Attachment #124930 for bug #22990

View | Details | Raw Unified | Return to bug 22990
Collapse All | Expand All




            <main>

[% INCLUDE 'members-toolbar.inc' %]
<form action="/cgi-bin/koha/members/boraccount.pl" method="get">[% INCLUDE 'csrf-token.inc' %]<input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" /></form>

<!-- The manual invoice and credit buttons -->
<div class="statictabs">

        [% END %]
        <a href="accountline-details.pl?accountlines_id=[% account.accountlines_id | uri %]" class="btn btn-default btn-xs details-action"><i class="fa fa-list"></i> Details</a>
        [% IF account.is_debit && account.amountoutstanding > 0 %]
            <a class="btn btn-default btn-xs pay-action" href="/cgi-bin/koha/members/paycollect.pl?borrowernumber=[% account.borrowernumber | html %]&pay_individual=1&debit_type_code=[% account.debit_type_code | html %]&amount=[% account.amount | html %]&amountoutstanding=[% account.amountoutstanding | html %]&description=[% account.description | html %]&itemnumber=[% account.itemnumber | html %]&accountlines_id=[% account.accountlines_id | html %]&amp;csrf_token=[% csrf_token | html %]"><i class="fa fa-money"></i> Pay</a>
        [% END %]
        [% IF account.is_credit && account.status != 'VOID' %]
          <a href="boraccount.pl?action=void&amp;accountlines_id=[% account.accountlines_id | uri %]&amp;borrowernumber=[% account.borrowernumber | uri %]&amp;csrf_token=[% csrf_token | uri %]" class="btn btn-default btn-xs void-action"><i class="fa fa-ban"></i> Void payment</a>
        [% END %]
        [% IF account.is_debit && account.amount == account.amountoutstanding && account.status != 'CANCELLED' && !(account.debit_type_code == 'PAYOUT') %]
          <form method="post" action="/cgi-bin/koha/members/cancel-charge.pl">
            [% INCLUDE 'csrf-token.inc' %]
            <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]">
            <input type="hidden" name="accountlines_id" value="[% account.accountlines_id | html %]">
            <button type="submit" class="btn btn-default btn-xs cancel-action">

    <!-- Issue payout modal -->
    <div class="modal" id="issuePayoutModal" tabindex="-1" role="dialog" aria-labelledby="issuePayoutLabel">
        <form  id="payout_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated">
            [% INCLUDE 'csrf-token.inc' %]
            <input type="hidden" name="accountlines_id" value="" id="payoutline">
            <input type="hidden" name="action" value="payout">
            <input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]">

    <!-- Issue refund modal -->
    <div class="modal" id="issueRefundModal" tabindex="-1" role="dialog" aria-labelledby="issueRefundLabel">
        <form  id="refund_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated">
            [% INCLUDE 'csrf-token.inc' %]
            <input type="hidden" name="accountlines_id" value="" id="refundline">
            <input type="hidden" name="action" value="refund">
            <input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]">

    <!-- Apply discount modal -->
    <div class="modal" id="applyDiscountModal" tabindex="-1" role="dialog" aria-labelledby="applyDiscountLabel">
        <form  id="discount_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated">
            [% INCLUDE 'csrf-token.inc' %]
            <input type="hidden" name="accountlines_id" value="" id="discountline">
            <input type="hidden" name="action" value="discount">
            <input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]">

Lines 54-59 Link Here

(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/pay.tt (+1 lines)
54	[% IF ( accounts ) %]	54	[% IF ( accounts ) %]
55	<form action="/cgi-bin/koha/members/pay.pl" method="post" id="pay-fines-form">	55	<form action="/cgi-bin/koha/members/pay.pl" method="post" id="pay-fines-form">
56	<input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber \| html %]" />	56	<input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber \| html %]" />
		57	[% INCLUDE 'csrf-token.inc' %]
57	<p><span class="checkall"><a id="CheckAll" href="#"><i class="fa fa-check"></i> Select all</a></span> \| <span class="clearall"><a id="CheckNone" href="#"><i class="fa fa-remove"></i> Clear all</a></span></p>	58	<p><span class="checkall"><a id="CheckAll" href="#"><i class="fa fa-check"></i> Select all</a></span> \| <span class="clearall"><a id="CheckNone" href="#"><i class="fa fa-remove"></i> Clear all</a></span></p>
58	<table id="finest">	59	<table id="finest">
59	<thead>	60	<thead>




