Projekt

Allgemein

Profil

« Zurück | Weiter » 

Revision 5b22b6b5

Von Moritz Bunkus vor fast 17 Jahren hinzugefügt

  • ID 5b22b6b5b7dbb290048cd15b3ede7d18cba4d09c
  • Vorgänger 7a7f33b5
  • Nachfolger df0cd5df

Die Variablen login und password müssen/dürfen seit der Umstellung auf Session basierte Authentifizierung nicht mehr übergeben werden.

Unterschiede anzeigen:

bin/mozilla/common.pl
415 415

  
416 416
  my $callback = "$form->{script}?action=cov_selection_internal&";
417 417
  map({ $callback .= "$_=" . $form->escape($form->{$_}) . "&" }
418
      (qw(login path password name input_name input_id is_vendor allow_both), grep({ /^[fl]_/ } keys %$form)));
418
      (qw(name input_name input_id is_vendor allow_both), grep({ /^[fl]_/ } keys %$form)));
419 419

  
420 420
  my @header_sort = qw(name address contact);
421 421
  my %header_title = ( "name" => $locale->text("Name"),
bin/mozilla/drafts.pl
20 20
    restore_form($form->{SAVED_FORM}, 1) if ($form->{SAVED_FORM});
21 21
    delete $form->{SAVED_FORM};
22 22

  
23
    $form->{SAVED_FORM}   = save_form(qw(login password stylesheet));
23
    $form->{SAVED_FORM}   = save_form(qw(stylesheet));
24 24
    $form->{remove_draft} = 1;
25 25

  
26 26
    $form->header();
......
67 67
  $draft_nextsub = "add" unless ($draft_nextsub);
68 68

  
69 69
  delete $form->{action};
70
  my $saved_form = save_form(qw(login password stylesheet));
70
  my $saved_form = save_form(qw(stylesheet));
71 71

  
72 72
  $form->header();
73 73
  print($form->parse_html_template("drafts/load",
bin/mozilla/io.pl
607 607
  my $previousform = join '&', map { $form->{$_} =~ s/&/%26/; "$_=$form->{$_}" } grep { !/action/ } keys %$form;
608 608

  
609 609
  push @HIDDENS,      { 'name' => 'previousform', 'value' => $form->escape($previousform, 1) };
610
  push @HIDDENS, map +{ 'name' => $_,             'value' => $form->{$_} },                       qw(rowcount vc login password);
610
  push @HIDDENS, map +{ 'name' => $_,             'value' => $form->{$_} },                       qw(rowcount vc);
611 611
  push @HIDDENS, map +{ 'name' => $_,             'value' => $form->{"${_}_$form->{rowcount}"} }, qw(partnumber description unit sellprice);
612 612
  push @HIDDENS,      { 'name' => 'taxaccount2',  'value' => $form->{taxaccounts} };
613
    next if (($key eq 'login') || ($key eq 'password') || ('' ne ref $form->{$key}));
614 613

  
615 614
  $form->header();
616 615
  print $form->parse_html_template("generic/new_item", { HIDDENS => [ sort { $a->{name} cmp $b->{name} } @HIDDENS ] } );
bin/mozilla/menuXML.pl
53 53
<!ENTITY szlig "?">
54 54
]>|;
55 55
  print qq|<doc>|;
56
  print qq|<login>|;
57
  print $form->{login};
58
  print qq|</login>|;
59
  print qq|<password>|;
60
  print $form->{password};
61
  print qq|</password>|;
62 56
  print qq|<name>|;
63 57
  print %myconfig->{name};
64 58
  print qq|</name>|;
bin/mozilla/pe.pl
49 49

  
50 50
  # construct callback
51 51
  $form->{callback} =
52
    "$form->{script}?action=add&type=$form->{type}&login=$form->{login}&password=$form->{password}"
52
    "$form->{script}?action=add&type=$form->{type}"
53 53
    unless $form->{callback};
54 54

  
55 55
  call_sub("form_$form->{type}_header");
......
180 180

  
181 181
<input type=hidden name=nextsub value=$report>
182 182

  
183
<input type=hidden name=login value=$form->{login}>
184
<input type=hidden name=password value=$form->{password}>
185

  
186 183
<br>
187 184
<input class=submit type=submit name=action value="|
188 185
    . $locale->text('Continue') . qq|">
......
205 202
  PE->projects(\%myconfig, \%$form);
206 203

  
207 204
  $callback =
208
    "$form->{script}?action=project_report&type=$form->{type}&login=$form->{login}&password=$form->{password}&status=$form->{status}&active=" .
205
    "$form->{script}?action=project_report&type=$form->{type}&status=$form->{status}&active=" .
209 206
    E($form->{active});
210 207
  $href = $callback;
211 208

