@@ -, +, @@ --- C4/Auth.pm | 6 ++++-- admin/branches.pl | 4 ++-- debian/templates/plack.psgi | 18 ++++++++---------- .../prog/en/includes/csrf-token.inc | 4 ++-- .../prog/en/modules/admin/branches.tt | 6 +++--- 5 files changed, 19 insertions(+), 19 deletions(-) --- a/C4/Auth.pm +++ a/C4/Auth.pm @@ -636,7 +636,8 @@ sub get_template_and_user { $cookie = $cookie_mgr->replace_in_list( $cookie, $languagecookie ); } - if ( $in->{query}->param('op-cud') ) { + my $op = $in->{query}->param('op'); + if ( defined $op && $op =~ m{^cud-} ) { C4::Output::output_and_exit( $in->{query}, $cookie, $template, 'wrong_csrf_token' ) unless Koha::Token->new->check_csrf( { @@ -1338,7 +1339,8 @@ sub checkauth { track_login_daily( $userid ); - if ( $query->param('op-cud') ) { + my $op = $query->param('op'); + if ( defined $op && $op =~ m{^cud-} ) { die "Cannot use GET for this request" if $request_method eq 'GET'; --- a/admin/branches.pl +++ a/admin/branches.pl @@ -58,7 +58,7 @@ if ( $op eq 'add_form' ) { $template->param( library => $library, ); -} elsif ( $op eq 'add_validate' ) { +} elsif ( $op eq 'cud-add_validate' ) { my @fields = qw( branchname branchaddress1 @@ -189,7 +189,7 @@ if ( $op eq 'add_form' ) { patrons_count => $patrons_count, ); } -} elsif ( $op eq 'delete_confirmed' ) { +} elsif ( $op eq 'cud-delete_confirmed' ) { my $library = Koha::Libraries->find($branchcode); my $deleted = eval { $library->delete; }; --- a/debian/templates/plack.psgi +++ a/debian/templates/plack.psgi @@ -48,16 +48,14 @@ use CGI qw(-utf8 ); # we will loose -utf8 under plack, otherwise Koha::Caches->flush_L1_caches(); Koha::Cache::Memory::Lite->flush(); - $original_op_cud = $q->param('op-cud'); - $request_method = $q->request_method // q{}; - if ( $request_method eq 'GET' && defined $original_op_cud ) { - warn "Programming error - op-cud must not be passed with GET"; - $q->param( 'op-cud', undef ); - } elsif ( $request_method ne 'GET' && defined $q->param('op') ) { - warn "Programming error - op can only be passed with GET"; - $q->param( 'op', undef ); - } else { - $q->param( 'op', $original_op_cud ); + my $original_op = $q->param('op'); + my $request_method = $q->request_method // q{}; + if ( $request_method eq 'GET' && defined $original_op && $original_op =~ m{^cud-} ) { + warn "Programming error - op '$original_op' must not start with 'cud-' with GET"; + $q->param( 'op', '' ); + } elsif ( $request_method ne 'GET' && defined $q->param('op') && $original_op !~ m{^cud-} ) { + warn "Programming error - op '$original_op' must start with 'cud-' for $request_method"; + $q->param( 'op', '' ); } return $q; --- a/koha-tmpl/intranet-tmpl/prog/en/includes/csrf-token.inc +++ a/koha-tmpl/intranet-tmpl/prog/en/includes/csrf-token.inc @@ -1,3 +1,3 @@ -[%- USE Koha %] -[%- USE raw %] +[%- USE Koha -%] +[%- USE raw -%] --- a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/branches.tt +++ a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/branches.tt @@ -127,7 +127,7 @@
[% INCLUDE 'csrf-token.inc' %]
- + [% IF library %] [% END %] @@ -302,7 +302,7 @@ [% INCLUDE 'csrf-token.inc' %]

Are you sure you want to delete [% library.branchname | html %] ([% library.branchcode | html %])?

- + @@ -605,7 +605,7 @@ "data": function( row, type, val, meta ) { var result = ' '+_("Edit")+''; - result += ''; + result += ''; result += ''+"\n"; result += ''; result += ''; --