            [% END %]
        </ol>
    </nav> <!-- /.breadcrumbs -->
    [% INCLUDE 'blocking_errors.inc' %]

    [% IF ( op == 'show' ) %]
        <div class="main container-fluid">

            [% END %]

            <form id="add_edit" action="suggestion.pl" method="post" class="validated">
                [% INCLUDE 'csrf-token.inc' %]
                <input type="hidden" name="redirect" id="redirect" value="[% redirect | html %]" />
                <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% borrowernumber | html %]" />
                [% IF ( suggestionid ) %]

            [% FOREACH suggestion IN suggestions %]
                <div id="[% suggestion.suggestiontype | html %]">
                    <form class="update_suggestions" name="f" method="post" action="/cgi-bin/koha/suggestion/suggestion.pl#[% suggestion.suggestiontype| uri %]">
                        [% INCLUDE 'csrf-token.inc' %]

                        [% IF ( suggestion.suggestions_loop ) %]
                            <p>

                                            </td>
                                            <td class="actions">
                                                <div class="btn-group dropup">
                                                    <a class="btn btn-default btn-xs" role="button" href="suggestion.pl?suggestionid=[% suggestions_loo.suggestionid | html %]&amp;csrf_token=[% csrf_token | html %]&amp;op=edit"><i class="fa fa-pencil"></i> Edit</a><a class="btn btn-default btn-xs dropdown-toggle" id="more_actions_[% suggestions_loo.suggestionid | html %]" role="button" data-toggle="dropdown" href="#"><b class="caret"></b></a>
                                                    <ul class="dropdown-menu pull-right" role="menu" aria-labelledby="more_actions_[% suggestions_loo.suggestionid | html %]">
                                                        <li><a class="deletesuggestion" href="suggestion.pl?op=delete&amp;suggestionid=[% suggestions_loo.suggestionid | html %]&amp;csrf_token=[% csrf_token | html %]"><i class="fa fa-trash"></i> Delete</a></li>
                                                        [% UNLESS suggestions_loo.archived %]
                                                            <li><a class="archivesuggestion" href="suggestion.pl?op=archive&amp;suggestionid=[% suggestions_loo.suggestionid | html %]"><i class="fa fa-archive"></i> Archive</a></li>
                                                        [% ELSE %]

                <div class="col-sm-2 col-sm-pull-10">
                    <aside>
                        <form name="suggestionfilter" action="suggestion.pl" method="get">
                            [% INCLUDE 'csrf-token.inc' %]
                            <input type="hidden" name="branchcode" value="[% branchfilter | html %]" />
                            <fieldset class="brief">
                                <ol style="display:block;">

Lines 69-74 output_and_exit_if_error( $input, $cookie, $template, { module => 'members', log Link Here

(-)a/members/boraccount.pl (-5 / +10 lines)
69	my $registerid = $input->param('registerid');	69	my $registerid = $input->param('registerid');
70		70
71	if ( $action eq 'void' ) {	71	if ( $action eq 'void' ) {
		72	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
72	my $payment_id = scalar $input->param('accountlines_id');	73	my $payment_id = scalar $input->param('accountlines_id');
73	my $payment = Koha::Account::Lines->find( $payment_id );	74	my $payment = Koha::Account::Lines->find( $payment_id );
74	$payment->void(	75	$payment->void(
Lines 81-88 if ( $action eq 'void' ) { Link Here
81	}	82	}
82		83
83	if ( $action eq 'payout' ) {	84	if ( $action eq 'payout' ) {
84	my $payment_id = scalar $input->param('accountlines_id');	85	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
85	my $amount = scalar $input->param('amount');	86	my $payment_id = scalar $input->param('accountlines_id');
		87	my $payment = Koha::Account::Lines->find($payment_id);
		88	my $amount = scalar $input->param('amount');
86	my $payout_type = scalar $input->param('payout_type');	89	my $payout_type = scalar $input->param('payout_type');
87	if ( $payment_id eq "" ) {	90	if ( $payment_id eq "" ) {
88	$schema->txn_do(	91	$schema->txn_do(
Lines 119-127 if ( $action eq 'payout' ) { Link Here
119	}	122	}
120		123
121	if ( $action eq 'refund' ) {	124	if ( $action eq 'refund' ) {
122	my $charge_id = scalar $input->param('accountlines_id');	125	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
123	my $charge = Koha::Account::Lines->find($charge_id);	126	my $charge_id = scalar $input->param('accountlines_id');
124	my $amount = scalar $input->param('amount');	127	my $charge = Koha::Account::Lines->find($charge_id);
		128	my $amount = scalar $input->param('amount');
125	my $refund_type = scalar $input->param('refund_type');	129	my $refund_type = scalar $input->param('refund_type');
126	$schema->txn_do(	130	$schema->txn_do(
127	sub {	131	sub {
Lines 152-157 if ( $action eq 'refund' ) { Link Here
152	}	156	}
153		157
154	if ( $action eq 'discount' ) {	158	if ( $action eq 'discount' ) {
		159	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
155	my $charge_id = scalar $input->param('accountlines_id');	160	my $charge_id = scalar $input->param('accountlines_id');
156	my $charge = Koha::Account::Lines->find($charge_id);	161	my $charge = Koha::Account::Lines->find($charge_id);
157	my $amount = scalar $input->param('amount');	162	my $amount = scalar $input->param('amount');




