View | Details | Raw Unified | Return to bug 34478
Collapse All | Expand All

(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-search.inc (+2 lines)
Lines 3-8 Link Here
3
    <div class="tab-content">
3
    <div class="tab-content">
4
        <div id="supplier_search" role="tabpanel" class="tab-pane active">
4
        <div id="supplier_search" role="tabpanel" class="tab-pane active">
5
            <form name="findsupplier" action="/cgi-bin/koha/acqui/booksellers.pl" method="post">
5
            <form name="findsupplier" action="/cgi-bin/koha/acqui/booksellers.pl" method="post">
6
                [% INCLUDE 'csrf-token.inc' %]
6
                <div class="form-title">
7
                <div class="form-title">
7
                    <label class="control-label">Vendor search</label>
8
                    <label class="control-label">Vendor search</label>
8
                </div>
9
                </div>
Lines 16-21 Link Here
16
17
17
        <div id="orders_search" role="tabpanel" class="tab-pane">
18
        <div id="orders_search" role="tabpanel" class="tab-pane">
18
            <form action="/cgi-bin/koha/acqui/histsearch.pl" method="post">
19
            <form action="/cgi-bin/koha/acqui/histsearch.pl" method="post">
20
                [% INCLUDE 'csrf-token.inc' %]
19
                <div class="form-title">
21
                <div class="form-title">
20
                    <label class="control-label">Orders search</label>
22
                    <label class="control-label">Orders search</label>
21
                </div>
23
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-toolbar.inc (+1 lines)
Lines 25-30 Link Here
25
                [% UNLESS ( basketcount OR subscriptioncount ) %]
25
                [% UNLESS ( basketcount OR subscriptioncount ) %]
26
                    <div class="btn-group">
26
                    <div class="btn-group">
27
                        <form action="/cgi-bin/koha/acqui/supplier.pl" method="post">
27
                        <form action="/cgi-bin/koha/acqui/supplier.pl" method="post">
28
                            [% INCLUDE 'csrf-token.inc' %]
28
                            <input type="hidden" name="op" value="delete" />
29
                            <input type="hidden" name="op" value="delete" />
29
                            <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
30
                            <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
30
                            <button class="btn btn-default" id="deletesupplier" type="submit"><i class="fa fa-trash-can"></i> Delete vendor</button>
31
                            <button class="btn btn-default" id="deletesupplier" type="submit"><i class="fa fa-trash-can"></i> Delete vendor</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/budgets-admin-search.inc (+1 lines)
Lines 6-11 Link Here
6
    <div class="tab-content">
6
    <div class="tab-content">
7
        <div id="budgets_search" role="tabpanel" class="tab-pane active">
7
        <div id="budgets_search" role="tabpanel" class="tab-pane active">
8
            <form action="/cgi-bin/koha/admin/aqbudgets.pl" method="post">
8
            <form action="/cgi-bin/koha/admin/aqbudgets.pl" method="post">
9
                [% INCLUDE 'csrf-token.inc' %]
9
                <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
10
                <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
10
11
11
                <div class="form-title">
12
                <div class="form-title">
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/checkin-search-box.inc (+1 lines)
Lines 6-11 Link Here
6
        <div id="checkin_search" role="tabpanel" class="tab-pane">
6
        <div id="checkin_search" role="tabpanel" class="tab-pane">
7
    [% END %]
7
    [% END %]
8
        <form method="post" action="/cgi-bin/koha/circ/returns.pl" autocomplete="off">
8
        <form method="post" action="/cgi-bin/koha/circ/returns.pl" autocomplete="off">
9
            [% INCLUDE 'csrf-token.inc' %]
9
            <div class="form-title">
10
            <div class="form-title">
10
                <label class="control-label">Check in</label>
11
                <label class="control-label">Check in</label>
11
            </div>
12
            </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/checkouts-table.inc (+1 lines)
Lines 16-21 Link Here
16
        </p>
16
        </p>
17
    </div>
17
    </div>
18
    <form name="issues" action="/cgi-bin/koha/tools/export.pl" method="post">
18
    <form name="issues" action="/cgi-bin/koha/tools/export.pl" method="post">
19
        [% INCLUDE 'csrf-token.inc' %]
19
        <table id="issues-table" style="width: 100% !Important;">
20
        <table id="issues-table" style="width: 100% !Important;">
20
            <thead>
21
            <thead>
21
                <tr>
22
                <tr>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/circ-menu.inc (+2 lines)
Lines 200-205 Link Here
200
                <div id="upload-patron-image" class="patroninfo-section">
200
                <div id="upload-patron-image" class="patroninfo-section">
201
                    <h5>Upload patron photo</h5>
201
                    <h5>Upload patron photo</h5>
202
                    <form method="post" id="picture-upload" action="/cgi-bin/koha/tools/picture-upload.pl"
202
                    <form method="post" id="picture-upload" action="/cgi-bin/koha/tools/picture-upload.pl"
203
                        [% INCLUDE 'csrf-token.inc' %]
203
                        enctype="multipart/form-data">
204
                        enctype="multipart/form-data">
204
                        [% IF ( patron.image ) %]
205
                        [% IF ( patron.image ) %]
205
                            <div class="hint">
206
                            <div class="hint">
Lines 232-237 Link Here
232
                <div id="capture-patron-image" class="patroninfo-section">
233
                <div id="capture-patron-image" class="patroninfo-section">
233
                    <h5>Take patron photo</h5>
234
                    <h5>Take patron photo</h5>
234
                    <form method="post" id="camera-upload" action="/cgi-bin/koha/tools/picture-upload.pl">
235
                    <form method="post" id="camera-upload" action="/cgi-bin/koha/tools/picture-upload.pl">
236
                        [% INCLUDE 'csrf-token.inc' %]
235
                        <div class="btn-toolbar">
237
                        <div class="btn-toolbar">
236
                            <div class="btn-group">
238
                            <div class="btn-group">
237
                                <button class="btn btn-default" id="takebutton"><i class="fa fa-camera"></i> Take photo</button>
239
                                <button class="btn btn-default" id="takebutton"><i class="fa fa-camera"></i> Take photo</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/cities-admin-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="city_search" role="tabpanel" class="tab-pane active">
5
        <div id="city_search" role="tabpanel" class="tab-pane active">
6
            <form action="[% script_name | html %]" method="post">
6
            <form action="[% script_name | html %]" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label">Search cities</label>
9
                    <label class="control-label">Search cities</label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/contracts-admin-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="contract_description_search" role="tabpanel" class="tab-pane active">
5
        <div id="contract_description_search" role="tabpanel" class="tab-pane active">
6
            <form action="[% script_name | html %]" method="post">
6
            <form action="[% script_name | html %]" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label">Search contracts</label>
9
                    <label class="control-label">Search contracts</label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/currencies-admin-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="currency_search" role="tabpanel" class="tab-pane active">
5
        <div id="currency_search" role="tabpanel" class="tab-pane active">
6
            <form action="[% script_name | html %]" method="post">
6
            <form action="[% script_name | html %]" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label">Search currencies</label>
9
                    <label class="control-label">Search currencies</label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/desks-admin-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="desk_search" role="tabpanel" class="tab-pane active">
5
        <div id="desk_search" role="tabpanel" class="tab-pane active">
6
            <form action="[% script_name|html %]" method="post">
6
            <form action="[% script_name|html %]" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label">Search desks</label>
9
                    <label class="control-label">Search desks</label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/letters-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="notices_search" role="tabpanel" class="tab-pane active">
5
        <div id="notices_search" role="tabpanel" class="tab-pane active">
6
            <form action="/cgi-bin/koha/tools/letter.pl" method="post">
6
            <form action="/cgi-bin/koha/tools/letter.pl" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label">Search notices</label>
9
                    <label class="control-label">Search notices</label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/mana/mana-share-report.inc (+1 lines)
Lines 2-7 Link Here
2
    <div class="modal-dialog modal-wide" role="document">
2
    <div class="modal-dialog modal-wide" role="document">
3
        <div class="modal-content">
3
        <div class="modal-content">
4
            <form method="post" id="mana_share_form" action="/cgi-bin/koha/reports/guided_reports.pl">
4
            <form method="post" id="mana_share_form" action="/cgi-bin/koha/reports/guided_reports.pl">
5
                [% INCLUDE 'csrf-token.inc' %]
5
                <div class="modal-header">
6
                <div class="modal-header">
6
                    <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
7
                    <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
7
                    <h3 id="mana_share_modal_label">Share with Mana</h3>
8
                    <h3 id="mana_share_modal_label">Share with Mana</h3>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/member-search-box.inc (+1 lines)
Lines 11-16 Link Here
11
        <div id="patron_search" role="tabpanel" class="tab-pane">
11
        <div id="patron_search" role="tabpanel" class="tab-pane">
