl removing useless code 2007-10-24 17:03:38 -05:00
stats.pl circ/stats.pl - debugify warnings 2008-01-03 20:19:22 -06:00
transferstodo.pl fix errors with using today's date and format_date 2008-03-15 08:37:21 -05:00
transferstoreceive.pl fix errors with using today's date and format_date 2008-03-15 08:37:21 -05:00
waitingreserves.pl fix errors with using today's date and format_date 2008-03-15 08:37:21 -05:00
ysearch.pl close security holes in patron search autocompletion 2008-05-12 10:02:56 -05:00