our $branch = C4::Context->userenv->{'branch'};

if ( $input->param('paycollect') ) {
    output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
    print $input->redirect(
        "/cgi-bin/koha/members/paycollect.pl?borrowernumber=$borrowernumber&change_given=$change_given");
}
elsif ( $input->param('payselected') ) {
    output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
    payselected({ params => \@names });
}
elsif ( $input->param('writeoff_selected') ) {
    output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
    payselected({ params => \@names, type => 'WRITEOFF' });
}
elsif ( $input->param('woall') ) {
    output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
    writeoff_all(@names);
}
elsif ( $input->param('apply_credits') ) {
    output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
    apply_credits({ patron => $patron, cgi => $input });
}
elsif ( $input->param('confirm_writeoff') ) {


for (@names) {
    if (/^pay_indiv_(\d+)$/) {
        output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
        my $line_no = $1;
        redirect_to_paycollect( 'pay_individual', $line_no );
    } elsif (/^wo_indiv_(\d+)$/) {
        output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
        my $line_no = $1;
        redirect_to_paycollect( 'writeoff_individual', $line_no );
    }

Lines 53-58 my $patron = Koha::Patrons->find( $borrowernumber ); Link Here

(-)a/members/setstatus.pl (+1 lines)
53	if ( $logged_in_user->can_see_patron_infos($patron) ) {	53	if ( $logged_in_user->can_see_patron_infos($patron) ) {
54	if ( $reregistration eq 'y' ) {	54	if ( $reregistration eq 'y' ) {
55	# re-reregistration function to automatic calcul of date expiry	55	# re-reregistration function to automatic calcul of date expiry
		56	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
56	$dateexpiry = $patron->renew_account;	57	$dateexpiry = $patron->renew_account;
57	} else {	58	} else {
58	my $sth = $dbh->prepare("UPDATE borrowers SET debarred = ?, debarredcomment = '' WHERE borrowernumber = ?");	59	my $sth = $dbh->prepare("UPDATE borrowers SET debarred = ?, debarredcomment = '' WHERE borrowernumber = ?");




##

if ( $op =~ /save/i ) {
    output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
    my @messages;
    my $biblio = MarcRecordFromNewSuggestion({
            title => $suggestion_only->{title},

    $op ='save';
}
elsif ($op=~/edit/) {
    #Edit suggestion
    output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
    $suggestion_ref=&GetSuggestion($$suggestion_ref{'suggestionid'});
    $suggestion_ref->{reasonsloop} = $reasonsloop;
    my $other_reason = 1;

    $op ='save';
}  
elsif ($op eq "update_status" ) {
    output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
    my $suggestion;
    # set accepted/rejected/managed informations if applicable
    # ie= if the librarian has chosen some action on the suggestions

    }
    redirect_with_params($input);
}elsif ($op eq "delete" ) {
    output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
    foreach my $delete_field (@editsuggestions) {
        &DelSuggestion( $borrowernumber, $delete_field,'intranet' );
    }
- 