12
    [% END %]
12
    [% END %]
13
        <form method="post" action="/cgi-bin/koha/members/member.pl">
13
        <form method="post" action="/cgi-bin/koha/members/member.pl">
14
            [% INCLUDE 'csrf-token.inc' %]
14
            <input type="hidden" name="quicksearch" value="1" />
15
            <input type="hidden" name="quicksearch" value="1" />
15
16
16
            <div class="form-title">
17
            <div class="form-title">
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/members-toolbar.inc (+1 lines)
Lines 112-117 Link Here
112
    <div class="modal-dialog">
112
    <div class="modal-dialog">
113
        <div class="modal-content">
113
        <div class="modal-content">
114
            <form method="post" action="/cgi-bin/koha/circ/add_message.pl" id="message_form" name="message_f">
114
            <form method="post" action="/cgi-bin/koha/circ/add_message.pl" id="message_form" name="message_f">
115
                [% INCLUDE 'csrf-token.inc' %]
115
                <div class="modal-header">
116
                <div class="modal-header">
116
                    <h3>Leave a message</h3>
117
                    <h3>Leave a message</h3>
117
                </div>
118
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/modals/cataloguing_create_av.inc (+1 lines)
Lines 6-11 Link Here
6
                <h3 id="avCreateLabel">Create a new authorized value</h3>
6
                <h3 id="avCreateLabel">Create a new authorized value</h3>
7
            </div>
7
            </div>
8
            <form id="add_new_av" method="post">
8
            <form id="add_new_av" method="post">
9
                [% INCLUDE 'csrf-token.inc' %]
9
                <div class="modal-body">
10
                <div class="modal-body">
10
                    <fieldset class="rows">
11
                    <fieldset class="rows">
11
                        <ol>
12
                        <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/modals/serials_multi_receiving.inc (+1 lines)
Lines 2-7 Link Here
2
    <div class="modal-dialog">
2
    <div class="modal-dialog">
3
        <div class="modal-content">
3
        <div class="modal-content">
4
            <form action="/cgi-bin/koha/serials/serials-collection.pl" method="post">
4
            <form action="/cgi-bin/koha/serials/serials-collection.pl" method="post">
5
                [% INCLUDE 'csrf-token.inc' %]
5
                <div class="modal-body">
6
                <div class="modal-body">
6
                    <fieldset class="rows">
7
                    <fieldset class="rows">
7
                        <legend>Multi receiving</legend>
8
                        <legend>Multi receiving</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/patron-detail-tabs.inc (+3 lines)
Lines 138-143 Link Here
138
            [% WRAPPER tab_panel tabname="holds" %]
138
            [% WRAPPER tab_panel tabname="holds" %]
139
                [% IF ( holds_count ) %]
139
                [% IF ( holds_count ) %]
140
                    <form action="/cgi-bin/koha/reserve/modrequest.pl" method="post">
140
                    <form action="/cgi-bin/koha/reserve/modrequest.pl" method="post">
141
                        [% INCLUDE 'csrf-token.inc' %]
141
                        <input type="hidden" name="from" value="circ" />
142
                        <input type="hidden" name="from" value="circ" />
142
                        <table id="holds-table" style="width: 100% !Important;">
143
                        <table id="holds-table" style="width: 100% !Important;">
143
                            <thead>
144
                            <thead>
Lines 175-180 Link Here
175
176
176
                    [% IF Koha.Preference('SuspendHoldsIntranet') %]
177
                    [% IF Koha.Preference('SuspendHoldsIntranet') %]
177
                        <form action="/cgi-bin/koha/reserve/modrequest_suspendall.pl" method="post">
178
                        <form action="/cgi-bin/koha/reserve/modrequest_suspendall.pl" method="post">
179
                            [% INCLUDE 'csrf-token.inc' %]
178
                            <fieldset class="action">
180
                            <fieldset class="action">
179
                                <input type="hidden" name="from" value="[% patronpage | html %]" />
181
                                <input type="hidden" name="from" value="[% patronpage | html %]" />
180
                                <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
182
                                <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
Lines 189-194 Link Here
189
                        </form>
191
                        </form>
190
192
191
                        <form action="/cgi-bin/koha/reserve/modrequest_suspendall.pl" method="post">
193
                        <form action="/cgi-bin/koha/reserve/modrequest_suspendall.pl" method="post">
194
                            [% INCLUDE 'csrf-token.inc' %]
192
                            <fieldset class="action">
195
                            <fieldset class="action">
193
                                <input type="hidden" name="from" value="borrower" />
196
                                <input type="hidden" name="from" value="borrower" />
194
                                <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
197
                                <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/patron-restrictions-tab.inc (+1 lines)
Lines 47-52 Link Here
47
[% IF CAN_user_borrowers_edit_borrowers && CAN_user_circulate_manage_restrictions %]
47
[% IF CAN_user_borrowers_edit_borrowers && CAN_user_circulate_manage_restrictions %]
48
    <p><a href="#" id="add_manual_restriction"><i class="fa fa-plus"></i> Add manual restriction</a></p>
48
    <p><a href="#" id="add_manual_restriction"><i class="fa fa-plus"></i> Add manual restriction</a></p>
49
    <form method="post" action="/cgi-bin/koha/members/mod_debarment.pl" class="clearfix">
49
    <form method="post" action="/cgi-bin/koha/members/mod_debarment.pl" class="clearfix">
50
        [% INCLUDE 'csrf-token.inc' %]
50
        <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
51
        <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
51
        <input type="hidden" name="action" value="add" />
52
        <input type="hidden" name="action" value="add" />
52
        <fieldset class="rows" id="manual_restriction_form">
53
        <fieldset class="rows" id="manual_restriction_form">
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/patron-search-box.inc (+1 lines)
Lines 6-11 Link Here
6
        <div id="circ_search" role="tabpanel" class="tab-pane">
6
        <div id="circ_search" role="tabpanel" class="tab-pane">
7
    [% END %]
7
    [% END %]
8
        <form action="/cgi-bin/koha/circ/circulation.pl" id="patronsearch" method="post">
8
        <form action="/cgi-bin/koha/circ/circulation.pl" id="patronsearch" method="post">
9
            [% INCLUDE 'csrf-token.inc' %]
9
            <div class="form-title">
10
            <div class="form-title">
10
                <label class="control-label" for="findborrower">Check out</label>
11
                <label class="control-label" for="findborrower">Check out</label>
11
            </div>
12
            </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/patron_messages.inc (+1 lines)
Lines 332-337 Link Here
332
            <div class="modal-dialog">
332
            <div class="modal-dialog">
333
                <div class="modal-content">
333
                <div class="modal-content">
334
                    <form method="post" action="/cgi-bin/koha/circ/add_message.pl" id="message_form" name="message_f">
334
                    <form method="post" action="/cgi-bin/koha/circ/add_message.pl" id="message_form" name="message_f">
335
                        [% INCLUDE 'csrf-token.inc' %]
335
                        <input type="hidden" name="message_id" value="[% pm.message_id | html %]"/>
336
                        <input type="hidden" name="message_id" value="[% pm.message_id | html %]"/>
336
                        <div class="modal-header">
337
                        <div class="modal-header">
337
                            <h3>Edit message</h3>
338
                            <h3>Edit message</h3>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/patrons-admin-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="patron_category_search" role="tabpanel" class="tab-pane active">
5
        <div id="patron_category_search" role="tabpanel" class="tab-pane active">
6
            <form action="[% script_name | html %]" method="post">
6
            <form action="[% script_name | html %]" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label">Search patron categories</label>
9
                    <label class="control-label">Search patron categories</label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/renew-search-box.inc (+1 lines)
Lines 6-11 Link Here
6
        <div id="renew_search" role="tabpanel" class="tab-pane">
6
        <div id="renew_search" role="tabpanel" class="tab-pane">
7
    [% END %]
7
    [% END %]
8
        <form method="post" action="/cgi-bin/koha/circ/renew.pl" autocomplete="off">
8
        <form method="post" action="/cgi-bin/koha/circ/renew.pl" autocomplete="off">
9
            [% INCLUDE 'csrf-token.inc' %]
9
            <div class="form-title">
10
            <div class="form-title">
10
                <label class="control-label">Renew</label>
11
                <label class="control-label">Renew</label>
11
            </div>
12
            </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/waiting_holds.inc (+1 lines)
Lines 67-72 Link Here
67
                <td>[% reserveloo.item.enumchron | html %]</td>
67
                <td>[% reserveloo.item.enumchron | html %]</td>
68
                <td>
68
                <td>
69
                    <form name="cancelReserve" action="waitingreserves.pl" method="post">
69
                    <form name="cancelReserve" action="waitingreserves.pl" method="post">
70
                        [% INCLUDE 'csrf-token.inc' %]
70
                        <input type="hidden" name="borrowernumber" value="[% reserveloo.borrower.borrowernumber | html %]" />
71
                        <input type="hidden" name="borrowernumber" value="[% reserveloo.borrower.borrowernumber | html %]" />
71
                        <input type="hidden" name="itemnumber" value="[% reserveloo.item.itemnumber | html %]" />
72
                        <input type="hidden" name="itemnumber" value="[% reserveloo.item.itemnumber | html %]" />
72
                        <input type="hidden" name="fbr" value="[% reserveloo.item.holdingbranch | html %]" />
