lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: ouverture d'une session temporaire de securite pour stocker une de cryptage alatoire pour

Browse Source 
encryption du cookie
This commit is contained in:
Regis Houssin 2009-05-20 18:18:25 +00:00
parent f0fd274206
commit 43ee2c4acb
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
htdocs/master.inc.php
View File

@ -137,8 +137,8 @@ $conf->file->main_force_https = empty($dolibarr_main_force_https)?'':$dolibarr_m
if (empty($force_charset_do_notuse)) $force_charset_do_notuse='UTF-8'; if (empty($force_charset_do_notuse)) $force_charset_do_notuse='UTF-8';
$conf->file->character_set_client=strtoupper($force_charset_do_notuse); $conf->file->character_set_client=strtoupper($force_charset_do_notuse);
// Define the encrypt key for cookie // Define the encrypt key for cookie
if (empty($dolibarr_main_cookie_cryptkey)) $dolibarr_main_cookie_cryptkey='123'; //if (empty($dolibarr_main_cookie_cryptkey)) $dolibarr_main_cookie_cryptkey='123';
$conf->file->main_cookie_cryptkey=$dolibarr_main_cookie_cryptkey; //$conf->file->main_cookie_cryptkey=$dolibarr_main_cookie_cryptkey;
// Define array of document root directories // Define array of document root directories
$conf->file->dol_document_root=array(DOL_DOCUMENT_ROOT); $conf->file->dol_document_root=array(DOL_DOCUMENT_ROOT);
@ -219,10 +219,9 @@ if (! defined('NOREQUIREDB'))
// TODO See to remove this later as it is a security hole // TODO See to remove this later as it is a security hole
include_once(DOL_DOCUMENT_ROOT."/core/cookie.class.php"); include_once(DOL_DOCUMENT_ROOT."/core/cookie.class.php");
$entityCookie = new DolCookie($conf->file->main_cookie_cryptkey); // Utilisation de $_SESSION['cryptkey'] comme cle de cryptage
$entityCookie = new DolCookie($_SESSION['cryptkey']);
$conf->entity = $entityCookie->_getCookie($entityCookieName); $conf->entity = $entityCookie->_getCookie($entityCookieName);
//$conf->entity = $_COOKIE[$entityCookieName];
} }
elseif (session_id() && isset($_SESSION["dol_entity"])) // Inside an opened session elseif (session_id() && isset($_SESSION["dol_entity"])) // Inside an opened session
{ {