Return to bug 22990

Lines 103-108 Link Here

(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/suggestion/suggestion.tt (-2 / +6 lines)
103	[% END %]	103	[% END %]
104	</ol>	104	</ol>
105	</nav> <!-- /.breadcrumbs -->	105	</nav> <!-- /.breadcrumbs -->
		106	[% INCLUDE 'blocking_errors.inc' %]
106		107
107	[% IF ( op == 'show' ) %]	108	[% IF ( op == 'show' ) %]
108	<div class="main container-fluid">	109	<div class="main container-fluid">
Lines 345-350 Link Here
345	[% END %]	346	[% END %]
346		347
347	<form id="add_edit" action="suggestion.pl" method="post" class="validated">	348	<form id="add_edit" action="suggestion.pl" method="post" class="validated">
		349	[% INCLUDE 'csrf-token.inc' %]
348	<input type="hidden" name="redirect" id="redirect" value="[% redirect \| html %]" />	350	<input type="hidden" name="redirect" id="redirect" value="[% redirect \| html %]" />
349	<input type="hidden" name="borrowernumber" id="borrowernumber" value="[% borrowernumber \| html %]" />	351	<input type="hidden" name="borrowernumber" id="borrowernumber" value="[% borrowernumber \| html %]" />
350	[% IF ( suggestionid ) %]	352	[% IF ( suggestionid ) %]
Lines 716-721 Link Here
716	[% FOREACH suggestion IN suggestions %]	718	[% FOREACH suggestion IN suggestions %]
717	<div id="[% suggestion.suggestiontype \| html %]">	719	<div id="[% suggestion.suggestiontype \| html %]">
718	<form class="update_suggestions" name="f" method="post" action="/cgi-bin/koha/suggestion/suggestion.pl#[% suggestion.suggestiontype\| uri %]">	720	<form class="update_suggestions" name="f" method="post" action="/cgi-bin/koha/suggestion/suggestion.pl#[% suggestion.suggestiontype\| uri %]">
		721	[% INCLUDE 'csrf-token.inc' %]
719		722
720	[% IF ( suggestion.suggestions_loop ) %]	723	[% IF ( suggestion.suggestions_loop ) %]
721	<p>	724	<p>
Lines 835-843 Link Here
835	</td>	838	</td>
836	<td class="actions">	839	<td class="actions">
837	<div class="btn-group dropup">	840	<div class="btn-group dropup">
838	<a class="btn btn-default btn-xs" role="button" href="suggestion.pl?suggestionid=[% suggestions_loo.suggestionid \| html %]&op=edit"><i class="fa fa-pencil"></i> Edit</a><a class="btn btn-default btn-xs dropdown-toggle" id="more_actions_[% suggestions_loo.suggestionid \| html %]" role="button" data-toggle="dropdown" href="#"><b class="caret"></b></a>	841	<a class="btn btn-default btn-xs" role="button" href="suggestion.pl?suggestionid=[% suggestions_loo.suggestionid \| html %]&csrf_token=[% csrf_token \| html %]&op=edit"><i class="fa fa-pencil"></i> Edit</a><a class="btn btn-default btn-xs dropdown-toggle" id="more_actions_[% suggestions_loo.suggestionid \| html %]" role="button" data-toggle="dropdown" href="#"><b class="caret"></b></a>
839	<ul class="dropdown-menu pull-right" role="menu" aria-labelledby="more_actions_[% suggestions_loo.suggestionid \| html %]">	842	<ul class="dropdown-menu pull-right" role="menu" aria-labelledby="more_actions_[% suggestions_loo.suggestionid \| html %]">
840	<li><a class="deletesuggestion" href="suggestion.pl?op=delete&suggestionid=[% suggestions_loo.suggestionid \| html %]"><i class="fa fa-trash"></i> Delete</a></li>	843	<li><a class="deletesuggestion" href="suggestion.pl?op=delete&suggestionid=[% suggestions_loo.suggestionid \| html %]&csrf_token=[% csrf_token \| html %]"><i class="fa fa-trash"></i> Delete</a></li>
841	[% UNLESS suggestions_loo.archived %]	844	[% UNLESS suggestions_loo.archived %]
842	<li><a class="archivesuggestion" href="suggestion.pl?op=archive&suggestionid=[% suggestions_loo.suggestionid \| html %]"><i class="fa fa-archive"></i> Archive</a></li>	845	<li><a class="archivesuggestion" href="suggestion.pl?op=archive&suggestionid=[% suggestions_loo.suggestionid \| html %]"><i class="fa fa-archive"></i> Archive</a></li>
843	[% ELSE %]	846	[% ELSE %]
Lines 976-981 Link Here
976	<div class="col-sm-2 col-sm-pull-10">	979	<div class="col-sm-2 col-sm-pull-10">
977	<aside>	980	<aside>
978	<form name="suggestionfilter" action="suggestion.pl" method="get">	981	<form name="suggestionfilter" action="suggestion.pl" method="get">
		982	[% INCLUDE 'csrf-token.inc' %]
979	<input type="hidden" name="branchcode" value="[% branchfilter \| html %]" />	983	<input type="hidden" name="branchcode" value="[% branchfilter \| html %]" />
980	<fieldset class="brief">	984	<fieldset class="brief">
981	<ol style="display:block;">	985	<ol style="display:block;">