73
                        <input type="hidden" name="fbr" value="[% reserveloo.item.holdingbranch | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/z3950-admin-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="z3950_search" role="tabpanel" class="tab-pane active">
5
        <div id="z3950_search" role="tabpanel" class="tab-pane active">
6
            <form action="/cgi-bin/koha/admin/z3950servers.pl" method="post">
6
            <form action="/cgi-bin/koha/admin/z3950servers.pl" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label">Search Z39.50/SRU servers</label>
9
                    <label class="control-label">Search Z39.50/SRU servers</label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/acqui-home.tt (+1 lines)
Lines 49-54 Link Here
49
    <fieldset>
49
    <fieldset>
50
        <legend>Manage orders</legend>
50
        <legend>Manage orders</legend>
51
        <form name="findsupplier" action="/cgi-bin/koha/acqui/booksellers.pl" method="post">
51
        <form name="findsupplier" action="/cgi-bin/koha/acqui/booksellers.pl" method="post">
52
            [% INCLUDE 'csrf-token.inc' %]
52
            <p><label for="supplierpage">Vendor: </label><input type="text" size="25" name="supplier" id="supplierpage" class="focus" />
53
            <p><label for="supplierpage">Vendor: </label><input type="text" size="25" name="supplier" id="supplierpage" class="focus" />
53
            <input type="submit" class="btn btn-primary" value="Search" />
54
            <input type="submit" class="btn btn-primary" value="Search" />
54
            </p>
55
            </p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/addorder.tt (+1 lines)
Lines 9-14 Link Here
9
    <div class="container-fluid">
9
    <div class="container-fluid">
10
      [% IF (not_enough_budget) %]
10
      [% IF (not_enough_budget) %]
11
        <form action="/cgi-bin/koha/acqui/addorder.pl" method="post">
11
        <form action="/cgi-bin/koha/acqui/addorder.pl" method="post">
12
            [% INCLUDE 'csrf-token.inc' %]
12
          [% FOREACH var IN vars_loop %]
13
          [% FOREACH var IN vars_loop %]
13
            [% FOREACH val IN var.values %]
14
            [% FOREACH val IN var.values %]
14
              <input type="hidden" name="[% var.name | html %]" value="[% val | html %]" />
15
              <input type="hidden" name="[% var.name | html %]" value="[% val | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/addorderiso2709.tt (+1 lines)
Lines 88-93 Link Here
88
                        ([% file_name | html %] staged on [% upload_timestamp | $KohaDates  with_hours => 1 %])
88
                        ([% file_name | html %] staged on [% upload_timestamp | $KohaDates  with_hours => 1 %])
89
                    </h1>
89
                    </h1>
90
                    <form action="/cgi-bin/koha/acqui/addorderiso2709.pl" method="post" id="Aform" class="validated">
90
                    <form action="/cgi-bin/koha/acqui/addorderiso2709.pl" method="post" id="Aform" class="validated">
91
                        [% INCLUDE 'csrf-token.inc' %]
91
                        [% WRAPPER tabs id= "tabs" %]
92
                        [% WRAPPER tabs id= "tabs" %]
92
                            [% WRAPPER tabs_nav %]
93
                            [% WRAPPER tabs_nav %]
93
                                [% WRAPPER tab_item tabname= "records_to_import" bt_active= 1 %] <span>Select to import</span> [% END %]
94
                                [% WRAPPER tab_item tabname= "records_to_import" bt_active= 1 %] <span>Select to import</span> [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt (+6 lines)
Lines 102-107 Link Here
102
                                        [% IF ( active && books_loop ) %]
102
                                        [% IF ( active && books_loop ) %]
103
                                            <div class="btn-group">
103
                                            <div class="btn-group">
104
                                                <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
104
                                                <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
105
                                                    [% INCLUDE 'csrf-token.inc' %]
105
                                                    <input type="hidden" name="op" value="email" />
106
                                                    <input type="hidden" name="op" value="email" />
106
                                                    <input type="hidden" name="basketno" value="[% basketno | html %]" />
107
                                                    <input type="hidden" name="basketno" value="[% basketno | html %]" />
107
                                                    <button type="submit" class="btn btn-default" id="emailvendorbutton"><i class="fa-solid fa-envelope"></i> E-mail order</button>
108
                                                    <button type="submit" class="btn btn-default" id="emailvendorbutton"><i class="fa-solid fa-envelope"></i> E-mail order</button>
Lines 305-310 Link Here
305
                                                    <ol>
306
                                                    <ol>
306
                                                        <li id="managedby">
307
                                                        <li id="managedby">
307
                                                            <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
308
                                                            <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
309
                                                                [% INCLUDE 'csrf-token.inc' %]
308
                                                                <span class="label">Managed by:</span>
310
                                                                <span class="label">Managed by:</span>
309
                                                                <div style="display:inline-block">
311
                                                                <div style="display:inline-block">
310
                                                                    <ul id="users_names" style="padding-left:0">
312
                                                                    <ul id="users_names" style="padding-left:0">
Lines 343-348 Link Here
343
                                                                <span class="label">&nbsp;</span>
345
                                                                <span class="label">&nbsp;</span>
344
                                                                <div>
346
                                                                <div>
345
                                                                    <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
347
                                                                    <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
348
                                                                        [% INCLUDE 'csrf-token.inc' %]
346
                                                                        <select id="select_managing_library" name="branch">
349
                                                                        <select id="select_managing_library" name="branch">
347
                                                                            <option value="">(no library)</option>
350
                                                                            <option value="">(no library)</option>
348
                                                                            [% FOREACH branch IN branches_loop %]
351
                                                                            [% FOREACH branch IN branches_loop %]
Lines 402-407 Link Here
402
                                                                    <span class="label">&nbsp;</span>
405
                                                                    <span class="label">&nbsp;</span>
403
                                                                    <div style="float:left">
406
                                                                    <div style="float:left">
404
                                                                        <form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post">
407
                                                                        <form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post">
408
                                                                            [% INCLUDE 'csrf-token.inc' %]
405
                                                                            <select id="basketgroupid" name="basketgroupid">
409
                                                                            <select id="basketgroupid" name="basketgroupid">
406
                                                                                <option value="">No group</option>
410
                                                                                <option value="">No group</option>
407
                                                                                [% FOREACH bg IN basketgroups %]
411
                                                                                [% FOREACH bg IN basketgroups %]
Lines 880-885 Link Here
880
    <div class="modal" id="noteEditor" tabindex="-1" role="dialog" aria-labelledby="noteEditorLabel">
884
    <div class="modal" id="noteEditor" tabindex="-1" role="dialog" aria-labelledby="noteEditorLabel">
881
        <div class="modal-dialog" role="document">
885
        <div class="modal-dialog" role="document">
882
            <form id="modify_order_notes" action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
886
            <form id="modify_order_notes" action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
887
                [% INCLUDE 'csrf-token.inc' %]
883
                <div class="modal-content">
888
                <div class="modal-content">
884
                    <div class="modal-header">
889
                    <div class="modal-header">
885
                        <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
890
                        <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
Lines 904-909 Link Here
904
    <div class="modal" id="dateEditor" tabindex="-1" role="dialog" aria-labelledby="dateEditorLabel">
909
    <div class="modal" id="dateEditor" tabindex="-1" role="dialog" aria-labelledby="dateEditorLabel">
905
        <div class="modal-dialog" role="document">
910
        <div class="modal-dialog" role="document">
