fernando/luos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

PMCORE-651 Web entry data is insecure because the Guest user's session overwrites the one of the user currently logged

Browse Source
This commit is contained in:
Roly Rudy Gutierrez Pinto
2021-03-02 13:17:37 -04:00
parent d1f61a99fe
commit 838c2b3a32
6 changed files with 86 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
workflow/engine/xmlform/login/checkContinueOrCloseSession.html Normal file
View File

@@ -0,0 +1,31 @@
<script type="text/javascript">
</script>
<div class="panel-default">
<p>{php}echo G::LoadTranslation('ID_HAVE_AN_ACTIVE_SESSION_PLEASE_SELECT_ONE_OPTION',[$_SESSION['USR_USERNAME']]);{/php}</p>
</div>
<form id="{$form_id}"
method="post"
enctype="multipart/form-data"
action="{$form_action}"
class="form-signin"
style="margin:0px;"
accept-charset="UTF-8"
role="form">
<input style=""
class="module_app_button___gray"
id="form[buttonContinue]"
name="form[buttonContinue]"
type="submit"
value="{php}echo G::LoadTranslation('ID_CONTINUE_WITH_THE_SESSION');{/php}" />
{php}echo G::LoadTranslation('ID_OR');{/php}
<input style=""
class="module_app_button___gray"
id="form[buttonLogout]"
name="form[buttonLogout]"
type="submit"
value="{php}echo G::LoadTranslation('ID_LOGOUT_FROM_THE_ACTIVE_SESSION');{/php}" />
</form>
<script src="/lib/pmdynaform/libs/respondjs/respond.min.js">
</script>
<script src="/lib/pmdynaform/libs/html5shiv/html5shiv.js">
</script>

5
workflow/engine/xmlform/login/checkContinueOrCloseSession.xml Normal file
View File

@@ -0,0 +1,5 @@
<?xml version="1.0" encoding="UTF-8"?>
<dynaForm type="xmlform"
name="login/checkContinueOrCloseSession"
enabletemplate="1">
</dynaForm>