View | Details | Raw Unified | Return to bug 22990
Collapse All | Expand All

(-)a/acqui/basketheader.pl (-1 / +1 lines)
Lines 49-55 use Modern::Perl; Link Here
49
use CGI qw ( -utf8 );
49
use CGI qw ( -utf8 );
50
use C4::Context;
50
use C4::Context;
51
use C4::Auth qw( get_template_and_user );
51
use C4::Auth qw( get_template_and_user );
52
use C4::Output qw( output_html_with_http_headers );
52
use C4::Output qw( output_html_with_http_headers output_and_exit_if_error );
53
use C4::Acquisition qw( GetBasket ModBasket ModBasketHeader NewBasket );
53
use C4::Acquisition qw( GetBasket ModBasket ModBasketHeader NewBasket );
54
use C4::Contract qw( GetContracts GetContract );
54
use C4::Contract qw( GetContracts GetContract );
55
55
(-)a/circ/add_message.pl (-1 / +1 lines)
Lines 22-28 use Modern::Perl; Link Here
22
use CGI qw ( -utf8 );
22
use CGI qw ( -utf8 );
23
23
24
use C4::Auth qw( get_template_and_user );
24
use C4::Auth qw( get_template_and_user );
25
use C4::Output;
25
use C4::Output qw( output_and_exit_if_error );
26
use Koha::Patron::Message;
26
use Koha::Patron::Message;
27
27
28
my $input = CGI->new;
28
my $input = CGI->new;
(-)a/members/pay.pl (+1 lines)
Lines 98-103 elsif ( $input->param('apply_credits') ) { Link Here
98
    apply_credits({ patron => $patron, cgi => $input });
98
    apply_credits({ patron => $patron, cgi => $input });
99
}
99
}
100
elsif ( $input->param('confirm_writeoff') ) {
100
elsif ( $input->param('confirm_writeoff') ) {
101
    output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
101
    my $item_id         = $input->param('itemnumber');
102
    my $item_id         = $input->param('itemnumber');
102
    my $accountlines_id = $input->param('accountlines_id');
103
    my $accountlines_id = $input->param('accountlines_id');
103
    my $amount          = $input->param('amountwrittenoff');
104
    my $amount          = $input->param('amountwrittenoff');
(-)a/members/setstatus.pl (-1 / +9 lines)
Lines 53-59 my $patron = Koha::Patrons->find( $borrowernumber ); Link Here
53
if ( $logged_in_user->can_see_patron_infos($patron) ) {
53
if ( $logged_in_user->can_see_patron_infos($patron) ) {
54
    if ( $reregistration eq 'y' ) {
54
    if ( $reregistration eq 'y' ) {
55
        # re-reregistration function to automatic calcul of date expiry
55
        # re-reregistration function to automatic calcul of date expiry
56
        output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
56
        #FIXME: Can't use output_and_exit_if_error here because there's no $template available
57
        #output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
58
		die "Wrong CSRF token" unless Koha::Token->new->check_csrf(
59
			{
60
				session_id => scalar $input->cookie('CGISESSID'),
61
				token      => scalar $input->param('csrf_token'),
62
			}
63
		  );
64
57
        $dateexpiry = $patron->renew_account;
65
        $dateexpiry = $patron->renew_account;
58
    } else {
66
    } else {
59
        my $sth = $dbh->prepare("UPDATE borrowers SET debarred = ?, debarredcomment = '' WHERE borrowernumber = ?");
67
        my $sth = $dbh->prepare("UPDATE borrowers SET debarred = ?, debarredcomment = '' WHERE borrowernumber = ?");
(-)a/suggestion/suggestion.pl (-2 / +1 lines)
Lines 21-27 use Modern::Perl; Link Here
21
require Exporter;
21
require Exporter;
22
use CGI qw ( -utf8 );
22
use CGI qw ( -utf8 );
23
use C4::Auth qw( get_template_and_user );
23
use C4::Auth qw( get_template_and_user );
24
use C4::Output qw( output_html_with_http_headers );
24
use C4::Output qw( output_html_with_http_headers output_and_exit_if_error );
25
use C4::Suggestions;
25
use C4::Suggestions;
26
use C4::Koha qw( GetAuthorisedValues );
26
use C4::Koha qw( GetAuthorisedValues );
27
use C4::Budgets qw( GetBudget GetBudgets GetBudgetHierarchy CanUserUseBudget );
27
use C4::Budgets qw( GetBudget GetBudgets GetBudgetHierarchy CanUserUseBudget );
28
- 

Return to bug 22990