Add: /core/cookie.class.php for create and encrypt/decrypt cookie value with personnal key
configured in conf.php with $dolibarr_main_cookie_cryptkey
This commit is contained in:
parent
b38fb205f6
commit
865f6198e8
@ -438,11 +438,17 @@ if (! isset($_SESSION["dol_login"]))
|
|||||||
// TODO Remove this as it is a security hole
|
// TODO Remove this as it is a security hole
|
||||||
if ($conf->multicompany->enabled && isset($_POST["entity"]))
|
if ($conf->multicompany->enabled && isset($_POST["entity"]))
|
||||||
{
|
{
|
||||||
|
include_once(DOL_DOCUMENT_ROOT . "/core/cookie.class.php");
|
||||||
|
|
||||||
$entity = $_POST["entity"];
|
$entity = $_POST["entity"];
|
||||||
$entityCookieName = "DOLENTITYID_dolibarr";
|
$entityCookieName = "DOLENTITYID_dolibarr";
|
||||||
|
|
||||||
if (!isset($HTTP_COOKIE_VARS[$entityCookieName]))
|
if (!isset($HTTP_COOKIE_VARS[$entityCookieName]))
|
||||||
{
|
{
|
||||||
setcookie($entityCookieName, $entity, 0, "/", "", 0);
|
$entityCookie = new DolCookie($dolibarr_main_cookie_cryptkey);
|
||||||
|
$entityCookie->_setCookie($entityCookieName, $_POST["entity"]);
|
||||||
|
|
||||||
|
//setcookie($entityCookieName, $entity, 0, "/", "", 0);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user