[Koha-bugs] [Bug 15747] Auth.pm flooding error log with "CGI::param called in list context"

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Thu Feb 11 15:56:12 CET 2016


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15747

--- Comment #1 from M. Tompsett <mtompset at hotmail.com> ---
Created attachment 47901
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=47901&action=edit
Bug 15747 Auth.pm flooding error log with "CGI::param called in list context"

TEST PLAN
---------
1) git checkout -b bug_15747 origin/master
2) echo > ~/koha-dev/var/log/koha-error_log
3) open up staff interface and log in.
4) cat ~/koha-dev/var/log/koha-error_log
--- BEGIN SNIP ---
[Thu Feb 11 09:49:43.627711 2016] [cgi:error] [pid 2132] [client
192.168.71.222:                                                                
            51107] AH01215: [Thu Feb 11 09:49:43 2016] mainpage.pl: CGI::param
called in lis                                                                  
          t context from package C4::Auth line 401, this can lead to
vulnerabilities. See                                                           
                  the warning in "Fetching the value or values of a single
named parameter" at /us                                                        
                    r/share/perl5/CGI.pm line 436., referer:
http://library-admin.debiankoha.ca/
--- END SNIP ---
5) logout
6) echo > ~/koha-dev/var/log/koha-error_log
7) log back in.
8) cat ~/koha-dev/var/log/koha-error_log
   -- this time should not be there.
9) koha qa test tools

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list