Koha/opac
Jonathan Druart 1df8ee1994 Bug 36532: Protect opac-dismiss-message.pl from malicious usages
Really bad design, NEVER retrieve the logged in user from the CGI
param!

See comment 1 for more info

Signed-off-by: Owen Leonard <oleonard@myacpl.org>
Signed-off-by: David Cook <dcook@prosentient.com.au>
(cherry picked from commit a40e1fd62c7320ad5f7b8514ba2bd129aad2d10f)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
2024-04-24 07:36:20 +02:00
..
clubs Bug 35941: (QA follow-up) Tidy clubs-tab.pl 2024-02-19 14:41:11 +01:00
errors
external/overdrive
sci
sco Bug 34557: Add SCOLoadCheckoutsByDefault system preference 2023-11-08 11:41:11 -03:00
svc Bug 35942: OPAC user can enroll several times to the same club 2024-02-19 14:41:11 +01:00
ilsdi.pl
maintenance.pl Bug 23798: Convert OpacMaintenanceNotice system preference to additional contents 2023-11-08 17:41:27 -03:00
oai.pl
opac-account-pay-return.pl
opac-account-pay.pl Bug 36088: Remove useless code form opac-account-pay.pl 2024-03-11 10:29:19 +01:00
opac-account.pl
opac-addbybiblionumber.pl
opac-alert-subscribe.pl Bug 28130: (QA follow-up) Tidy 2023-10-11 10:31:39 -03:00
opac-alert-subscriptions.pl Bug 28130: (QA follow-up) Tidy 2023-10-11 10:31:39 -03:00
opac-article-request-cancel.pl
opac-authorities-home.pl Bug 35578: Simplify the code using intersect 2024-02-01 15:50:38 +01:00
opac-authoritiesdetail.pl
opac-basket.pl
opac-blocked.pl Bug 35952: Remove unnecessary line for OpacSuppressionMessage 2024-03-11 10:40:31 +01:00
opac-browse.pl
opac-browser.pl
opac-changelanguage.pl
opac-course-details.pl
opac-course-reserves.pl
opac-curbside-pickups.pl
opac-detail.pl Bug 34886: Adjust other opac detail scripts 2024-04-17 17:10:07 +02:00
opac-discharge.pl
opac-dismiss-message.pl Bug 36532: Protect opac-dismiss-message.pl from malicious usages 2024-04-24 07:36:20 +02:00
opac-downloadcart.pl
opac-downloadshelf.pl
opac-export.pl
opac-holdshistory.pl
opac-ics.pl
opac-idref.pl
opac-illrequests.pl Bug 18203: Rename column 2023-11-01 18:01:39 -03:00
opac-image.pl Bug 33047: Return 404 instead of 500 when biblio does not exist 2023-07-10 15:43:14 -03:00
opac-imageviewer.pl
opac-ISBDdetail.pl Bug 34886: Adjust other opac detail scripts 2024-04-17 17:10:07 +02:00
opac-issue-note.pl
opac-library.pl
opac-main.pl Bug 31383: Create a parent-child DB relation for additional content 2023-10-20 14:43:56 -03:00
opac-MARCdetail.pl Bug 34886: Adjust other opac detail scripts 2024-04-17 17:10:07 +02:00
opac-memberentry.pl Bug 35538: Sort OPAC self registration library list by library name 2024-03-11 11:29:25 +01:00
opac-messaging.pl
opac-modrequest-suspend.pl Bug 35492: Open holds tab by default on opac-user.pl after suspending a hold 2024-01-03 15:09:10 +01:00
opac-modrequest.pl Bug 35495: Open holds tab by default on opac-user.pl after cancelling a hold 2024-01-03 15:09:49 +01:00
opac-mymessages.pl
opac-news-rss.pl
opac-overdrive-search.pl
opac-page.pl Bug 31383: Create a parent-child DB relation for additional content 2023-10-20 14:43:56 -03:00
opac-passwd.pl
opac-password-recovery.pl Bug 21431: Add action parameter to set_password 2023-11-09 14:50:11 -03:00
opac-patron-consent.pl Bug 31503: Make opac-patron-consent more generic 2023-10-25 10:35:20 -03:00
opac-patron-image.pl
opac-privacy.pl
opac-ratings.pl
opac-readingrecord.pl Bug 33949: Replace GetAllIssues with Koha::Checkouts - opac 2023-10-18 15:41:26 -03:00
opac-recall.pl
opac-recalls.pl
opac-registration-verify.pl Bug 35445: Require OPAC user to confirm self-registration with button push 2024-02-01 15:54:02 +01:00
opac-renew.pl Bug 33444: Update AddRenewal to take a hashref of params 2023-07-19 12:06:52 -03:00
opac-reportproblem.pl
opac-request-article.pl Bug 36072: opac-request-article should check syspref 2024-02-19 14:41:11 +01:00
opac-reserve.pl Bug 35488: Open holds tab by default on opac-user.pl after placing a hold 2024-01-03 15:06:35 +01:00
opac-reset-password.pl
opac-restrictedpage.pl
opac-retrieve-file.pl
opac-review.pl
opac-routing-lists.pl
opac-search-history.pl
opac-search.pl Bug 35833: Silence few warnings from searching 2024-02-01 15:06:57 +01:00
opac-sendbasket.pl Bug 34731: Don't call SendQueuedMessages if message_id is bad 2023-09-12 09:44:59 -03:00
opac-sendshelf.pl Bug 34731: Don't call SendQueuedMessages if message_id is bad 2023-09-12 09:44:59 -03:00
opac-serial-issues.pl
opac-shareshelf.pl
opac-shelves.pl
opac-showmarc.pl
opac-showreviews.pl
opac-suggestions.pl Bug 33236: Move NewSuggestion to Koha::Suggestion->store 2023-06-06 10:08:35 -03:00
opac-tags.pl
opac-tags_subject.pl
opac-topissues.pl
opac-user.pl Bug 35496: (QA follow-up): tidy up code 2024-01-03 15:10:21 +01:00
tracklinks.pl
unapi