906
            <form id="modify_estimated_delivery_date" action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
911
            <form id="modify_estimated_delivery_date" action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
912
                [% INCLUDE 'csrf-token.inc' %]
907
                <div class="modal-content">
913
                <div class="modal-content">
908
                    <div class="modal-header">
914
                    <div class="modal-header">
909
                        <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
915
                        <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basketgroup.tt (+1 lines)
Lines 202-207 Link Here
202
                            <div class="col-xs-6 col-xs-pull-6">
202
                            <div class="col-xs-6 col-xs-pull-6">
203
                        [% END %]
203
                        [% END %]
204
                            <form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post" id="groupingform" onsubmit="return submitForm(this)">
204
                            <form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post" id="groupingform" onsubmit="return submitForm(this)">
205
                                [% INCLUDE 'csrf-token.inc' %]
205
                                <fieldset id="various" class="brief">
206
                                <fieldset id="various" class="brief">
206
                                    <ol>
207
                                    <ol>
207
                                        [% UNLESS (closedbg) %]
208
                                        [% UNLESS (closedbg) %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basketheader.tt (+1 lines)
Lines 51-56 Link Here
51
        [% ELSE %]<h1>Add a basket to [% booksellername | html %]</h1>
51
        [% ELSE %]<h1>Add a basket to [% booksellername | html %]</h1>
52
        [% END %]
52
        [% END %]
53
    <form name="Aform" action="[% script_name | html %]" method="post" class="validated">
53
    <form name="Aform" action="[% script_name | html %]" method="post" class="validated">
54
        [% INCLUDE 'csrf-token.inc' %]
54
        <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
55
        <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
55
        <fieldset class="rows">
56
        <fieldset class="rows">
56
            <ol>
57
            <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/cancelorder.tt (+1 lines)
Lines 30-35 Link Here
30
30
31
      [% UNLESS ( confirmcancel ) %]
31
      [% UNLESS ( confirmcancel ) %]
32
      <form method="post" action="">
32
      <form method="post" action="">
33
          [% INCLUDE 'csrf-token.inc' %]
33
        <div class="dialog alert">
34
        <div class="dialog alert">
34
          <h1>Are you sure you want to cancel this order ([% ordernumber | html %])</h1>
35
          <h1>Are you sure you want to cancel this order ([% ordernumber | html %])</h1>
35
          <p>
36
          <p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/duplicate_orders.tt (+3 lines)
Lines 51-56 Acquisitions &rsaquo; Koha Link Here
51
51
52
[% IF op == 'search' || op == 'select' %]
52
[% IF op == 'search' || op == 'select' %]
53
<form action="/cgi-bin/koha/acqui/duplicate_orders.pl" method="post">
53
<form action="/cgi-bin/koha/acqui/duplicate_orders.pl" method="post">
54
    [% INCLUDE 'csrf-token.inc' %]
54
    <fieldset class="rows">
55
    <fieldset class="rows">
55
        <legend>
56
        <legend>
56
            [% IF op == 'search' %]
57
            [% IF op == 'search' %]
Lines 133-138 Acquisitions &rsaquo; Koha Link Here
133
134
134
[% IF op == 'select' && ( result_order_loop || selected_order_loop ) %]
135
[% IF op == 'select' && ( result_order_loop || selected_order_loop ) %]
135
<form method="post" action="/cgi-bin/koha/acqui/duplicate_orders.pl">
136
<form method="post" action="/cgi-bin/koha/acqui/duplicate_orders.pl">
137
    [% INCLUDE 'csrf-token.inc' %]
136
    <div id="orders_to_copy" class="page-section">
138
    <div id="orders_to_copy" class="page-section">
137
        <table id="table_orders">
139
        <table id="table_orders">
138
            <caption>
140
            <caption>
Lines 180-185 Acquisitions &rsaquo; Koha Link Here
180
[% ELSIF op == "batch_edit" %]
182
[% ELSIF op == "batch_edit" %]
181
183
182
<form method="post" action="/cgi-bin/koha/acqui/duplicate_orders.pl" id="batch_edit_form">
184
<form method="post" action="/cgi-bin/koha/acqui/duplicate_orders.pl" id="batch_edit_form">
185
    [% INCLUDE 'csrf-token.inc' %]
183
    <div id="accounting_details">
186
    <div id="accounting_details">
184
      <p>Duplicate all the orders with the following accounting details:</p>
187
      <p>Duplicate all the orders with the following accounting details:</p>
185
      <fieldset class="rows" style="float:none;">
188
      <fieldset class="rows" style="float:none;">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/histsearch.tt (+1 lines)
Lines 192-197 Link Here
192
192
193
[% BLOCK filter_form %]
193
[% BLOCK filter_form %]
194
    <form action="/cgi-bin/koha/acqui/histsearch.pl" method="post">
194
    <form action="/cgi-bin/koha/acqui/histsearch.pl" method="post">
195
        [% INCLUDE 'csrf-token.inc' %]
195
        [% IF ( context == "sidebar" ) %]
196
        [% IF ( context == "sidebar" ) %]
196
            <fieldset class="brief">
197
            <fieldset class="brief">
197
                <h4>Search orders</h4>
198
                <h4>Search orders</h4>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/invoice-files.tt (+1 lines)
Lines 81-86 Link Here
81
      [% IF invoiceid %]
81
      [% IF invoiceid %]
82
          <br />
82
          <br />
83
          <form method="post" action="/cgi-bin/koha/acqui/invoice-files.pl" enctype="multipart/form-data">
83
          <form method="post" action="/cgi-bin/koha/acqui/invoice-files.pl" enctype="multipart/form-data">
84
              [% INCLUDE 'csrf-token.inc' %]
84
              <fieldset class="rows">
85
              <fieldset class="rows">
85
                  <legend>Upload new file</legend>
86
                  <legend>Upload new file</legend>
86
                  <ol>
87
                  <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/invoice.tt (+2 lines)
Lines 58-63 Link Here
58
                <p>Vendor: <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid | uri %]">[% suppliername | html %]</a></p>
58
                <p>Vendor: <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid | uri %]">[% suppliername | html %]</a></p>
59
59
60
                <form action="/cgi-bin/koha/acqui/invoice.pl" method="post" class="validated">
60
                <form action="/cgi-bin/koha/acqui/invoice.pl" method="post" class="validated">
61
                    [% INCLUDE 'csrf-token.inc' %]
61
                    <fieldset class="rows">
62
                    <fieldset class="rows">
62
                        <ol>
63
                        <ol>
63
                            <li>
64
                            <li>
Lines 143-148 Link Here
143
                </form>
144
                </form>
144
145
145
                <form action="/cgi-bin/koha/acqui/invoice.pl" method="post" class="validated">
146
                <form action="/cgi-bin/koha/acqui/invoice.pl" method="post" class="validated">
147
                    [% INCLUDE 'csrf-token.inc' %]
146
                    <fieldset class="rows">
148
                    <fieldset class="rows">
147
                        <input type="hidden" name="invoiceid" value="[% invoiceid | html %]" />
149
                        <input type="hidden" name="invoiceid" value="[% invoiceid | html %]" />
148
                        <h3>Adjustments</h3>
150
                        <h3>Adjustments</h3>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/invoices.tt (+1 lines)
Lines 163-168 Link Here
163
163
164
                        <div id="merge_invoices">
164
                        <div id="merge_invoices">
165
                            <form id="merge_invoice_form" class="validated" action="/cgi-bin/koha/acqui/invoice.pl" method="post">
165
                            <form id="merge_invoice_form" class="validated" action="/cgi-bin/koha/acqui/invoice.pl" method="post">
166
                                [% INCLUDE 'csrf-token.inc' %]
166
                                <fieldset class="rows">
167
                                <fieldset class="rows">
167
                                    <ol>
168
                                    <ol>
168
                                        <li><h2>Merge invoices</h2></li>
169
                                        <li><h2>Merge invoices</h2></li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/lateorders.tt (+3 lines)
Lines 48-53 Link Here
48
[% END %]
48
[% END %]
49
[% IF lateorders.size %]
49
[% IF lateorders.size %]
50
<form action="lateorders.pl" name="claim" method="post">
50
<form action="lateorders.pl" name="claim" method="post">
51
    [% INCLUDE 'csrf-token.inc' %]
51
  <input type="hidden" name="op" value="send_alert" />
52
  <input type="hidden" name="op" value="send_alert" />
52
  <input type="hidden" name="delay" value="[% delay | html %]" />
53
  <input type="hidden" name="delay" value="[% delay | html %]" />
53
  <input type="hidden" name="booksellerid" value="[% bookseller_filter.id | html %]" />
54
  <input type="hidden" name="booksellerid" value="[% bookseller_filter.id | html %]" />
Lines 272-277 Link Here
272
<div class="modal" id="noteEditor" tabindex="-1" role="dialog" aria-labelledby="noteEditorLabel">
273
<div class="modal" id="noteEditor" tabindex="-1" role="dialog" aria-labelledby="noteEditorLabel">
273
    <div class="modal-dialog" role="document">
274
    <div class="modal-dialog" role="document">
274
        <form id="modify_order_notes" action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
275
        <form id="modify_order_notes" action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
276
            [% INCLUDE 'csrf-token.inc' %]
275
            <div class="modal-content">
277
            <div class="modal-content">
276
                <div class="modal-header">
278
                <div class="modal-header">
277
                    <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
279
                    <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
Lines 296-301 Link Here
296
<div class="modal" id="dateEditor" tabindex="-1" role="dialog" aria-labelledby="dateEditorLabel">
298
<div class="modal" id="dateEditor" tabindex="-1" role="dialog" aria-labelledby="dateEditorLabel">
297
    <div class="modal-dialog" role="document">
299
