gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Koha-clms/members
History
Jonathan Druart 29181dae40 Bug 14566: Fix permissions in patronimage.pl 
There is no permission needed to access the patronimage.pl script.
This means anybody cans access to the patron's images.

Test plan:
Add an image to borrowernumber 42 and call
/cgi-bin/koha/members/patronimage.pl?borrowernumber=42

If you are logged in with borrowers permissions, you will see the image,
otherwise you will get a blank page with a 403 header.

Signed-off-by: Indranil Das Gupta (L2C2 Technologies) <indradg@gmail.com>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
Signed-off-by: Liz Rea <wizzyrea@gmail.com>

Conflicts:
	members/patronimage.pl
 		2015-08-28 14:55:25 +12:00
..
boraccount.pl Bug 6273: add support for recording type of payment made via SIP2 2014-04-30 16:38:09 +00:00
default_messageprefs.pl Fix FSF address in directory members/ 2010-03-16 20:17:55 -04:00
deletemem.pl Bug 10277 - Add C4::Context->IsSuperLibrarian() 2013-12-30 15:47:23 +00:00
files.pl Bug 10636 - patronimage should have borrowernumber as PK, not cardnumber 2013-10-14 21:08:02 +00:00
guarantor_search.pl Bug 12198: (follow-up) fix warning when opening guarantor search form 2014-05-08 16:16:52 +00:00
mancredit.pl Bug 9245: Fixes visual bug with fines tab not highlighting 2014-07-23 21:19:53 +00:00
maninvoice.pl Bug 9245: Fixes visual bug with fines tab not highlighting 2014-07-23 21:19:53 +00:00
member-flags.pl Bug 10636 - patronimage should have borrowernumber as PK, not cardnumber 2013-10-14 21:08:02 +00:00
member-password.pl Bug 10636 - patronimage should have borrowernumber as PK, not cardnumber 2013-10-14 21:08:02 +00:00
member.pl Bug 11855: Tiny code cleanup in members 2014-04-08 23:42:46 +00:00
memberentry.pl Bug 13602 - Username/password already exists when editing borrower attributes and messaging preferences 2015-02-26 16:41:54 +13:00
members-home.pl Bug 13458: Display the correct patron categories 2015-01-23 20:00:06 +13:00
members-update-do.pl Bug 7067 - OPAC Borrower Self Registration 2012-12-14 08:08:59 -05:00
members-update.pl Bug 10080 - Change system pref IndependantBranches to IndependentBranches 2013-05-22 07:58:23 -07:00
mod_debarment.pl Bug 12069: redirect to staff login if you access members/mod_debarment.pl when logged out 2014-04-12 18:00:18 +00:00
moremember.pl Bug 14324: Display "Add Child" for Organisations on circ/circulation.pl 2015-07-26 01:20:14 +12:00
notices.pl Bug 10636 - patronimage should have borrowernumber as PK, not cardnumber 2013-10-14 21:08:02 +00:00
patronimage.pl Bug 14566: Fix permissions in patronimage.pl 2015-08-28 14:55:25 +12:00
pay.pl Bug 9245: Fixes visual bug with fines tab not highlighting 2014-07-23 21:19:53 +00:00
paycollect.pl Bug 9448: Add separate permission for writing off fees 2014-04-17 15:41:23 +00:00
printfeercpt.pl Bug 6273: add support for recording type of payment made via SIP2 2014-04-30 16:38:09 +00:00
printinvoice.pl Bug 6273: add support for recording type of payment made via SIP2 2014-04-30 16:38:09 +00:00
printslip.pl Bug 7563 - Silent print slips using Firefox PlugIn jsPrintSetup and new staff client preference 2012-07-06 18:23:39 +02:00
purchase-suggestions.pl Bug 11802 - corrects for the patron purchase suggestions page 2014-03-10 15:11:53 +00:00
readingrec.pl Bug 11009: (follow-up) tweak wording and remove potential log noise 2013-12-10 20:20:37 +00:00
routing-lists.pl Bug 7372: Move road types from the roadtype table to the ROADTYPE AV 2014-02-21 16:00:53 +00:00
setstatus.pl Bug 9406: ensure confirmation of patron renewal is displayed 2013-03-30 21:22:00 -04:00
statistics.pl Bug 10636 - patronimage should have borrowernumber as PK, not cardnumber 2013-10-14 21:08:02 +00:00
summary-print.pl Bug 12971 [QA Followup] - Fix error caused by patron not having any checkouts 2015-01-23 06:51:38 +13:00
update-child.pl Bug 10453: fix unintended password reset when updating child to adult 2013-12-26 15:29:40 +00:00