From 57eb71e2d204ec0d2c3129a082b9c6120d2cc799 Mon Sep 17 00:00:00 2001 From: Mike Rylander Date: Thu, 27 Jul 2017 12:59:43 -0400 Subject: [PATCH] offline: Prefer user-supplied param to browser-supplied cookie in the authen proxy Signed-off-by: Mike Rylander --- Open-ILS/src/perlmods/lib/OpenILS/WWW/Proxy/Authen.pm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Open-ILS/src/perlmods/lib/OpenILS/WWW/Proxy/Authen.pm b/Open-ILS/src/perlmods/lib/OpenILS/WWW/Proxy/Authen.pm index 5b1c64b77d..2366cfe07e 100644 --- a/Open-ILS/src/perlmods/lib/OpenILS/WWW/Proxy/Authen.pm +++ b/Open-ILS/src/perlmods/lib/OpenILS/WWW/Proxy/Authen.pm @@ -39,8 +39,8 @@ sub handler { return Apache2::Const::NOT_FOUND unless (@$perms); my $cgi = new CGI; - my $auth_ses = $cgi->cookie('ses') || $cgi->param('ses'); - my $ws_ou = $apache->dir_config('OILSProxyLoginOU') || $cgi->cookie('ws_ou') || $cgi->param('ws_ou'); + my $auth_ses = $cgi->param('ses') || $cgi->cookie('ses'); + my $ws_ou = $apache->dir_config('OILSProxyLoginOU') || $cgi->param('ws_ou') || $cgi->cookie('ws_ou'); my $url = $cgi->url; my $bad_auth = 1; # Assume failure until proven otherwise ;) -- 2.11.0