    <div class="modal-dialog" role="document">
298
        <form id="modify_estimated_delivery_date" action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
300
        <form id="modify_estimated_delivery_date" action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
301
            [% INCLUDE 'csrf-token.inc' %]
299
            <div class="modal-content">
302
            <div class="modal-content">
300
                <div class="modal-header">
303
                <div class="modal-header">
301
                    <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
304
                    <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/moddeliverydate.tt (+1 lines)
Lines 32-37 Link Here
32
32
33
      <h1>Change estimated delivery date</h1>
33
      <h1>Change estimated delivery date</h1>
34
      <form action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
34
      <form action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
35
          [% INCLUDE 'csrf-token.inc' %]
35
        <fieldset class="brief">
36
        <fieldset class="brief">
36
          <label for="estimated_delivery_date">Estimated delivery date:</label>
37
          <label for="estimated_delivery_date">Estimated delivery date:</label>
37
          <input type="text" id="estimated_delivery_date" size="10" name="estimated_delivery_date" class="flatpickr" value="[% estimated_delivery_date | html %]"/>
38
          <input type="text" id="estimated_delivery_date" size="10" name="estimated_delivery_date" class="flatpickr" value="[% estimated_delivery_date | html %]"/>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/modordernotes.tt (+1 lines)
Lines 43-48 Link Here
43
          <h1>Change order internal note (order no. [% ordernumber | html %])</h1>
43
          <h1>Change order internal note (order no. [% ordernumber | html %])</h1>
44
      [% END %]
44
      [% END %]
45
      <form action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
45
      <form action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
46
          [% INCLUDE 'csrf-token.inc' %]
46
        <fieldset class="brief">
47
        <fieldset class="brief">
47
          <label for="ordernotes">Note:</label>
48
          <label for="ordernotes">Note:</label>
48
          <textarea id="ordernotes" name="ordernotes" rows="3" cols="30" class="focus">[% ordernotes | html %]</textarea>
49
          <textarea id="ordernotes" name="ordernotes" rows="3" cols="30" class="focus">[% ordernotes | html %]</textarea>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/neworderempty.tt (+2 lines)
Lines 281-286 Link Here
281
        [% IF ( creationdate ) %]<li><span class="label">Open on:</span>  [% creationdate | $KohaDates %]</li>[% END %]
281
        [% IF ( creationdate ) %]<li><span class="label">Open on:</span>  [% creationdate | $KohaDates %]</li>[% END %]
282
        [% IF ( closedate ) %]
282
        [% IF ( closedate ) %]
283
        <form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post">
283
        <form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post">
284
            [% INCLUDE 'csrf-token.inc' %]
284
        <li><span class="label">Closed on:</span>  [% closedate | $KohaDates %]</li>
285
        <li><span class="label">Closed on:</span>  [% closedate | $KohaDates %]</li>
285
        [% IF ( basketgroups ) %]
286
        [% IF ( basketgroups ) %]
286
            <li>Basketgroup: <select id="basketgroupid" name="basketgroupid">
287
            <li>Basketgroup: <select id="basketgroupid" name="basketgroupid">
Lines 306-311 Link Here
306
[% END %]
307
[% END %]
307
308
308
<form action="/cgi-bin/koha/acqui/addorder.pl" method="post" class="validated noEnterSubmit" id="Aform" onsubmit="return Check(this);" >
309
<form action="/cgi-bin/koha/acqui/addorder.pl" method="post" class="validated noEnterSubmit" id="Aform" onsubmit="return Check(this);" >
310
    [% INCLUDE 'csrf-token.inc' %]
309
311
310
    <fieldset class="rows">
312
    <fieldset class="rows">
311
        <legend>Patrons</legend>
313
        <legend>Patrons</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/supplier.tt (+1 lines)
Lines 145-150 div.rows { padding: 1rem; } Link Here
145
[% UNLESS ( enter ) %][% INCLUDE 'acquisitions-toolbar.inc' %][% END %]
145
[% UNLESS ( enter ) %][% INCLUDE 'acquisitions-toolbar.inc' %][% END %]
146
[% IF ( enter ) %]
146
[% IF ( enter ) %]
147
    <form action="updatesupplier.pl" name="updatesupplier" style="display:block" class="validated" method="post">
147
    <form action="updatesupplier.pl" name="updatesupplier" style="display:block" class="validated" method="post">
148
        [% INCLUDE 'csrf-token.inc' %]
148
        <div id="toolbar" class="btn-toolbar">
149
        <div id="toolbar" class="btn-toolbar">
149
            <button class="btn btn-primary" type="submit"><i class="fa fa-save"></i> Save</button>
150
            <button class="btn btn-primary" type="submit"><i class="fa fa-save"></i> Save</button>
150
            [% IF ( booksellerid ) %]
151
            [% IF ( booksellerid ) %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/uncertainprice.tt (+2 lines)
Lines 80-85 Link Here
80
        <div class="page-section">
80
        <div class="page-section">
81
            <h2>Order lines with uncertain prices</h2>
81
            <h2>Order lines with uncertain prices</h2>
82
            <form action="[% scriptname | html %]" method="post">
82
            <form action="[% scriptname | html %]" method="post">
83
                [% INCLUDE 'csrf-token.inc' %]
83
                <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
84
                <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
84
                <label for="owner">Orders from:</label>
85
                <label for="owner">Orders from:</label>
85
                <select id="owner" name="owner">
86
                <select id="owner" name="owner">
Lines 95-100 Link Here
95
            </form>
96
            </form>
96
        </div> <!-- /.page-section -->
97
        </div> <!-- /.page-section -->
97
        <form action="[% scriptname | html %]" method="post" id="uncertainprices">
98
        <form action="[% scriptname | html %]" method="post" id="uncertainprices">
99
            [% INCLUDE 'csrf-token.inc' %]
98
            <fieldset class="rows">
100
            <fieldset class="rows">
99
                <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
101
                <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
100
                <input type="hidden" name="op" value="validate" />
102
                <input type="hidden" name="op" value="validate" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/vendor_issues.tt (+2 lines)
Lines 92-97 Link Here
92
    [% END %]
92
    [% END %]
93
93
94
    <form action="/cgi-bin/koha/acqui/vendor_issues.pl" name="Aform" method="post" class="validated">
94
    <form action="/cgi-bin/koha/acqui/vendor_issues.pl" name="Aform" method="post" class="validated">
95
        [% INCLUDE 'csrf-token.inc' %]
95
        <input type="hidden" name="op" value="add_validate" />
96
        <input type="hidden" name="op" value="add_validate" />
96
        <input type="hidden" name="booksellerid" value="[% vendor.id | html %]" />
97
        <input type="hidden" name="booksellerid" value="[% vendor.id | html %]" />
97
        <input type="hidden" name="issue_id" value="[% issue.issue_id| html %]" />
98
        <input type="hidden" name="issue_id" value="[% issue.issue_id| html %]" />
Lines 133-138 Link Here
133
    <div class="dialog alert">
134
    <div class="dialog alert">
134
        <h1>Delete issue #[% issue.issue_id | html %]?<h1>
135
        <h1>Delete issue #[% issue.issue_id | html %]?<h1>
135
        <form action="/cgi-bin/koha/acqui/vendor_issues.pl" method="post">
136
        <form action="/cgi-bin/koha/acqui/vendor_issues.pl" method="post">
137
            [% INCLUDE 'csrf-token.inc' %]
136
            <input type="hidden" name="op" value="delete_confirmed" />
138
            <input type="hidden" name="op" value="delete_confirmed" />
137
            <input type="hidden" name="issue_id" value="[% issue.issue_id | html %]" />
139
            <input type="hidden" name="issue_id" value="[% issue.issue_id | html %]" />
138
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
140
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/z3950_search.tt (+2 lines)
Lines 73-78 tr.selected td { Link Here
73
<div class="main container-fluid">
73
<div class="main container-fluid">
74
      [% IF ( opsearch ) %]
74
      [% IF ( opsearch ) %]
75
    <form method="post" action="z3950_search.pl" name="f" class="checkboxed">
75
    <form method="post" action="z3950_search.pl" name="f" class="checkboxed">
76
        [% INCLUDE 'csrf-token.inc' %]
76
    <div class="row">
77
    <div class="row">
77
    <div class="col-sm-6">
78
    <div class="col-sm-6">
78
    <h1>Order from external source</h1>
79
    <h1>Order from external source</h1>
Lines 237-242 tr.selected td { Link Here
237
    </div>
238
    </div>
238
239
239
    <form method="post" action="z3950_search.pl" id="page_form" name="page_form" class="checkboxed">
240
    <form method="post" action="z3950_search.pl" id="page_form" name="page_form" class="checkboxed">
241
        [% INCLUDE 'csrf-token.inc' %]
240
        <input type="hidden" name="op" id="op" value="do_search" />
242
        <input type="hidden" name="op" id="op" value="do_search" />
241
        <input type="hidden" name="current_page" id="current_page" value="[% current_page | html %]" />
243
        <input type="hidden" name="current_page" id="current_page" value="[% current_page | html %]" />
242
        <input type="hidden" id="searchtitle"  name="title" value="[% title | html %]" />
244
        <input type="hidden" id="searchtitle"  name="title" value="[% title | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/additional-fields.tt (+1 lines)
Lines 179-184 Link Here
179
            <h1>Add field</h1>
179
            <h1>Add field</h1>
180
        [% END %]
180
        [% END %]
181
        <form action="" name="add_form" id="add_field" method="post">
181
        <form action="" name="add_form" id="add_field" method="post">
182
            [% INCLUDE 'csrf-token.inc' %]
182
            <fieldset class="rows">
183
            <fieldset class="rows">
183
                <ol>
184
                <ol>
184
                    <li>
185
                    <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/admin-home.tt (+1 lines)
Lines 53-58 Link Here
53
            <div class="col-md-6 sysprefs">
53
            <div class="col-md-6 sysprefs">
54
            [% IF ( CAN_user_parameters_manage_sysprefs ) %]
54