Lines 44-50 Link Here

(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt (-4 / +7 lines)
44	<main>	44	<main>
45		45
46	[% INCLUDE 'members-toolbar.inc' %]	46	[% INCLUDE 'members-toolbar.inc' %]
47	<form action="/cgi-bin/koha/members/boraccount.pl" method="get"><input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber \| html %]" /></form>	47	<form action="/cgi-bin/koha/members/boraccount.pl" method="get">[% INCLUDE 'csrf-token.inc' %]<input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber \| html %]" /></form>
48		48
49	<!-- The manual invoice and credit buttons -->	49	<!-- The manual invoice and credit buttons -->
50	<div class="statictabs">	50	<div class="statictabs">
Lines 111-124 Link Here
111	[% END %]	111	[% END %]
112	<a href="accountline-details.pl?accountlines_id=[% account.accountlines_id \| uri %]" class="btn btn-default btn-xs details-action"><i class="fa fa-list"></i> Details</a>	112	<a href="accountline-details.pl?accountlines_id=[% account.accountlines_id \| uri %]" class="btn btn-default btn-xs details-action"><i class="fa fa-list"></i> Details</a>
113	[% IF account.is_debit && account.amountoutstanding > 0 %]	113	[% IF account.is_debit && account.amountoutstanding > 0 %]
114	<a class="btn btn-default btn-xs pay-action" href="/cgi-bin/koha/members/paycollect.pl?borrowernumber=[% account.borrowernumber \| html %]&pay_individual=1&debit_type_code=[% account.debit_type_code \| html %]&amount=[% account.amount \| html %]&amountoutstanding=[% account.amountoutstanding \| html %]&description=[% account.description \| html %]&itemnumber=[% account.itemnumber \| html %]&accountlines_id=[% account.accountlines_id \| html %]"><i class="fa fa-money"></i> Pay</a>	114	<a class="btn btn-default btn-xs pay-action" href="/cgi-bin/koha/members/paycollect.pl?borrowernumber=[% account.borrowernumber \| html %]&pay_individual=1&debit_type_code=[% account.debit_type_code \| html %]&amount=[% account.amount \| html %]&amountoutstanding=[% account.amountoutstanding \| html %]&description=[% account.description \| html %]&itemnumber=[% account.itemnumber \| html %]&accountlines_id=[% account.accountlines_id \| html %]&csrf_token=[% csrf_token \| html %]"><i class="fa fa-money"></i> Pay</a>
115	[% END %]	115	[% END %]
116	[% IF account.is_credit && account.status != 'VOID' %]	116	[% IF account.is_credit && account.status != 'VOID' %]
117	<a href="boraccount.pl?action=void&accountlines_id=[% account.accountlines_id \| uri %]&borrowernumber=[% account.borrowernumber \| uri %]" class="btn btn-default btn-xs void-action"><i class="fa fa-ban"></i> Void payment</a>	117	<a href="boraccount.pl?action=void&accountlines_id=[% account.accountlines_id \| uri %]&borrowernumber=[% account.borrowernumber \| uri %]&csrf_token=[% csrf_token \| uri %]" class="btn btn-default btn-xs void-action"><i class="fa fa-ban"></i> Void payment</a>
118	[% END %]	118	[% END %]
119	[% IF account.is_debit && account.amount == account.amountoutstanding && account.status != 'CANCELLED' && !(account.debit_type_code == 'PAYOUT') %]	119	[% IF account.is_debit && account.amount == account.amountoutstanding && account.status != 'CANCELLED' && !(account.debit_type_code == 'PAYOUT') %]
120	<form method="post" action="/cgi-bin/koha/members/cancel-charge.pl">	120	<form method="post" action="/cgi-bin/koha/members/cancel-charge.pl">
121	<input type="hidden" name="csrf_token" value="[% csrf_token \| html %]">	121	[% INCLUDE 'csrf-token.inc' %]
