fernando/luos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

PMCORE-3468

Browse Source
This commit is contained in:
Julio Cesar Laura Avendaño
2021-11-24 21:00:16 +00:00
parent d64eb18039
commit 3e93235824
6 changed files with 12 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
workflow/engine/methods/login/authentication.php
View File

@@ -16,7 +16,7 @@ try {
} }
if (!$RBAC->singleSignOn) { if (!$RBAC->singleSignOn) {
setcookie("singleSignOn", '0', time() + (24 * 60 * 60), '/'); setcookie("singleSignOn", '0', time() + (24 * 60 * 60), '/', '', G::is_https());
if (!isset($_POST['form']) ) { if (!isset($_POST['form']) ) {
G::SendTemporalMessage ('ID_USER_HAVENT_RIGHTS_SYSTEM', 'error'); G::SendTemporalMessage ('ID_USER_HAVENT_RIGHTS_SYSTEM', 'error');
G::header('Location: login'); G::header('Location: login');
@@ -181,7 +181,7 @@ try {
EnterpriseClass::enterpriseSystemUpdate($loginInfo); EnterpriseClass::enterpriseSystemUpdate($loginInfo);
initUserSession($uid, $usr); initUserSession($uid, $usr);
} else { } else {
setcookie("singleSignOn", '1', time() + (24 * 60 * 60), '/'); setcookie("singleSignOn", '1', time() + (24 * 60 * 60), '/', '', G::is_https());
$uid = $RBAC->userObj->fields['USR_UID']; $uid = $RBAC->userObj->fields['USR_UID'];
$usr = $RBAC->userObj->fields['USR_USERNAME']; $usr = $RBAC->userObj->fields['USR_USERNAME'];
initUserSession($uid, $usr); initUserSession($uid, $usr);
@@ -416,7 +416,7 @@ try {
$configS = System::getSystemConfiguration('', '', config("system.workspace")); $configS = System::getSystemConfiguration('', '', config("system.workspace"));
$activeSession = isset($configS['session_block']) ? !(int)$configS['session_block']:true; $activeSession = isset($configS['session_block']) ? !(int)$configS['session_block']:true;
if ($activeSession){ if ($activeSession){
setcookie("PM-TabPrimary", 101010010, time() + (24 * 60 * 60), '/'); setcookie("PM-TabPrimary", 101010010, time() + (24 * 60 * 60), '/', '', G::is_https());
} }
// Update the User's last login date // Update the User's last login date

2
workflow/engine/methods/login/authenticationSso.php
View File

@@ -82,7 +82,7 @@ try {
} }
/*----------------------------------********---------------------------------*/ /*----------------------------------********---------------------------------*/
setcookie('singleSignOn', '1', time() + (24 * 60 * 60), '/'); setcookie('singleSignOn', '1', time() + (24 * 60 * 60), '/', '', G::is_https());
initUserSession( initUserSession(
$_SESSION['__USER_LOGGED_SSO__'], $_SESSION['__USER_LOGGED_SSO__'],

