[Koha] Strange behavior after logging into the OPAC

[Tim McMahon]

Koha 3.22.03 package install on Debian 8.

The OPAC doesn't display the username when you are logged in.  on the 
right side at the top it displays "Welcome,    Search history [x]    Log 
out".

Then it displays "Hello,

Click here if you're not" followed by the list of items I have checked 
out.  It repeats everything in that block from Hello down for a total of 
75 times.

Here's what was recorded in the logs:

[Mon Feb 29 11:03:21.755007 2016] [cgi:error] [pid 14261] [client 
192.168.1.198:50204] AH01215: [Mon Feb 29 11:03:21 2016] opac-user.pl: 
CGI::param called in list context from package C4::Auth line 400, this 
can lead to vulnerabilities. See the warning in "Fetching the value or 
values of a single named parameter" at /usr/share/perl5/CGI.pm line 
436., referer: http://opac.example.org/cgi-bin/koha/opac-main.pl?logout.x=1
[Mon Feb 29 11:03:21.793550 2016] [cgi:error] [pid 14261] [client 
192.168.1.198:50204] AH01215: [Mon Feb 29 11:03:21 2016] opac-user.pl: 
Use of uninitialized value in concatenation (.) or string at 
/usr/share/koha/lib/C4/Auth.pm line 506., referer: 
http://opac.example.org/cgi-bin/koha/opac-main.pl?logout.x=1
[Mon Feb 29 11:03:21.849343 2016] [cgi:error] [pid 14261] [client 
192.168.1.198:50204] AH01215: [Mon Feb 29 11:03:21 2016] opac-user.pl: 
CGI::param called in list context from package main line 387, this can 
lead to vulnerabilities. See the warning in "Fetching the value or 
values of a single named parameter" at /usr/share/perl5/CGI.pm line 
436., referer: http://opac.example.org/cgi-bin/koha/opac-main.pl?logout.x=1

When I try to place a hold from the OPAC I get:

Confirm holds for: () () () () () () () () () () () () () () () () () () 
() () () () () () () () () () () () () () () () () () () () () () () () 
() () () () () () () () () () () () () () () () () () () () () () () () 
() () ()

Along with other things that should be there.  The errors from this are:

[Mon Feb 29 11:43:33.198962 2016] [cgi:error] [pid 14901] [client 
192.168.1.198:50439] AH01215: [Mon Feb 29 11:43:33 2016] 
opac-reserve.pl: CGI::param called in list context from package C4::Auth 
line 400, this can lead to vulnerabilities. See the warning in "Fetching 
the value or values of a single named parameter" at 
/usr/share/perl5/CGI.pm line 436., referer: 
http://opac.example.org/cgi-bin/koha/opac-search.pl?q=Apocalypse+Cow
[Mon Feb 29 11:43:33.216618 2016] [cgi:error] [pid 14901] [client 
192.168.1.198:50439] AH01215: [Mon Feb 29 11:43:33 2016] 
opac-reserve.pl: Use of uninitialized value in concatenation (.) or 
string at /usr/share/koha/lib/C4/Auth.pm line 506., referer: 
http://opac.example.org/cgi-bin/koha/opac-search.pl?q=Apocalypse+Cow

-- 
Tim McMahon
Technical Services
West Liberty Public Library