Lines 48-54
use Koha::AuthorisedValues;
Link Here
|
48 |
|
48 |
|
49 |
use Koha::Patron::Allowlist; |
49 |
use Koha::Patron::Allowlist; |
50 |
|
50 |
|
51 |
my $ui_allowlist = Koha::Patron::Allowlist->new(); |
51 |
my $allowlist = Koha::Patron::Allowlist->new; |
|
|
52 |
$allowlist->load; |
52 |
|
53 |
|
53 |
my $cgi = CGI->new; |
54 |
my $cgi = CGI->new; |
54 |
my $dbh = C4::Context->dbh; |
55 |
my $dbh = C4::Context->dbh; |
Lines 136-142
if ( $action eq 'create' ) {
Link Here
|
136 |
delete $borrower{'password2'}; |
137 |
delete $borrower{'password2'}; |
137 |
|
138 |
|
138 |
my @unwanted_fields = split( /\|/, C4::Context->preference('PatronSelfRegistrationBorrowerUnwantedField') || q|| ); |
139 |
my @unwanted_fields = split( /\|/, C4::Context->preference('PatronSelfRegistrationBorrowerUnwantedField') || q|| ); |
139 |
$ui_allowlist->apply({ input => \%borrower, additional_deny_list => \@unwanted_fields }); |
140 |
$allowlist->remove( @unwanted_fields ); |
|
|
141 |
my $blocked = $allowlist->apply({ input => \%borrower, verbose => 1 }); # TODO Log blocked data ? |
140 |
|
142 |
|
141 |
my $cardnumber_error_code; |
143 |
my $cardnumber_error_code; |
142 |
if ( !grep { $_ eq 'cardnumber' } @empty_mandatory_fields ) { |
144 |
if ( !grep { $_ eq 'cardnumber' } @empty_mandatory_fields ) { |
Lines 272-283
elsif ( $action eq 'update' ) {
Link Here
|
272 |
( CheckMandatoryFields( \%borrower, $action ), CheckMandatoryAttributes( \%borrower, $attributes ) ); |
274 |
( CheckMandatoryFields( \%borrower, $action ), CheckMandatoryAttributes( \%borrower, $attributes ) ); |
273 |
my $invalidformfields = CheckForInvalidFields(\%borrower); |
275 |
my $invalidformfields = CheckForInvalidFields(\%borrower); |
274 |
|
276 |
|
|
|
277 |
my @unwanted_fields = split( /\|/, C4::Context->preference('PatronSelfModificationBorrowerUnwantedField') || q|| ); |
278 |
$allowlist->remove( @unwanted_fields ); |
279 |
$allowlist->add( 'borrowernumber' ); # added because inserted after ParseCgi call |
280 |
my $blocked = $allowlist->apply({ input => \%borrower, verbose => 1 }); # TODO Log blocked data ? |
281 |
|
275 |
# Send back the data to the template |
282 |
# Send back the data to the template |
276 |
%borrower = ( %$borrower, %borrower ); |
283 |
%borrower = ( %$borrower, %borrower ); |
277 |
|
284 |
|
278 |
my @unwanted_fields = split( /\|/, C4::Context->preference('PatronSelfModificationBorrowerUnwantedField') || q|| ); |
|
|
279 |
$ui_allowlist->apply({ input => \%borrower, additional_deny_list => \@unwanted_fields }); |
280 |
|
281 |
if (@empty_mandatory_fields || @$invalidformfields) { |
285 |
if (@empty_mandatory_fields || @$invalidformfields) { |
282 |
$template->param( |
286 |
$template->param( |
283 |
empty_mandatory_fields => \@empty_mandatory_fields, |
287 |
empty_mandatory_fields => \@empty_mandatory_fields, |
284 |
- |
|
|