Main Koha release repository https://koha-community.org
Find a file
Jonathan Druart 95097d1cc2 Bug 29914: Make check_cookie_auth compare the userid
check_cookie_auth is assuming that the user is authenticated if a cookie exists
and that the login/username exists in the DB.

So basically if you hit the login page, fill the login input with a
valid username, click "login"
=> A cookie will be generated, and the sessions table will contain a
line with this session id.
On the second hit, if the username is in the DB, it will be enough to be
considered authenticated.

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
2022-02-02 21:05:29 -10:00
acqui
admin Bug 27868: Add expiration date to holds awaiting pickup 2022-01-28 11:09:07 -10:00
api Bug 29772: (follow-up) Document error codes 2022-01-05 13:33:46 -10:00
authorities
basket Bug 27266: (QA follow-up) Remove GetBiblioData from basket scripts 2021-12-15 12:15:14 -10:00
bin
C4 Bug 29914: Make check_cookie_auth compare the userid 2022-02-02 21:05:29 -10:00
catalogue Bug 29690: Prevent detail.pl to crash if MARCXML is invalid 2022-01-28 21:52:54 -10:00
cataloguing Bug 29511: Sort hash keys 2022-01-28 21:52:54 -10:00
circ Bug 29903: Prevent messages to be deleted from unauthorised users 2022-02-02 21:05:29 -10:00
clubs
course_reserves
debian Bug 28962: Add del-unv-selfreg to crontab 2022-01-21 21:34:51 -10:00
docs Revert "Bug 20076: Add Thibaud Guillot to contributors" 2022-01-13 22:12:53 -10:00
errors
etc Bug 18540: Update MARC21 biblio XSL file 2022-01-18 21:15:04 -10:00
ill
installer Bug 29943: DBRev 21.12.00.015 2022-02-01 21:39:39 -10:00
Koha Bug 29914: Make check_cookie_auth compare the userid 2022-02-02 21:05:29 -10:00
koha-tmpl Bug 29542: Prevent access to private list to non authorized users 2022-02-02 21:05:29 -10:00
labels
lib/CGI/Session/Serialize
members Bug 29541: Prevent users from another group to access patron's images 2022-02-02 21:05:29 -10:00
misc Bug 28962: Add del-unv-selfreg to crontab 2022-01-21 21:34:51 -10:00
offline_circ
opac Bug 29544: (QA follow-up) Simplify code 2022-02-02 21:05:29 -10:00
patron_lists
patroncards Bug 18320: Remove calls to CGI->param from the templates in patron cards 2022-01-19 12:13:49 -10:00
plugins
pos Bug 28481: (RM follow-up) formatting 2021-12-16 12:13:51 -10:00
reports Bug 28216: Fix vendor list group by in serials statistics wizard 2021-12-14 09:38:10 -10:00
reserve Bug 29540: Raise flagsrequired in modrequest 2022-02-02 21:05:29 -10:00
reviews
rotating_collections
serials Bug 29790: Restore warning if deletion of serial item fails 2022-01-11 12:38:35 -10:00
services
skel
suggestion
svc Bug 28377: (follow-up) Remove svc/hold/{resume|suspend} 2021-12-16 12:13:51 -10:00
t Bug 29543: Add JWT token handling 2022-02-02 21:05:29 -10:00
tags
tmp/modified_authorities
tools Bug 29809: (follow-up) Update tests and rename variable 2022-01-31 21:55:40 -10:00
virtualshelves Bug 29542: Prevent access to private list to non authorized users 2022-02-02 21:05:29 -10:00
xt Bug 28617: (QA follow-up) Restore FindBin in two places 2021-12-07 12:16:28 -10:00
.editorconfig
.eslintrc.json
.gitignore
.htaccess
.mailmap 21.11.00 - Update .mailmap 2021-11-26 12:26:22 +01:00
.perlcriticrc
.proverc.dist
.scss-lint.yml
about.pl
app.psgi
changelanguage.pl
cpanfile Bug 29543: Add Mojo::JWT dependency 2022-02-02 21:05:29 -10:00
fix-perl-path.PL
gulpfile.js
help.pl
INSTALL
Koha.pm Bug 29943: DBRev 21.12.00.015 2022-02-01 21:39:39 -10:00
koha_perl_deps.pl
kohaversion.pl
LICENSE
mainpage.pl
Makefile.PL Bug 28617: Remove kohalib.pl and rely on PERL5LIB 2021-12-07 12:16:28 -10:00
MANIFEST.SKIP
package.json
README
README.md
README.robots
rewrite-config.PL
yarn.lock

Koha is a free software integrated library system (ILS).

Koha is distributed under the GNU GPL version 3 or later.

Note: Koha does not accept pull requests from git hosting sites.

Note: This project has its own bug tracker, to report a bug or submit a patch visit http://bugs.koha-community.org.

For guidelines on submitting patches for Koha please visit https://wiki.koha-community.org/wiki/SubmitingAPatch

The developers handbook can be found at https://wiki.koha-community.org/wiki/Developer_handbook

http://koha-community.org/

Koha Logo