lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Todo: utiliser $user->datelastlogin pour un cryptage alatoire

Browse Source
This commit is contained in:
Regis Houssin 2009-05-08 21:17:02 +00:00
parent 149e232bd3
commit f43d69faef
2 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
htdocs/main.inc.php
View File

@ -442,10 +442,11 @@ if (! isset($_SESSION["dol_login"]))
$entity = $_POST["entity"];
$entityCookieName = "DOLENTITYID_dolibarr";
if (!isset($HTTP_COOKIE_VARS[$entityCookieName]))
{
$entityCookie = new DolCookie($dolibarr_main_cookie_cryptkey);
// Todo: utiliser $user->datelastlogin pour un cryptage aléatoire
$entityCookie = new DolCookie($conf->file->main_cookie_cryptkey);
$entityCookie->_setCookie($entityCookieName, $entity);
//setcookie($entityCookieName, $entity, 0, "/", "", 0);

8
htdocs/master.inc.php
View File

@ -136,6 +136,9 @@ $conf->file->main_force_https = empty($dolibarr_main_force_https)?'':$dolibarr_m
// Define charset for HTML Output (can set hidden value force_charset in conf.php file)
if (empty($force_charset_do_notuse)) $force_charset_do_notuse='UTF-8';
$conf->file->character_set_client=strtoupper($force_charset_do_notuse);
// Define the encrypt key for cookie
if (empty($dolibarr_main_cookie_cryptkey)) $dolibarr_main_cookie_cryptkey='123';
$conf->file->main_cookie_cryptkey=$dolibarr_main_cookie_cryptkey;
// Define array of document root directories
$conf->file->dol_document_root=array(DOL_DOCUMENT_ROOT);
@ -215,9 +218,10 @@ if (! defined('NOREQUIREDB'))
{
// TODO See to remove this later as it is a security hole
include_once(DOL_DOCUMENT_ROOT."/core/cookie.class.php");
$entityCookie = new DolCookie($dolibarr_main_cookie_cryptkey);
$entityCookie = new DolCookie($conf->file->main_cookie_cryptkey);
$conf->entity = $entityCookie->_getCookie($entityCookieName);
//$conf->entity = $_COOKIE[$entityCookieName];
}
elseif (session_id() && isset($_SESSION["dol_entity"])) // Inside an opened session