122	<input type="hidden" name="borrowernumber" value="[% patron.borrowernumber \| html %]">	122	<input type="hidden" name="borrowernumber" value="[% patron.borrowernumber \| html %]">
123	<input type="hidden" name="accountlines_id" value="[% account.accountlines_id \| html %]">	123	<input type="hidden" name="accountlines_id" value="[% account.accountlines_id \| html %]">
124	<button type="submit" class="btn btn-default btn-xs cancel-action">	124	<button type="submit" class="btn btn-default btn-xs cancel-action">
Lines 173-178 Link Here
173	<!-- Issue payout modal -->	173	<!-- Issue payout modal -->
174	<div class="modal" id="issuePayoutModal" tabindex="-1" role="dialog" aria-labelledby="issuePayoutLabel">	174	<div class="modal" id="issuePayoutModal" tabindex="-1" role="dialog" aria-labelledby="issuePayoutLabel">
175	<form id="payout_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated">	175	<form id="payout_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated">
		176	[% INCLUDE 'csrf-token.inc' %]
176	<input type="hidden" name="accountlines_id" value="" id="payoutline">	177	<input type="hidden" name="accountlines_id" value="" id="payoutline">
177	<input type="hidden" name="action" value="payout">	178	<input type="hidden" name="action" value="payout">
178	<input type="hidden" name="borrowernumber" value="[% account.borrowernumber \| html %]">	179	<input type="hidden" name="borrowernumber" value="[% account.borrowernumber \| html %]">
Lines 227-232 Link Here
227	<!-- Issue refund modal -->	228	<!-- Issue refund modal -->
228	<div class="modal" id="issueRefundModal" tabindex="-1" role="dialog" aria-labelledby="issueRefundLabel">	229	<div class="modal" id="issueRefundModal" tabindex="-1" role="dialog" aria-labelledby="issueRefundLabel">
229	<form id="refund_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated">	230	<form id="refund_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated">
		231	[% INCLUDE 'csrf-token.inc' %]
230	<input type="hidden" name="accountlines_id" value="" id="refundline">	232	<input type="hidden" name="accountlines_id" value="" id="refundline">
231	<input type="hidden" name="action" value="refund">	233	<input type="hidden" name="action" value="refund">
232	<input type="hidden" name="borrowernumber" value="[% account.borrowernumber \| html %]">	234	<input type="hidden" name="borrowernumber" value="[% account.borrowernumber \| html %]">
Lines 284-289 Link Here
284	<!-- Apply discount modal -->	286	<!-- Apply discount modal -->
285	<div class="modal" id="applyDiscountModal" tabindex="-1" role="dialog" aria-labelledby="applyDiscountLabel">	287	<div class="modal" id="applyDiscountModal" tabindex="-1" role="dialog" aria-labelledby="applyDiscountLabel">
286	<form id="discount_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated">	288	<form id="discount_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated">
		289	[% INCLUDE 'csrf-token.inc' %]
287	<input type="hidden" name="accountlines_id" value="" id="discountline">	290	<input type="hidden" name="accountlines_id" value="" id="discountline">
288	<input type="hidden" name="action" value="discount">	291	<input type="hidden" name="action" value="discount">
289	<input type="hidden" name="borrowernumber" value="[% account.borrowernumber \| html %]">	292	<input type="hidden" name="borrowernumber" value="[% account.borrowernumber \| html %]">

