Lines 48-54
Link Here
|
48 |
|
48 |
|
49 |
[% INCLUDE 'members-toolbar.inc' %] |
49 |
[% INCLUDE 'members-toolbar.inc' %] |
50 |
<h1>Account for [% INCLUDE 'patron-title.inc' %]</h1> |
50 |
<h1>Account for [% INCLUDE 'patron-title.inc' %]</h1> |
51 |
<form action="/cgi-bin/koha/members/boraccount.pl" method="get"><input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" /></form> |
51 |
<form action="/cgi-bin/koha/members/boraccount.pl" method="get">[% INCLUDE 'csrf-token.inc' %]<input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" /></form> |
52 |
|
52 |
|
53 |
<!-- The manual invoice and credit buttons --> |
53 |
<!-- The manual invoice and credit buttons --> |
54 |
<div class="toptabs"> |
54 |
<div class="toptabs"> |
Lines 128-141
Link Here
|
128 |
[% END %] |
128 |
[% END %] |
129 |
<a href="accountline-details.pl?accountlines_id=[% account.accountlines_id | uri %]" class="btn btn-default btn-xs details-action"><i class="fa fa-list"></i> Details</a> |
129 |
<a href="accountline-details.pl?accountlines_id=[% account.accountlines_id | uri %]" class="btn btn-default btn-xs details-action"><i class="fa fa-list"></i> Details</a> |
130 |
[% IF account.is_debit && account.amountoutstanding > 0 %] |
130 |
[% IF account.is_debit && account.amountoutstanding > 0 %] |
131 |
<a class="btn btn-default btn-xs pay-action" href="/cgi-bin/koha/members/paycollect.pl?borrowernumber=[% account.borrowernumber | html %]&pay_individual=1&debit_type_code=[% account.debit_type_code | html %]&amount=[% account.amount | html %]&amountoutstanding=[% account.amountoutstanding | html %]&description=[% account.description | html %]&itemnumber=[% account.itemnumber | html %]&accountlines_id=[% account.accountlines_id | html %]"><i class="fa fa-money"></i> Pay</a> |
131 |
<a class="btn btn-default btn-xs pay-action" href="/cgi-bin/koha/members/paycollect.pl?borrowernumber=[% account.borrowernumber | html %]&pay_individual=1&debit_type_code=[% account.debit_type_code | html %]&amount=[% account.amount | html %]&amountoutstanding=[% account.amountoutstanding | html %]&description=[% account.description | html %]&itemnumber=[% account.itemnumber | html %]&accountlines_id=[% account.accountlines_id | html %]&csrf_token=[% csrf_token | html %]"><i class="fa fa-money"></i> Pay</a> |
132 |
[% END %] |
132 |
[% END %] |
133 |
[% IF account.is_credit && account.status != 'VOID' %] |
133 |
[% IF account.is_credit && account.status != 'VOID' %] |
134 |
<a href="boraccount.pl?action=void&accountlines_id=[% account.accountlines_id | uri %]&borrowernumber=[% account.borrowernumber | uri %]" class="btn btn-default btn-xs void-action"><i class="fa fa-ban"></i> Void payment</a> |
134 |
<a href="boraccount.pl?action=void&accountlines_id=[% account.accountlines_id | uri %]&borrowernumber=[% account.borrowernumber | uri %]&csrf_token=[% csrf_token | uri %]" class="btn btn-default btn-xs void-action"><i class="fa fa-ban"></i> Void payment</a> |
135 |
[% END %] |
135 |
[% END %] |
136 |
[% IF account.is_debit && account.amount == account.amountoutstanding && account.status != 'CANCELLED' && !(account.debit_type_code == 'PAYOUT') %] |
136 |
[% IF account.is_debit && account.amount == account.amountoutstanding && account.status != 'CANCELLED' && !(account.debit_type_code == 'PAYOUT') %] |
137 |
<form method="post" action="/cgi-bin/koha/members/cancel-charge.pl"> |
137 |
<form method="post" action="/cgi-bin/koha/members/cancel-charge.pl"> |
138 |
<input type="hidden" name="csrf_token" value="[% csrf_token | html %]"> |
138 |
[% INCLUDE 'csrf-token.inc' %] |
139 |
<input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]"> |
139 |
<input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]"> |
140 |
<input type="hidden" name="accountlines_id" value="[% account.accountlines_id | html %]"> |
140 |
<input type="hidden" name="accountlines_id" value="[% account.accountlines_id | html %]"> |
141 |
<button type="submit" class="btn btn-default btn-xs cancel-action"> |
141 |
<button type="submit" class="btn btn-default btn-xs cancel-action"> |
Lines 191-196
Link Here
|
191 |
<!-- Issue payout modal --> |
191 |
<!-- Issue payout modal --> |
192 |
<div class="modal" id="issuePayoutModal" tabindex="-1" role="dialog" aria-labelledby="issuePayoutLabel"> |
192 |
<div class="modal" id="issuePayoutModal" tabindex="-1" role="dialog" aria-labelledby="issuePayoutLabel"> |
193 |
<form id="payout_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated"> |
193 |
<form id="payout_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated"> |
|
|
194 |
[% INCLUDE 'csrf-token.inc' %] |
194 |
<input type="hidden" name="accountlines_id" value="" id="payoutline"> |
195 |
<input type="hidden" name="accountlines_id" value="" id="payoutline"> |
195 |
<input type="hidden" name="action" value="payout"> |
196 |
<input type="hidden" name="action" value="payout"> |
196 |
<input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"> |
197 |
<input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"> |
Lines 245-250
Link Here
|
245 |
<!-- Issue refund modal --> |
246 |
<!-- Issue refund modal --> |
246 |
<div class="modal" id="issueRefundModal" tabindex="-1" role="dialog" aria-labelledby="issueRefundLabel"> |
247 |
<div class="modal" id="issueRefundModal" tabindex="-1" role="dialog" aria-labelledby="issueRefundLabel"> |
247 |
<form id="refund_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated"> |
248 |
<form id="refund_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated"> |
|
|
249 |
[% INCLUDE 'csrf-token.inc' %] |
248 |
<input type="hidden" name="accountlines_id" value="" id="refundline"> |
250 |
<input type="hidden" name="accountlines_id" value="" id="refundline"> |
249 |
<input type="hidden" name="action" value="refund"> |
251 |
<input type="hidden" name="action" value="refund"> |
250 |
<input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"> |
252 |
<input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"> |
Lines 302-307
Link Here
|
302 |
<!-- Apply discount modal --> |
304 |
<!-- Apply discount modal --> |
303 |
<div class="modal" id="applyDiscountModal" tabindex="-1" role="dialog" aria-labelledby="applyDiscountLabel"> |
305 |
<div class="modal" id="applyDiscountModal" tabindex="-1" role="dialog" aria-labelledby="applyDiscountLabel"> |
304 |
<form id="discount_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated"> |
306 |
<form id="discount_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated"> |
|
|
307 |
[% INCLUDE 'csrf-token.inc' %] |
305 |
<input type="hidden" name="accountlines_id" value="" id="discountline"> |
308 |
<input type="hidden" name="accountlines_id" value="" id="discountline"> |
306 |
<input type="hidden" name="action" value="discount"> |
309 |
<input type="hidden" name="action" value="discount"> |
307 |
<input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"> |
310 |
<input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"> |