@@ -, +, @@
---
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt | 1 +
opac/opac-renew.pl | 3 +++
opac/opac-user.pl | 4 +++-
3 files changed, 7 insertions(+), 1 deletion(-)
--- a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt
+++ a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt
@@ -564,6 +564,7 @@
[% INCLUDE 'csrf-token.inc' %]
+
[% FOREACH ISSUE IN ISSUES %]
[% IF ISSUE.status %]
--- a/opac/opac-renew.pl
+++ a/opac/opac-renew.pl
@@ -31,6 +31,9 @@ use C4::Members;
use Koha::Items;
use Koha::Patrons;
my $query = CGI->new;
+my $op = $query->param('op') || q{};
+
+die "op must be set" unless $op eq 'renew';
my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
{
--- a/opac/opac-user.pl
+++ a/opac/opac-user.pl
@@ -57,6 +57,8 @@ use Date::Calc qw( Date_to_Days Today );
my $query = CGI->new;
+my $op = $query->param('op') || q{};
+
# CAS single logout handling
# Will print header and exit
if ( C4::Context->preference('casAuthentication') ) {
@@ -87,7 +89,7 @@ $template->param( shibbolethAuthentication => C4::Context->config('useshibboleth
# get borrower information ....
my $patron = Koha::Patrons->find( $borrowernumber );
-if( $query->param('update_arc') && C4::Context->preference("AllowPatronToControlAutorenewal") ){
+if( $op eq 'update_arc' && C4::Context->preference("AllowPatronToControlAutorenewal") ){
die "Wrong CSRF token"
unless Koha::Token->new->check_csrf({
session_id => scalar $query->cookie('CGISESSID'),
--