Lines 52-70
my $email_add = $query->param('email_add');
Link Here
|
52 |
|
52 |
|
53 |
my $dbh = C4::Context->dbh; |
53 |
my $dbh = C4::Context->dbh; |
54 |
|
54 |
|
55 |
my $csrf_err; |
|
|
56 |
if ( $email_add ) { |
55 |
if ( $email_add ) { |
57 |
$csrf_err = 1 unless Koha::Token->new->check_csrf({ |
56 |
die "Wrong CSRF token" unless Koha::Token->new->check_csrf({ |
58 |
id => C4::Context->userenv->{id}, |
57 |
id => C4::Context->userenv->{id}, |
59 |
secret => md5_base64( C4::Context->config('pass') ), |
58 |
secret => md5_base64( C4::Context->config('pass') ), |
60 |
token => scalar $query->param('csrf_token'), |
59 |
token => scalar $query->param('csrf_token'), |
61 |
}); |
60 |
}); |
62 |
} |
|
|
63 |
|
64 |
if( $csrf_err ) { |
65 |
$template->param( csrf_error => 1, email_add => 1 ); |
66 |
output_html_with_http_headers $query, $cookie, $template->output; |
67 |
} elsif ( $email_add ) { |
68 |
my $email = Koha::Email->new(); |
61 |
my $email = Koha::Email->new(); |
69 |
my $user = GetMember(borrowernumber => $borrowernumber); |
62 |
my $user = GetMember(borrowernumber => $borrowernumber); |
70 |
my $user_email = GetFirstValidEmailAddress($borrowernumber) |
63 |
my $user_email = GetFirstValidEmailAddress($borrowernumber) |
71 |
- |
|
|