]> git.koha-community.org Git - koha.git/commit
Bug 3280 Restrict Send basket feature
authorFrère Sébastien Marie <semarie-koha@latrappe.fr>
Mon, 5 Dec 2011 09:11:46 +0000 (10:11 +0100)
committerPaul Poulain <paul.poulain@biblibre.com>
Fri, 29 Jun 2012 14:23:30 +0000 (16:23 +0200)
commita1cdb441cf836ef4cb633bde8043aee4fb80416e
tree0ab709901e127d5e1c3fafdbaa2c941018a0390e
parent36f1fb630852ce33f23299e530c2d9633455ee77
Bug 3280 Restrict Send basket feature

In order to prevent spamming using sendbasket.pl, some counter-measure are done:
 - permit send basket only for authenticated user
 - permit send basket only if basket contains items
 - use username & email for 'Reply-To' field (with fallback to KohaAdminEmailAddress)
 - add field X-Orig-IP with IP of sender
 - add field X-Abuse-Report with KohaAdminEmailAddress

Note: we don't use forged 'To' address with patron email in order to
prevent be marked as spam (by SPF for example).

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Paul Poulain <paul.poulain@biblibre.com>
opac/opac-sendbasket.pl