            [% IF ( CAN_user_parameters_manage_sysprefs ) %]
55
                <form action="/cgi-bin/koha/admin/preferences.pl" method="post">
55
                <form action="/cgi-bin/koha/admin/preferences.pl" method="post">
56
                    [% INCLUDE 'csrf-token.inc' %]
56
                <fieldset>
57
                <fieldset>
57
                    <h4><a href="/cgi-bin/koha/admin/preferences.pl">System preferences</a></h4>
58
                    <h4><a href="/cgi-bin/koha/admin/preferences.pl">System preferences</a></h4>
58
                    <p>Manage system preferences like MARC flavor, date format, administrator email, and templates.</p>
59
                    <p>Manage system preferences like MARC flavor, date format, administrator email, and templates.</p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/adveditorshortcuts.tt (+1 lines)
Lines 39-44 Link Here
39
                    </ul>
39
                    </ul>
40
40
41
                    <form id="adveditor_shortcuts" method="post" action="/cgi-bin/koha/admin/adveditorshortcuts.pl">
41
                    <form id="adveditor_shortcuts" method="post" action="/cgi-bin/koha/admin/adveditorshortcuts.pl">
42
                        [% INCLUDE 'csrf-token.inc' %]
42
                        <fieldset>
43
                        <fieldset>
43
                        <input type=hidden name="op" value="save" />
44
                        <input type=hidden name="op" value="save" />
44
45
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqbudgetperiods.tt (+5 lines)
Lines 148-153 Link Here
148
[% IF ( duplicate_form ) %]
148
[% IF ( duplicate_form ) %]
149
<h1>Duplicate budget</h1>
149
<h1>Duplicate budget</h1>
150
<form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" id="add_modify_budget" name="f" method="post">
150
<form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" id="add_modify_budget" name="f" method="post">
151
    [% INCLUDE 'csrf-token.inc' %]
151
    <fieldset class="rows">
152
    <fieldset class="rows">
152
    <input type="hidden" name="op" value="duplicate_budget" />
153
    <input type="hidden" name="op" value="duplicate_budget" />
153
    <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
154
    <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
Lines 217-222 Link Here
217
        <h1>Add budget</h1>
218
        <h1>Add budget</h1>
218
	[% END %]
219
	[% END %]
219
<form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" id="add_modify_budget" name="f" method="post">
220
<form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" id="add_modify_budget" name="f" method="post">
221
    [% INCLUDE 'csrf-token.inc' %]
220
    <fieldset class="rows">
222
    <fieldset class="rows">
221
    <!-- ################################################################################# -->
223
    <!-- ################################################################################# -->
222
    <!-- display information about the budget period that must be added or modified -->
224
    <!-- display information about the budget period that must be added or modified -->
Lines 309-319 Link Here
309
    <!-- ############################################################# -->
311
    <!-- ############################################################# -->
310
312
311
    <form action="[% script_name | html %]" method="post">
313
    <form action="[% script_name | html %]" method="post">
314
        [% INCLUDE 'csrf-token.inc' %]
312
        <input type="hidden" name="op" value="delete_confirmed" />
315
        <input type="hidden" name="op" value="delete_confirmed" />
313
        <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
316
        <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
314
        <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
317
        <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
315
    </form>
318
    </form>
316
    <form action="[% script_name | html %]" method="post">
319
    <form action="[% script_name | html %]" method="post">
320
        [% INCLUDE 'csrf-token.inc' %]
317
        <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
321
        <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
318
    </form>
322
    </form>
319
    [% END %]
323
    [% END %]
Lines 355-360 Link Here
355
          </tbody>
359
          </tbody>
356
        </table>
360
        </table>
357
        <form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" name="f" method="post" id="move_form">
361
        <form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" name="f" method="post" id="move_form">
362
            [% INCLUDE 'csrf-token.inc' %]
358
          <fieldset class="rows">
363
          <fieldset class="rows">
359
            <ol>
364
            <ol>
360
              <li>
365
              <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqbudgets.tt (+2 lines)
Lines 234-239 Link Here
234
<!-- create add/mod entry form -->
234
<!-- create add/mod entry form -->
235
[% IF op == 'add_form' && !error_not_authorised_to_modify %]
235
[% IF op == 'add_form' && !error_not_authorised_to_modify %]
236
<form action="/cgi-bin/koha/admin/aqbudgets.pl" id="edit_fund" name="Aform" method="post">
236
<form action="/cgi-bin/koha/admin/aqbudgets.pl" id="edit_fund" name="Aform" method="post">
237
    [% INCLUDE 'csrf-token.inc' %]
237
    <fieldset class="rows">
238
    <fieldset class="rows">
238
        <legend><h1>[% IF ( budget_id ) %]<span>Modify fund</span>[% ELSE %]<span>Add fund</span>[% END %]
239
        <legend><h1>[% IF ( budget_id ) %]<span>Modify fund</span>[% ELSE %]<span>Add fund</span>[% END %]
239
    [% IF ( budget_period_description ) %]
240
    [% IF ( budget_period_description ) %]
Lines 414-419 Link Here
414
        </table>
415
        </table>
415
416
416
        <form action="/cgi-bin/koha/admin/aqbudgets.pl" method="post">
417
        <form action="/cgi-bin/koha/admin/aqbudgets.pl" method="post">
418
            [% INCLUDE 'csrf-token.inc' %]
417
            <input type="hidden" name="op" value="delete_confirmed" />
419
            <input type="hidden" name="op" value="delete_confirmed" />
418
            <input type="hidden" name="budget_id" value="[% budget_id | html %]" />
420
            <input type="hidden" name="budget_id" value="[% budget_id | html %]" />
419
            <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
421
            <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqcontract.tt (+4 lines)
Lines 87-92 Link Here
87
            [% IF ( add_form ) %]
87
            [% IF ( add_form ) %]
88
                <div class="page-section">
88
                <div class="page-section">
89
                    <form name="Aform" action="/cgi-bin/koha/admin/aqcontract.pl" id="add_modify_contract" method="post">
89
                    <form name="Aform" action="/cgi-bin/koha/admin/aqcontract.pl" id="add_modify_contract" method="post">
90
                        [% INCLUDE 'csrf-token.inc' %]
90
                        <input type="hidden" name="op" value="add_validate" />
91
                        <input type="hidden" name="op" value="add_validate" />
91
                        <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
92
                        <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
92
                        <input type="hidden" name="checked" value="0" />
93
                        <input type="hidden" name="checked" value="0" />
Lines 131-136 Link Here
131
            [% IF ( add_validate ) %]
132
            [% IF ( add_validate ) %]
132
                <h1>Data recorded</h1>
133
                <h1>Data recorded</h1>
133
                <form action="[% script_name | html %]" method="post">
134
                <form action="[% script_name | html %]" method="post">
135
                    [% INCLUDE 'csrf-token.inc' %]
134
                    <input type="submit" class="btn btn-primary" value="OK" />
136
                    <input type="submit" class="btn btn-primary" value="OK" />
135
                </form>
137
                </form>
136
            [% END %]
138
            [% END %]
Lines 146-151 Link Here
146
                            <tr><th scope="row">Vendor:</th><td>[% booksellername | html %]</td></tr>
148
                            <tr><th scope="row">Vendor:</th><td>[% booksellername | html %]</td></tr>
147
                        </table>
149
                        </table>
148
                        <form action="[% script_name | html %]" method="post">
150
                        <form action="[% script_name | html %]" method="post">
151
                            [% INCLUDE 'csrf-token.inc' %]
149
                            <input type="hidden" name="op" value="delete_confirmed" />
152
                            <input type="hidden" name="op" value="delete_confirmed" />
150
                            <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
153
                            <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
151
                            <input type="hidden" name="contractnumber" value="[% contractnumber | html %]" />
154
                            <input type="hidden" name="contractnumber" value="[% contractnumber | html %]" />
Lines 161-166 Link Here
161
            [% IF ( delete_confirmed ) %]
164
            [% IF ( delete_confirmed ) %]
162
                <h1>Contract deleted</h1>
165
                <h1>Contract deleted</h1>
163
                <form action="[% script_name | html %]" method="post">
166
                <form action="[% script_name | html %]" method="post">
167
                    [% INCLUDE 'csrf-token.inc' %]
164
                    <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
168
                    <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
165
                    <input type="submit" class="btn btn-primary" value="OK" />
169
                    <input type="submit" class="btn btn-primary" value="OK" />
166
                </form>
170
                </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqplan.tt (+3 lines)
Lines 39-44 Link Here
39
[% INCLUDE 'budgets-admin-toolbar.inc' %]
39
[% INCLUDE 'budgets-admin-toolbar.inc' %]
40
40
41
<form method="post" id="Aform" name="Aform"  action="/cgi-bin/koha/admin/aqplan.pl">
41
<form method="post" id="Aform" name="Aform"  action="/cgi-bin/koha/admin/aqplan.pl">
42
    [% INCLUDE 'csrf-token.inc' %]
42
<h1>Planning for [% budget_period_description | html %] [% PROCESS planning plan=authcat %]</h1>
43
<h1>Planning for [% budget_period_description | html %] [% PROCESS planning plan=authcat %]</h1>
43
<input type="hidden" name="authcat" value="[% authcat | html %]" />
44
