[Koha-bugs] [Bug 9569] RESOLVED: IndependantBranches preference appears to override AutoLocation security feature

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9569

--- Comment #2 from Fred P <fred.pierre at smfpl.org> ---
My mistake again. This problem is still active.

This line from Auth.pm yields the result that you must set AutoLocation to
"Require" AND IndependantBranches to "Prevent" to secure your Koha.

Auth.pm around line 834:
-----------------------------------------------
 if (C4:Context->boolean_preference('IndependantBranches') &&
C4::Context->boolean_preference('AutoLocation')){

 # we have to check they are coming from the right ip range
-----------------------------------------------

 The other three combinations of these two settings result in a system that
anyone can remotely access and hack, because we don't limit password attempts.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.