http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9569

--- Comment #2 from Fred P <[email protected]> ---
My mistake again. This problem is still active.

This line from Auth.pm yields the result that you must set AutoLocation to
"Require" AND IndependantBranches to "Prevent" to secure your Koha.

Auth.pm around line 834:
-----------------------------------------------
 if (C4:Context->boolean_preference('IndependantBranches') &&
C4::Context->boolean_preference('AutoLocation')){

 # we have to check they are coming from the right ip range
-----------------------------------------------

 The other three combinations of these two settings result in a system that
anyone can remotely access and hack, because we don't limit password attempts.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to