<input type="hidden" name="authcat" value="[% authcat | html %]" />
44
<!-- Budget Lines -->
45
<!-- Budget Lines -->
Lines 195-200 Link Here
195
            <aside>
196
            <aside>
196
197
197
<form method="post" action="/cgi-bin/koha/admin/aqplan.pl">
198
<form method="post" action="/cgi-bin/koha/admin/aqplan.pl">
199
    [% INCLUDE 'csrf-token.inc' %]
198
    <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
200
    <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
199
<fieldset class="brief">
201
<fieldset class="brief">
200
<h4>Filter</h4>
202
<h4>Filter</h4>
Lines 255-260 Link Here
255
</form>
257
</form>
256
[% IF ( budget_lines ) %]
258
[% IF ( budget_lines ) %]
257
<form method="post" action="/cgi-bin/koha/admin/aqplan.pl">
259
<form method="post" action="/cgi-bin/koha/admin/aqplan.pl">
260
    [% INCLUDE 'csrf-token.inc' %]
258
<fieldset class="brief">
261
<fieldset class="brief">
259
<h4>Export</h4>
262
<h4>Export</h4>
260
    <ol>
263
    <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/audio_alerts.tt (+2 lines)
Lines 33-38 Link Here
33
                </div>
33
                </div>
34
34
35
                <form id="new-alert-form" action="audio_alerts.pl" method="post" class="validated">
35
                <form id="new-alert-form" action="audio_alerts.pl" method="post" class="validated">
36
                    [% INCLUDE 'csrf-token.inc' %]
36
                    <fieldset class="rows">
37
                    <fieldset class="rows">
37
                        <legend><h1><span class="create-alert">Add new alert</span><span class="edit-alert">Edit alert</span></h1></legend>
38
                        <legend><h1><span class="create-alert">Add new alert</span><span class="edit-alert">Edit alert</span></h1></legend>
38
39
Lines 82-87 Link Here
82
                </form>
83
                </form>
83
84
84
                <form id="delete-alert-form" action="audio_alerts.pl" method="post">
85
                <form id="delete-alert-form" action="audio_alerts.pl" method="post">
86
                    [% INCLUDE 'csrf-token.inc' %]
85
                    <h1>Audio alerts</h1>
87
                    <h1>Audio alerts</h1>
86
                    [%IF !( Koha.Preference('AudioAlerts') ) %]
88
                    [%IF !( Koha.Preference('AudioAlerts') ) %]
87
                        <div class="dialog alert">
89
                        <div class="dialog alert">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/auth_subfields_structure.tt (+2 lines)
Lines 77-82 Link Here
77
    [% ELSE %][% action | html %][% END %]</h1>
77
    [% ELSE %][% action | html %][% END %]</h1>
78
    <div class="hint">You can drag and drop the subfield tabs to change the order.</div>
78
    <div class="hint">You can drag and drop the subfield tabs to change the order.</div>
79
    <form action="[% script_name | html %]" name="Aform" method="post">
79
    <form action="[% script_name | html %]" name="Aform" method="post">
80
        [% INCLUDE 'csrf-token.inc' %]
80
        <input type="hidden" name="op" value="add_validate" />
81
        <input type="hidden" name="op" value="add_validate" />
81
        <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
82
        <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
82
        <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
83
        <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
Lines 279-284 Link Here
279
    <div class="dialog alert">
280
    <div class="dialog alert">
280
        <h1>Delete subfield <span class="ex">'[% ass.tagsubfield | html %]'?</span></h1>
281
        <h1>Delete subfield <span class="ex">'[% ass.tagsubfield | html %]'?</span></h1>
281
        <form action="[% delete_link | html %]" method="post">
282
        <form action="[% delete_link | html %]" method="post">
283
            [% INCLUDE 'csrf-token.inc' %]
282
            <input type="hidden" name="op" value="delete_confirmed" />
284
            <input type="hidden" name="op" value="delete_confirmed" />
283
            <table>
285
            <table>
284
                <tr><th scope="row">Subfield:</th> <td>[% ass.tagsubfield | html %]</td></tr>
286
                <tr><th scope="row">Subfield:</th> <td>[% ass.tagsubfield | html %]</td></tr>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/auth_tag_structure.tt (+5 lines)
Lines 129-134 Authority MARC framework &rsaquo; Administration &rsaquo; Koha Link Here
129
        [% END %]
129
        [% END %]
130
    </h2>
130
    </h2>
131
    <form action="[% script_name | html %]" name="Aform" method="post" class="validated">
131
    <form action="[% script_name | html %]" name="Aform" method="post" class="validated">
132
        [% INCLUDE 'csrf-token.inc' %]
132
        <input type="hidden" name="op" value="add_validate" />
133
        <input type="hidden" name="op" value="add_validate" />
133
        [% IF ( heading_modify_tag_p ) %]<input type="hidden" name="modif" value="1" />[% END %]
134
        [% IF ( heading_modify_tag_p ) %]<input type="hidden" name="modif" value="1" />[% END %]
134
        <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
135
        <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
Lines 184-189 Authority MARC framework &rsaquo; Administration &rsaquo; Koha Link Here
184
    <div class="dialog alert">
185
    <div class="dialog alert">
185
        <h3>Confirm deletion</h3>
186
        <h3>Confirm deletion</h3>
186
        <form action="[% script_name | html %]" method="post">
187
        <form action="[% script_name | html %]" method="post">
188
            [% INCLUDE 'csrf-token.inc' %]
187
            <table>
189
            <table>
188
                <tr><th scope="row">Tag: </th><td>[% searchfield | html %] [% liblibrarian | html %]</td></tr>
190
                <tr><th scope="row">Tag: </th><td>[% searchfield | html %] [% liblibrarian | html %]</td></tr>
189
            </table>
191
            </table>
Lines 202-207 Authority MARC framework &rsaquo; Administration &rsaquo; Koha Link Here
202
204
203
  <div class="dialog message">  <h3>Data deleted</h3>
205
  <div class="dialog message">  <h3>Data deleted</h3>
204
    <form action="[% script_name | html %]" method="post">
206
    <form action="[% script_name | html %]" method="post">
207
        [% INCLUDE 'csrf-token.inc' %]
205
    <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
208
    <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
206
    <input type="hidden" name="searchfield" value="[% searchfield | html %]" />
209
    <input type="hidden" name="searchfield" value="[% searchfield | html %]" />
207
    <input type="submit" value="OK" class="btn btn-primary" />
210
    <input type="submit" value="OK" class="btn btn-primary" />
Lines 210-215 Authority MARC framework &rsaquo; Administration &rsaquo; Koha Link Here
210
[% IF ( authtype_create ) %]
213
[% IF ( authtype_create ) %]
211
214
212
    <form action="[% script_name | html %]" method="post">
215
    <form action="[% script_name | html %]" method="post">
216
        [% INCLUDE 'csrf-token.inc' %]
213
        <input type="hidden" name="op" value="authtype_create_confirm" />
217
        <input type="hidden" name="op" value="authtype_create_confirm" />
214
        <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
218
        <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
215
        Create authority framework for [% authtypecode | html %] using
219
        Create authority framework for [% authtypecode | html %] using
Lines 235-240 Authority MARC framework &rsaquo; Administration &rsaquo; Koha Link Here
235
239
236
<h2>Select an authority framework</h2>
240
<h2>Select an authority framework</h2>
237
<form action="[% script_name | html %]" method="post">
241
<form action="[% script_name | html %]" method="post">
242
    [% INCLUDE 'csrf-token.inc' %]
238
    <select name="authtypecode">
243
    <select name="authtypecode">
239
    [% FOREACH authority_type IN authority_types%]
244
    [% FOREACH authority_type IN authority_types%]
240
        [% IF authority_type.authtypecode == authtypecode%]
245
        [% IF authority_type.authtypecode == authtypecode%]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/authorised_values.tt (+2 lines)
Lines 110-115 Link Here
110
                    [% END %]
110
                    [% END %]
111
111
112
                    <form action="/cgi-bin/koha/admin/authorised_values.pl" name="Aform" method="post" class="validated">
112
                    <form action="/cgi-bin/koha/admin/authorised_values.pl" name="Aform" method="post" class="validated">
113
                        [% INCLUDE 'csrf-token.inc' %]
113
                        <fieldset class="rows">
114
                        <fieldset class="rows">
114
                            [% IF action_add_category %]
115
                            [% IF action_add_category %]
115
                                <ol>
116
                                <ol>
Lines 298-303 Link Here
298
                                </form>
299
                                </form>
299
                                [% UNLESS category.is_system %]
300
                                [% UNLESS category.is_system %]
300
                                    <form id="delete_category" action="/cgi-bin/koha/admin/authorised_values.pl" method="post">
301
                                    <form id="delete_category" action="/cgi-bin/koha/admin/authorised_values.pl" method="post">
302
                                        [% INCLUDE 'csrf-token.inc' %]
301
                                        <input type="hidden" name="op" value="delete_category" />
303
                                        <input type="hidden" name="op" value="delete_category" />
302
                                        <input type="hidden" name="category_name" value="[% category.category_name | html %]" />
304
                                        <input type="hidden" name="category_name" value="[% category.category_name | html %]" />
303
                                        <button type="submit"><i class="fa fa-plus"></i> Delete category '[% category.category_name | html %]' </button>
305
                                        <button type="submit"><i class="fa fa-plus"></i> Delete category '[% category.category_name | html %]' </button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/authtypes.tt (+3 lines)
Lines 84-89 Authority types &rsaquo; Administration &rsaquo; Koha Link Here
84
84
85
[% IF op == 'add_form' %]
85
[% IF op == 'add_form' %]
86
    <form action="/cgi-bin/koha/admin/authtypes.pl" name="Aform" method="post" class="validated">
86
    <form action="/cgi-bin/koha/admin/authtypes.pl" name="Aform" method="post" class="validated">
87