  
......
286 283
|;
287 284

  
288 285
    $column_data{projectnumber} =
289
      qq|<td><a href=$form->{script}?action=edit&type=$form->{type}&status=$form->{status}&id=$ref->{id}&login=$form->{login}&password=$form->{password}&callback=$callback>$ref->{projectnumber}</td>|;
286
      qq|<td><a href=$form->{script}?action=edit&type=$form->{type}&status=$form->{status}&id=$ref->{id}&callback=$callback>$ref->{projectnumber}</td>|;
290 287
    $column_data{description} = qq|<td>$ref->{description}&nbsp;</td>|;
291 288
    $column_data{active} =
292 289
      qq|<td>| .
......
316 313

  
317 314
<input type=hidden name=type value=$form->{type}>
318 315

  
319
<input type=hidden name=login value=$form->{login}>
320
<input type=hidden name=password value=$form->{password}>
321

  
322 316
<input class=submit type=submit name=action value="|
323 317
    . $locale->text('Add') . qq|">
324 318

  
......
424 418

  
425 419
<input name=callback type=hidden value="$form->{callback}">
426 420

  
427
<input type=hidden name=login value=$form->{login}>
428
<input type=hidden name=password value=$form->{password}>
429

  
430 421
<br><input type=submit class=submit name=action value="|
431 422
    . $locale->text('Save') . qq|">
432 423
|;
......
528 519
  PE->partsgroups(\%myconfig, \%$form);
529 520

  
530 521
  $callback =
531
    "$form->{script}?action=partsgroup_report&type=$form->{type}&login=$form->{login}&password=$form->{password}&status=$form->{status}";
522
    "$form->{script}?action=partsgroup_report&type=$form->{type}&status=$form->{status}";
532 523

  
533 524
  if ($form->{status} eq 'all') {
534 525
    $option = $locale->text('All');
......
589 580
|;
590 581

  
591 582
    $column_data{partsgroup} =
592
      qq|<td><a href=$form->{script}?action=edit&type=$form->{type}&status=$form->{status}&id=$ref->{id}&login=$form->{login}&password=$form->{password}&callback=$callback>$ref->{partsgroup}</td>|;
583
      qq|<td><a href=$form->{script}?action=edit&type=$form->{type}&status=$form->{status}&id=$ref->{id}&callback=$callback>$ref->{partsgroup}</td>|;
593 584
    map { print "$column_data{$_}\n" } @column_index;
594 585

  
595 586
    print "
......
613 604

  
614 605
<input type=hidden name=type value=$form->{type}>
615 606

  
616
<input type=hidden name=login value=$form->{login}>
617
<input type=hidden name=password value=$form->{password}>
618

  
619 607
<input class=submit type=submit name=action value="|
620 608
    . $locale->text('Add') . qq|">
621 609

  
......
684 672

  
685 673
<input name=callback type=hidden value="$form->{callback}">
686 674

  
687
<input type=hidden name=login value=$form->{login}>
688
<input type=hidden name=password value=$form->{password}>
689

  
690 675
<br><input type=submit class=submit name=action value="|
691 676
    . $locale->text('Save') . qq|">
692 677
|;
......
727 712
  PE->pricegroups(\%myconfig, \%$form);
728 713

  
729 714
  $callback =
730
    "$form->{script}?action=pricegroup_report&type=$form->{type}&login=$form->{login}&password=$form->{password}&status=$form->{status}";
715
    "$form->{script}?action=pricegroup_report&type=$form->{type}&status=$form->{status}";
731 716

  
732 717
  if ($form->{status} eq 'all') {
733 718
    $option = $locale->text('All');
......
790 775
        <tr valign=top class=listrow$i>
791 776
|;
792 777
    $column_data{pricegroup} =
793
      qq|<td><a href=$form->{script}?action=edit&type=$form->{type}&status=$form->{status}&id=$ref->{id}&login=$form->{login}&password=$form->{password}&callback=$callback>$ref->{pricegroup}</td>|;
778
      qq|<td><a href=$form->{script}?action=edit&type=$form->{type}&status=$form->{status}&id=$ref->{id}&callback=$callback>$ref->{pricegroup}</td>|;
794 779

  
795 780
    map { print "$column_data{$_}\n" } @column_index;
796 781

  
......
815 800

  
816 801
<input type=hidden name=type value=$form->{type}>
817 802

  
818
<input type=hidden name=login value=$form->{login}>
819
<input type=hidden name=password value=$form->{password}>
820

  
821 803
<input class=submit type=submit name=action value="|
822 804
    . $locale->text('Add') . qq|">
823 805

  
......
890 872

  
891 873
<input name=callback type=hidden value="$form->{callback}">
892 874

  
893
<input type=hidden name=login value=$form->{login}>
894
<input type=hidden name=password value=$form->{password}>
895

