gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

bug 7688: (follow-up) add authentication checking 

A couple web services introduced in the patch series
lacked authentication checks.

Signed-off-by: Galen Charlton <gmc@esilibrary.com>
This commit is contained in:
Galen Charlton 2013-10-30 02:51:11 +00:00
parent f939d9d92a
commit 241a091f59
2 changed files with 17 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
serials/create-numberpattern.pl
View File

@ -1,14 +1,20 @@
#!/usr/bin/perl
use Modern::Perl;
use CGI;
use C4::Context;
use C4::Serials::Numberpattern;
use C4::Auth qw/check_cookie_auth/;
use URI::Escape;
use strict;
use warnings;
my $input = new CGI;
my ($auth_status, $sessionID) = check_cookie_auth($input->cookie('CGISESSID'), { serials => '*' });
if ($auth_status ne "ok") {
print $input->header(-type => 'text/plain', -status => '403 Forbidden');
exit 0;
}
my $numberpattern;
foreach (qw/ numberingmethod label1 label2 label3 add1 add2 add3
every1 every2 every3 setto1 setto2 setto3 whenmorethan1 whenmorethan2

11
serials/subscription-numberpattern.pl
View File

@ -1,12 +1,19 @@
#!/usr/bin/perl
use Modern::Perl;
use CGI;
use C4::Serials::Numberpattern;
use C4::Auth qw/check_cookie_auth/;
use URI::Escape;
use strict;
use warnings;
my $input=new CGI;
my ($auth_status, $sessionID) = check_cookie_auth($input->cookie('CGISESSID'), { serials => '*' });
if ($auth_status ne "ok") {
print $input->header(-type => 'text/plain', -status => '403 Forbidden');
exit 0;
}
my $numpatternid=$input->param("numberpattern_id");
my $numberpatternrecord=GetSubscriptionNumberpattern($numpatternid);