Lines 77-95 $user \|\|= q{}; Link Here

(-)a/members/pay.pl (+7 lines)
77	our $branch = C4::Context->userenv->{'branch'};	77	our $branch = C4::Context->userenv->{'branch'};
78		78
79	if ( $input->param('paycollect') ) {	79	if ( $input->param('paycollect') ) {
		80	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
80	print $input->redirect(	81	print $input->redirect(
81	"/cgi-bin/koha/members/paycollect.pl?borrowernumber=$borrowernumber&change_given=$change_given");	82	"/cgi-bin/koha/members/paycollect.pl?borrowernumber=$borrowernumber&change_given=$change_given");
82	}	83	}
83	elsif ( $input->param('payselected') ) {	84	elsif ( $input->param('payselected') ) {
		85	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
84	payselected({ params => \@names });	86	payselected({ params => \@names });
85	}	87	}
86	elsif ( $input->param('writeoff_selected') ) {	88	elsif ( $input->param('writeoff_selected') ) {
		89	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
87	payselected({ params => \@names, type => 'WRITEOFF' });	90	payselected({ params => \@names, type => 'WRITEOFF' });
88	}	91	}
89	elsif ( $input->param('woall') ) {	92	elsif ( $input->param('woall') ) {
		93	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
90	writeoff_all(@names);	94	writeoff_all(@names);
91	}	95	}
92	elsif ( $input->param('apply_credits') ) {	96	elsif ( $input->param('apply_credits') ) {
		97	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
93	apply_credits({ patron => $patron, cgi => $input });	98	apply_credits({ patron => $patron, cgi => $input });
94	}	99	}
95	elsif ( $input->param('confirm_writeoff') ) {	100	elsif ( $input->param('confirm_writeoff') ) {
Lines 129-137 elsif ( $input->param('confirm_writeoff') ) { Link Here
129		134
130	for (@names) {	135	for (@names) {
131	if (/^pay_indiv_(\d+)$/) {	136	if (/^pay_indiv_(\d+)$/) {
		137	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
132	my $line_no = $1;	138	my $line_no = $1;
133	redirect_to_paycollect( 'pay_individual', $line_no );	139	redirect_to_paycollect( 'pay_individual', $line_no );
134	} elsif (/^wo_indiv_(\d+)$/) {	140	} elsif (/^wo_indiv_(\d+)$/) {
		141	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
135	my $line_no = $1;	142	my $line_no = $1;
136	redirect_to_paycollect( 'writeoff_individual', $line_no );	143	redirect_to_paycollect( 'writeoff_individual', $line_no );
137	}	144	}

Lines 127-132 my $branchfilter = $input->param('branchcode') \|\| C4::Context->userenv->{'branch Link Here

(-)a/suggestion/suggestion.pl (-3 / +5 lines)
127	##	127	##
128		128
129	if ( $op =~ /save/i ) {	129	if ( $op =~ /save/i ) {
		130	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
130	my @messages;	131	my @messages;
131	my $biblio = MarcRecordFromNewSuggestion({	132	my $biblio = MarcRecordFromNewSuggestion({
132	title => $suggestion_only->{title},	133	title => $suggestion_only->{title},
Lines 240-246 elsif ($op=~/add/) { Link Here
240	$op ='save';	241	$op ='save';
241	}	242	}
242	elsif ($op=~/edit/) {	243	elsif ($op=~/edit/) {
243	#Edit suggestion	244	#Edit suggestion
		245	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
244	$suggestion_ref=&GetSuggestion($$suggestion_ref{'suggestionid'});	246	$suggestion_ref=&GetSuggestion($$suggestion_ref{'suggestionid'});
245	$suggestion_ref->{reasonsloop} = $reasonsloop;	247	$suggestion_ref->{reasonsloop} = $reasonsloop;
246	my $other_reason = 1;	248	my $other_reason = 1;
Lines 255-261 elsif ($op=~/edit/) { Link Here
255	$op ='save';	257	$op ='save';
256	}	258	}
257	elsif ($op eq "update_status" ) {	259	elsif ($op eq "update_status" ) {
258		260	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
259	my $suggestion;	261	my $suggestion;
260	# set accepted/rejected/managed informations if applicable	262	# set accepted/rejected/managed informations if applicable
261	# ie= if the librarian has chosen some action on the suggestions	263	# ie= if the librarian has chosen some action on the suggestions
Lines 292-297 elsif ($op eq "update_status" ) { Link Here
292	}	294	}
293	redirect_with_params($input);	295	redirect_with_params($input);
294	}elsif ($op eq "delete" ) {	296	}elsif ($op eq "delete" ) {
		297	output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
295	foreach my $delete_field (@editsuggestions) {	298	foreach my $delete_field (@editsuggestions) {
296	&DelSuggestion( $borrowernumber, $delete_field,'intranet' );	299	&DelSuggestion( $borrowernumber, $delete_field,'intranet' );
297	}	300	}
298	-