  
896 875
<br><input type=submit class=submit name=action value="|
897 876
    . $locale->text('Save') . qq|">
898 877
|;
js/calculate_qty.js
8 8
  }  else var action = "calculate_qty";
9 9
  url = "common.pl?" +
10 10
    "action=" + action + "&" +
11
    "login=" + encodeURIComponent(document.getElementsByName("login")[0].value) + "&" +
12
    "password=" + encodeURIComponent(document.getElementsByName("password")[0].value) + "&" +
13 11
    "name=" + escape(name) + "&" +
14 12
    "input_name=" + escape(input_name) + "&" +
15 13
    "description=" + escape(description) + "&" +
js/common.js
44 44
  var name = document.getElementsByName(input_name)[0].value;
45 45
  url = "common.pl?" +
46 46
    "action=set_longdescription&" +
47
    "login=" +  encodeURIComponent(document.getElementsByName("login")[0].value)+ "&"+
48
    "password=" + encodeURIComponent(document.getElementsByName("password")[0].value) + "&" +
49 47
    "longdescription=" + escape_more(document.getElementsByName(input_name)[0].value) + "&" +
50 48
    "input_name=" + escape_more(input_name) + "&"
51 49
  window.open(url, "_new_generic", parm);
js/customer_or_vendor_selection.js
3 3
  var name = document.getElementsByName(input_name)[0].value;
4 4
  url = "common.pl?" +
5 5
    "action=cov_selection_internal&" +
6
    "login=" + escape(document.forms[0].login.value) + "&" +
7
    "password=" + escape(document.forms[0].password.value) + "&" +
8 6
    "name=" + escape_more(name) + "&" +
9 7
    "input_name=" + escape(input_name) + "&" +
10 8
    "input_id=" + escape(input_id) + "&" +
js/delivery_customer_selection.js
3 3
  var name = document.getElementsByName(input_name)[0].value;
4 4
  url = "common.pl?" +
5 5
    "action=delivery_customer_selection&" +
6
    "login=" + escape(document.getElementsByName("login")[0].value) + "&" +
7
    "password=" + escape(document.getElementsByName("password")[0].value) + "&" +
8 6
    "name=" + escape(name) + "&" +
9 7
    "input_name=" + escape(input_name) + "&" +
10 8
    "input_id=" + escape(input_id)
js/dunning.js
2 2
  var parm = centerParms(800,600) + ",width=800,height=600,status=yes,scrollbars=yes";
3 3
  var url = "dn.pl?" +
4 4
    "action=set_email&" +
5
    "login=" +  encodeURIComponent(document.getElementsByName("login")[0].value)+ "&"+
6
    "password=" + encodeURIComponent(document.getElementsByName("password")[0].value) + "&" +
7 5
    "email_subject=" + escape_more(document.getElementsByName(input_subject)[0].value) + "&" +
8 6
    "email_body=" + escape_more(document.getElementsByName(input_body)[0].value) + "&" +
9 7
    "email_attachment=" + escape_more(document.getElementsByName(input_attachment)[0].value) + "&" +
js/parts_language_selection.js
3 3
  var name = document.getElementsByName(input_name)[0].value;
4 4
  url = "ic.pl?" +
5 5
    "action=parts_language_selection&" +
6
    "login="           + escape_more(document.ic.login.value)           + "&" +
7
    "password="        + escape_more(document.ic.password.value)        + "&" +
8 6
    "id="              + escape_more(document.ic.id.value)              + "&" +
9 7
    "language_values=" + escape_more(document.ic.language_values.value) + "&" +
10 8
    "name="            + escape_more(name)                              + "&" +
js/show_am_history.js
1 1
function set_history_uri() {
2 2
  document.location.href = "am.pl?" +
3 3
    "action=show_am_history&" +
4
    "login=" +  encodeURIComponent(document.getElementsByName("login")[0].value)+ "&"+
5
    "password=" + encodeURIComponent(document.getElementsByName("password")[0].value) + "&" +
6 4
    "longdescription=" + "&" +
7 5
    "einschraenkungen=" + document.getElementById("einschraenkungen").value + "&" +
8 6
    "transdate=" + document.getElementById("transdate_hidden").value + "&" +
js/show_history.js
15 15
  var name = "History";
16 16
  url = "common.pl?" +
17 17
    "action=show_history&" +
18
    "login=" +  encodeURIComponent(document.getElementsByName("login")[0].value)+ "&"+
19
    "password=" + encodeURIComponent(document.getElementsByName("password")[0].value) + "&" +
20 18
    "longdescription=" + "&" +
21 19
    "input_name=" + escape(id) + "&"
22 20
  window.open(url, "_new_generic", parm);
js/show_vc_details.js
7 7
    vc_id = vc_id[0].value;
8 8
  url = "common.pl?" +
9 9
    "action=show_vc_details&" +
10
    "login=" + escape(document.getElementsByName("login")[0].value) + "&" +
11
    "password=" + escape(document.getElementsByName("password")[0].value) + "&" +
12 10
    "vc=" + escape(vc) + "&" +
13 11
    "vc_id=" + escape(vc_id)
14 12
  //alert(url);
js/vendor_selection.js
3 3
  var name = document.getElementsByName(input_name)[0].value;
4 4
  url = "common.pl?" +
5 5
    "action=vendor_selection&" +
6
    "login=" + escape(document.getElementsByName("login")[0].value) + "&" +
7
    "password=" + escape(document.getElementsByName("password")[0].value) + "&" +
8 6
    "name=" + escape(name) + "&" +
9 7
    "input_name=" + escape(input_name) + "&" +
10 8
    "input_id=" + escape(input_id)

Auch abrufbar als: Unified diff