12
workflow/engine/methods/login/login.php
View File

@@ -182,11 +182,7 @@ if (isset($_SESSION['USER_LOGGED'])) {
session_start(); session_start();
session_regenerate_id(); session_regenerate_id();
if (PHP_VERSION < 5.2) { setcookie("workspaceSkin", SYS_SKIN, time() + (24 * 60 * 60), "/sys" . config("system.workspace"), null, G::is_https(), true);
setcookie("workspaceSkin", SYS_SKIN, time() + (24 * 60 * 60), "/sys" . config("system.workspace"), "; HttpOnly");
} else {
setcookie("workspaceSkin", SYS_SKIN, time() + (24 * 60 * 60), "/sys" . config("system.workspace"), null, false, true);
}
if (strlen($msg) > 0) { if (strlen($msg) > 0) {
$_SESSION['G_MESSAGE'] = $msg; $_SESSION['G_MESSAGE'] = $msg;
@@ -323,14 +319,14 @@ $flagForgotPassword = isset($oConf->aConfig['login_enableForgotPassword'])
? $oConf->aConfig['login_enableForgotPassword'] ? $oConf->aConfig['login_enableForgotPassword']
: 'off'; : 'off';
setcookie('PM-Warning', trim(G::LoadTranslation('ID_BLOCKER_MSG'), '*'), time() + (24 * 60 * 60), SYS_URI); setcookie('PM-Warning', trim(G::LoadTranslation('ID_BLOCKER_MSG'), '*'), time() + (24 * 60 * 60), SYS_URI, '', G::is_https());
$configS = System::getSystemConfiguration('', '', config("system.workspace")); $configS = System::getSystemConfiguration('', '', config("system.workspace"));
$activeSession = isset($configS['session_block']) ? !(int)$configS['session_block'] : true; $activeSession = isset($configS['session_block']) ? !(int)$configS['session_block'] : true;
if ($activeSession) { if ($activeSession) {
setcookie("PM-TabPrimary", 101010010, time() + (24 * 60 * 60), '/'); setcookie("PM-TabPrimary", 101010010, time() + (24 * 60 * 60), '/', '', G::is_https());
} else { } else {
setcookie("PM-TabPrimary", uniqid(), time() + (24 * 60 * 60), '/'); setcookie("PM-TabPrimary", uniqid(), time() + (24 * 60 * 60), '/', '', G::is_https());
} }
$oHeadPublisher->addScriptCode("var flagForgotPassword = '$flagForgotPassword';"); $oHeadPublisher->addScriptCode("var flagForgotPassword = '$flagForgotPassword';");

4
workflow/engine/methods/login/sysLogin.php
View File

@@ -169,8 +169,8 @@ switch (WS_IN_LOGIN) {
$fileLogin = 'login/sysLogin'; $fileLogin = 'login/sysLogin';
break; break;
} }
setcookie("PM-Warning", trim(G::LoadTranslation('ID_BLOCKER_MSG'), '*'), time() + (24 * 60 * 60), SYS_CURRENT_URI); setcookie("PM-Warning", trim(G::LoadTranslation('ID_BLOCKER_MSG'), '*'), time() + (24 * 60 * 60), SYS_CURRENT_URI, '', G::is_https());
setcookie("PM-TabPrimary", uniqid(), time() + (24 * 60 * 60), '/'); setcookie("PM-TabPrimary", uniqid(), time() + (24 * 60 * 60), '/', '', G::is_https());
$oHeadPublisher = headPublisher::getSingleton(); $oHeadPublisher = headPublisher::getSingleton();
$oHeadPublisher->addScriptFile('/jscore/src/PM.js'); $oHeadPublisher->addScriptFile('/jscore/src/PM.js');
$oHeadPublisher->addScriptFile('/jscore/src/Sessions.js'); $oHeadPublisher->addScriptFile('/jscore/src/Sessions.js');

2
workflow/engine/src/ProcessMaker/BusinessModel/Light.php
View File

@@ -874,7 +874,7 @@ class Light
session_start(); session_start();
session_regenerate_id(); session_regenerate_id();
setcookie("workspaceSkin", SYS_SKIN, time() + (24 * 60 * 60), "/sys" . config("system.workspace"), null, false, setcookie("workspaceSkin", SYS_SKIN, time() + (24 * 60 * 60), "/sys" . config("system.workspace"), null, G::is_https(),
true); true);
if (strlen($msg) > 0) { if (strlen($msg) > 0) {

6
workflow/public_html/pmGmail/sso.php
View File

@@ -98,11 +98,7 @@ if (!isset($_SESSION['USER_LOGGED']) || $_SESSION['USER_LOGGED'] != $decodedResp
session_start(); session_start();
session_regenerate_id(); session_regenerate_id();
if (PHP_VERSION < 5.2) { setcookie("workspaceSkin", $enviroment, time() + (24 * 60 * 60), "/sys" . $enviroment, null, G::is_https(), true);
setcookie("workspaceSkin", $enviroment, time() + (24 * 60 * 60), "/sys" . $enviroment, "; HttpOnly");
} else {
setcookie("workspaceSkin", $enviroment, time() + (24 * 60 * 60), "/sys" . $enviroment, null, false, true);
}
$_SESSION = array(); $_SESSION = array();
$_SESSION['__EE_INSTALLATION__'] = 2; $_SESSION['__EE_INSTALLATION__'] = 2;