Lines 45-51
Link Here
|
45 |
|
45 |
|
46 |
[% INCLUDE 'members-toolbar.inc' %] |
46 |
[% INCLUDE 'members-toolbar.inc' %] |
47 |
<h1>Account for [% INCLUDE 'patron-title.inc' %]</h1> |
47 |
<h1>Account for [% INCLUDE 'patron-title.inc' %]</h1> |
48 |
<form action="/cgi-bin/koha/members/boraccount.pl" method="get"><input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" /></form> |
48 |
<form action="/cgi-bin/koha/members/boraccount.pl" method="get">[% INCLUDE 'csrf-token.inc' %]<input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" /></form> |
49 |
|
49 |
|
50 |
<!-- The manual invoice and credit buttons --> |
50 |
<!-- The manual invoice and credit buttons --> |
51 |
<div class="statictabs"> |
51 |
<div class="statictabs"> |
Lines 116-129
Link Here
|
116 |
[% END %] |
116 |
[% END %] |
117 |
<a href="accountline-details.pl?accountlines_id=[% account.accountlines_id | uri %]" class="btn btn-default btn-xs details-action"><i class="fa fa-list"></i> Details</a> |
117 |
<a href="accountline-details.pl?accountlines_id=[% account.accountlines_id | uri %]" class="btn btn-default btn-xs details-action"><i class="fa fa-list"></i> Details</a> |
118 |
[% IF account.is_debit && account.amountoutstanding > 0 %] |
118 |
[% IF account.is_debit && account.amountoutstanding > 0 %] |
119 |
<a class="btn btn-default btn-xs pay-action" href="/cgi-bin/koha/members/paycollect.pl?borrowernumber=[% account.borrowernumber | html %]&pay_individual=1&debit_type_code=[% account.debit_type_code | html %]&amount=[% account.amount | html %]&amountoutstanding=[% account.amountoutstanding | html %]&description=[% account.description | html %]&itemnumber=[% account.itemnumber | html %]&accountlines_id=[% account.accountlines_id | html %]"><i class="fa fa-money"></i> Pay</a> |
119 |
<a class="btn btn-default btn-xs pay-action" href="/cgi-bin/koha/members/paycollect.pl?borrowernumber=[% account.borrowernumber | html %]&pay_individual=1&debit_type_code=[% account.debit_type_code | html %]&amount=[% account.amount | html %]&amountoutstanding=[% account.amountoutstanding | html %]&description=[% account.description | html %]&itemnumber=[% account.itemnumber | html %]&accountlines_id=[% account.accountlines_id | html %]&csrf_token=[% csrf_token | html %]"><i class="fa fa-money"></i> Pay</a> |
120 |
[% END %] |
120 |
[% END %] |
121 |
[% IF account.is_credit && account.status != 'VOID' %] |
121 |
[% IF account.is_credit && account.status != 'VOID' %] |
122 |
<a href="boraccount.pl?action=void&accountlines_id=[% account.accountlines_id | uri %]&borrowernumber=[% account.borrowernumber | uri %]" class="btn btn-default btn-xs void-action"><i class="fa fa-ban"></i> Void payment</a> |
122 |
<a href="boraccount.pl?action=void&accountlines_id=[% account.accountlines_id | uri %]&borrowernumber=[% account.borrowernumber | uri %]&csrf_token=[% csrf_token | uri %]" class="btn btn-default btn-xs void-action"><i class="fa fa-ban"></i> Void payment</a> |
123 |
[% END %] |
123 |
[% END %] |
124 |
[% IF account.is_debit && account.amount == account.amountoutstanding && account.status != 'CANCELLED' && !(account.debit_type_code == 'PAYOUT') %] |
124 |
[% IF account.is_debit && account.amount == account.amountoutstanding && account.status != 'CANCELLED' && !(account.debit_type_code == 'PAYOUT') %] |
125 |
<form method="post" action="/cgi-bin/koha/members/cancel-charge.pl"> |
125 |
<form method="post" action="/cgi-bin/koha/members/cancel-charge.pl"> |
126 |
<input type="hidden" name="csrf_token" value="[% csrf_token | html %]"> |
126 |
[% INCLUDE 'csrf-token.inc' %] |
127 |
<input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]"> |
127 |
<input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]"> |
128 |
<input type="hidden" name="accountlines_id" value="[% account.accountlines_id | html %]"> |
128 |
<input type="hidden" name="accountlines_id" value="[% account.accountlines_id | html %]"> |
129 |
<button type="submit" class="btn btn-default btn-xs cancel-action"> |
129 |
<button type="submit" class="btn btn-default btn-xs cancel-action"> |
Lines 178-183
Link Here
|
178 |
<!-- Issue payout modal --> |
178 |
<!-- Issue payout modal --> |
179 |
<div class="modal" id="issuePayoutModal" tabindex="-1" role="dialog" aria-labelledby="issuePayoutLabel"> |
179 |
<div class="modal" id="issuePayoutModal" tabindex="-1" role="dialog" aria-labelledby="issuePayoutLabel"> |
180 |
<form id="payout_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated"> |
180 |
<form id="payout_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated"> |
|
|
181 |
[% INCLUDE 'csrf-token.inc' %] |
181 |
<input type="hidden" name="accountlines_id" value="" id="payoutline"> |
182 |
<input type="hidden" name="accountlines_id" value="" id="payoutline"> |
182 |
<input type="hidden" name="action" value="payout"> |
183 |
<input type="hidden" name="action" value="payout"> |
183 |
<input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"> |
184 |
<input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"> |
Lines 232-237
Link Here
|
232 |
<!-- Issue refund modal --> |
233 |
<!-- Issue refund modal --> |
233 |
<div class="modal" id="issueRefundModal" tabindex="-1" role="dialog" aria-labelledby="issueRefundLabel"> |
234 |
<div class="modal" id="issueRefundModal" tabindex="-1" role="dialog" aria-labelledby="issueRefundLabel"> |
234 |
<form id="refund_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated"> |
235 |
<form id="refund_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated"> |
|
|
236 |
[% INCLUDE 'csrf-token.inc' %] |
235 |
<input type="hidden" name="accountlines_id" value="" id="refundline"> |
237 |
<input type="hidden" name="accountlines_id" value="" id="refundline"> |
236 |
<input type="hidden" name="action" value="refund"> |
238 |
<input type="hidden" name="action" value="refund"> |
237 |
<input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"> |
239 |
<input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"> |
Lines 289-294
Link Here
|
289 |
<!-- Apply discount modal --> |
291 |
<!-- Apply discount modal --> |
290 |
<div class="modal" id="applyDiscountModal" tabindex="-1" role="dialog" aria-labelledby="applyDiscountLabel"> |
292 |
<div class="modal" id="applyDiscountModal" tabindex="-1" role="dialog" aria-labelledby="applyDiscountLabel"> |
291 |
<form id="discount_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated"> |
293 |
<form id="discount_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated"> |
|
|
294 |
[% INCLUDE 'csrf-token.inc' %] |
292 |
<input type="hidden" name="accountlines_id" value="" id="discountline"> |
295 |
<input type="hidden" name="accountlines_id" value="" id="discountline"> |
293 |
<input type="hidden" name="action" value="discount"> |
296 |
<input type="hidden" name="action" value="discount"> |
294 |
<input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"> |
297 |
<input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"> |