Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity

Bug 6629 : Follow up to trap vuln in webinstaller and fixing the error

Browse source 
Signed-off-by: Katrin Fischer <Katrin.Fischer.83@web.de>
Patch fixes problem occuring in web installer.
This commit is contained in:
Chris Cormack 2011-11-27 21:18:29 +13:00 committed by Paul Poulain
parent 9a4e9e54f2
commit 948f65344e
1 changed files with 10 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
installer/InstallAuth.pm
View file

@ -117,7 +117,7 @@ sub get_template_and_user {
$tmplbase=~ s/\.tmpl$/.tt/;
my $filename = "$path/modules/" . $tmplbase;
my $interface = 'intranet';
my $template = C4::Templates->new( $interface, $filename, $tmplbase);
my $template = C4::Templates->new( $interface, $filename, $tmplbase, $query);
my ( $user, $cookie, $sessionID, $flags ) = checkauth(
$in->{'query'},
@ -158,12 +158,14 @@ sub get_template_and_user {
}
sub _get_template_language {
#verify if opac language exists in staff (bug 5660)
#conditions are 1) dir exists and 2) enabled in prefs
my ($opaclang)= @_;
return 'en' unless $opaclang;
my $path= C4::Context->config('intrahtdocs')."/prog/$opaclang";
-d $path ? $opaclang : 'en';
#verify if opac language exists in staff (bug 5660)
#conditions are 1) dir exists and 2) enabled in prefs
my ($opaclang) = @_;
return 'en' unless $opaclang;
$opaclang =~ s/[^a-zA-Z_-]*//g;
my $path = C4::Context->config('intrahtdocs') . "/prog/$opaclang";
-d $path ? $opaclang : 'en';
}
=item checkauth
@ -365,7 +367,7 @@ sub checkauth {
my $filename = "$path/modules/$template_name";
$filename =~ s/\.tmpl$/.tt/;
my $interface = 'intranet';
my $template = C4::Templates->new( $interface, $filename);
my $template = C4::Templates->new( $interface, $filename, '', $query);
$template->param(
INPUTS => \@inputs,