[Koha] Koha security issue.

Mason JAMES mason at kohaaloha.com
Fri Nov 5 12:30:31 NZDT 2010


On 2010-11-5, at 7:18 AM, Scott Kushner wrote:

> We are using mozilla firefox 3.5.4 for  Koha access for our patrons. After one patron is done and walks away, the next patron can use the “back” button to access the previous patron’s records—if 6 patrons have used this workstation, all of their transactions can be seen by the last patron. Has the new release of Koha addressed this security issue. Does anyone have a “one-patron session” fix for this?


i've done a JS fix for this issue for kapiti-library , and promised Liz.R i'd send in my patch about 2 months ago... :/

i'll try to sort my patch out over the weekend, and update the mailing-list


cheers, Mason
-- 
www.kohaaloha.com



More information about the Koha mailing list