        [% INCLUDE 'csrf-token.inc' %]
87
        <fieldset class="rows">
88
        <fieldset class="rows">
88
            <legend>
89
            <legend>
89
                <h1>
90
                <h1>
Lines 144-149 Authority types &rsaquo; Administration &rsaquo; Koha Link Here
144
        [% ELSE %]
145
        [% ELSE %]
145
            <h1>Confirm deletion of authority structure definition for <span class="ex">'[% authority_type.authtypetext | html %]' ([% authority_type.authtypecode | html %])</span></h1>
146
            <h1>Confirm deletion of authority structure definition for <span class="ex">'[% authority_type.authtypetext | html %]' ([% authority_type.authtypecode | html %])</span></h1>
146
            <form action="/cgi-bin/koha/admin/authtypes.pl" method="post">
147
            <form action="/cgi-bin/koha/admin/authtypes.pl" method="post">
148
                [% INCLUDE 'csrf-token.inc' %]
147
                <input type="hidden" name="op" value="delete_confirmed" />
149
                <input type="hidden" name="op" value="delete_confirmed" />
148
                <input type="hidden" name="authtypecode" value="[% authority_type.authtypecode | html %]" />
150
                <input type="hidden" name="authtypecode" value="[% authority_type.authtypecode | html %]" />
149
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
151
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
Lines 230-235 Authority types &rsaquo; Administration &rsaquo; Koha Link Here
230
                                    <h3 id="importLabelexportModal_[% authority_type.authtypecode | html %][% loop.count | html %]">Import [% authority_type.authtypecode | html %] authority type (fields and subfields) from a spreadsheet file (.csv, .ods)</h3>
232
                                    <h3 id="importLabelexportModal_[% authority_type.authtypecode | html %][% loop.count | html %]">Import [% authority_type.authtypecode | html %] authority type (fields and subfields) from a spreadsheet file (.csv, .ods)</h3>
231
                                </div>
233
                                </div>
232
                                <form action="/cgi-bin/koha/admin/import_export_authtype.pl" name="form_i_[% authority_type.authtypecode | html %]" id="form_i_[% authority_type.authtypecode | html %]" method="post" enctype="multipart/form-data" class="form_import">
234
                                <form action="/cgi-bin/koha/admin/import_export_authtype.pl" name="form_i_[% authority_type.authtypecode | html %]" id="form_i_[% authority_type.authtypecode | html %]" method="post" enctype="multipart/form-data" class="form_import">
235
                                    [% INCLUDE 'csrf-token.inc' %]
233
                                    <div class="modal-body">
236
                                    <div class="modal-body">
234
                                        <input type="hidden" name="authtypecode" value="[% authority_type.authtypecode | html %]" />
237
                                        <input type="hidden" name="authtypecode" value="[% authority_type.authtypecode | html %]" />
235
                                        <input type="hidden" name="action" value="import" />
238
                                        <input type="hidden" name="action" value="import" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/biblio_framework.tt (+4 lines)
Lines 95-100 MARC frameworks &rsaquo; Administration &rsaquo; Koha Link Here
95
[% IF op == 'add_form' %]
95
[% IF op == 'add_form' %]
96
    <h1>[% IF framework %]Modify framework text[% ELSE %]Add framework[% END %]</h1>
96
    <h1>[% IF framework %]Modify framework text[% ELSE %]Add framework[% END %]</h1>
97
    <form action="/cgi-bin/koha/admin/biblio_framework.pl" name="Aform" method="post" class="validated">
97
    <form action="/cgi-bin/koha/admin/biblio_framework.pl" name="Aform" method="post" class="validated">
98
        [% INCLUDE 'csrf-token.inc' %]
98
        <input type="hidden" name="op" value="add_validate" />
99
        <input type="hidden" name="op" value="add_validate" />
99
        <fieldset class="rows">
100
        <fieldset class="rows">
100
            <ol>
101
            <ol>
Lines 136-141 MARC frameworks &rsaquo; Administration &rsaquo; Koha Link Here
136
        [% ELSE %]
137
        [% ELSE %]
137
            <h1>Delete framework for [% framework.frameworktext | html %] ([% framework.frameworkcode | html %])?</h1>
138
            <h1>Delete framework for [% framework.frameworktext | html %] ([% framework.frameworkcode | html %])?</h1>
138
            <form class="inline" action="/cgi-bin/koha/admin/biblio_framework.pl" method="post">
139
            <form class="inline" action="/cgi-bin/koha/admin/biblio_framework.pl" method="post">
140
                [% INCLUDE 'csrf-token.inc' %]
139
                <input type="hidden" name="op" value="delete_confirmed" />
141
                <input type="hidden" name="op" value="delete_confirmed" />
140
                <input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
142
                <input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
141
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this framework</button>
143
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this framework</button>
Lines 209-214 MARC frameworks &rsaquo; Administration &rsaquo; Koha Link Here
209
                        <h1 id="importLabelexportModal_[% framework.frameworkcode | html %][% frameworks.count | html %]">Import default framework structure (fields and subfields) from a spreadsheet file (.csv or .ods)</h1>
211
                        <h1 id="importLabelexportModal_[% framework.frameworkcode | html %][% frameworks.count | html %]">Import default framework structure (fields and subfields) from a spreadsheet file (.csv or .ods)</h1>
210
                    </div> <!-- /.modal-header -->
212
                    </div> <!-- /.modal-header -->
211
                    <form action="/cgi-bin/koha/admin/import_export_framework.pl" name="form_i_default" id="form_i_default" method="post" enctype="multipart/form-data" class="form_import">
213
                    <form action="/cgi-bin/koha/admin/import_export_framework.pl" name="form_i_default" id="form_i_default" method="post" enctype="multipart/form-data" class="form_import">
214
                        [% INCLUDE 'csrf-token.inc' %]
212
                        <div class="modal-body">
215
                        <div class="modal-body">
213
                            <input type="hidden" name="frameworkcode" value="default" />
216
                            <input type="hidden" name="frameworkcode" value="default" />
214
                            <input type="hidden" name="action" value="import" />
217
                            <input type="hidden" name="action" value="import" />
Lines 279-284 MARC frameworks &rsaquo; Administration &rsaquo; Koha Link Here
279
                            <h1 id="importLabelexportModal_[% loo.frameworkcode | html %][% loop.count | html %]">Import [% loo.frameworkcode | html %] framework structure (fields and subfields) from a spreadsheet file (.csv or .ods)</h1>
282
                            <h1 id="importLabelexportModal_[% loo.frameworkcode | html %][% loop.count | html %]">Import [% loo.frameworkcode | html %] framework structure (fields and subfields) from a spreadsheet file (.csv or .ods)</h1>
280
                        </div> <!-- /.modal-header -->
283
                        </div> <!-- /.modal-header -->
281
                        <form action="/cgi-bin/koha/admin/import_export_framework.pl" name="form_i_[% loo.frameworkcode | html %]" id="form_i_[% loo.frameworkcode | html %]" method="post" enctype="multipart/form-data" class="form_import">
284
                        <form action="/cgi-bin/koha/admin/import_export_framework.pl" name="form_i_[% loo.frameworkcode | html %]" id="form_i_[% loo.frameworkcode | html %]" method="post" enctype="multipart/form-data" class="form_import">
285
                            [% INCLUDE 'csrf-token.inc' %]
282
                            <div class="modal-body">
286
                            <div class="modal-body">
283
                                <input type="hidden" name="frameworkcode" value="[% loo.frameworkcode | html %]" />
287
                                <input type="hidden" name="frameworkcode" value="[% loo.frameworkcode | html %]" />
284
                                <input type="hidden" name="action" value="import" />
288
                                <input type="hidden" name="action" value="import" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/branch_transfer_limits.tt (+1 lines)
Lines 57-62 Link Here
57
    [% END %]
57
    [% END %]
58
58
59
    <form method="post" action="branch_transfer_limits.pl">
59
    <form method="post" action="branch_transfer_limits.pl">
60
        [% INCLUDE 'csrf-token.inc' %]
60
        [% WRAPPER tab_panels %]
61
        [% WRAPPER tab_panels %]
61
            [% FOREACH codes_loo IN codes_loop %]
62
            [% FOREACH codes_loo IN codes_loop %]
62
                [% WRAPPER tab_panel tabname=codes_loo.code %]
63
                [% WRAPPER tab_panel tabname=codes_loo.code %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/branches.tt (+2 lines)
Lines 113-118 Libraries &rsaquo; Administration &rsaquo; Koha Link Here
113
[% IF op == 'add_form' %]
113
[% IF op == 'add_form' %]
114
    <h1>[% IF library %]Modify library[% ELSE %]New library[% END %]</h1>
114
    <h1>[% IF library %]Modify library[% ELSE %]New library[% END %]</h1>
115
    <form action="/cgi-bin/koha/admin/branches.pl" id="Aform" name="Aform" class="validated" method="post">
115
    <form action="/cgi-bin/koha/admin/branches.pl" id="Aform" name="Aform" class="validated" method="post">
116
        [% INCLUDE 'csrf-token.inc' %]
116
        <fieldset class="rows">
117
        <fieldset class="rows">
117
            <input type="hidden" name="op" value="add_validate" />
118
            <input type="hidden" name="op" value="add_validate" />
118
            [% IF library %]
119
            [% IF library %]
Lines 287-292 Libraries &rsaquo; Administration &rsaquo; Koha Link Here
287
[% IF op == 'delete_confirm' and not ( items_count or patrons_count )%]
288
[% IF op == 'delete_confirm' and not ( items_count or patrons_count )%]
288
    <div class="dialog alert">
289
    <div class="dialog alert">
289
        <form action="/cgi-bin/koha/admin/branches.pl" method="post">
290
        <form action="/cgi-bin/koha/admin/branches.pl" method="post">
291
            [% INCLUDE 'csrf-token.inc' %]
290
            <h1>Are you sure you want to delete [% library.branchname | html %] ([% library.branchcode | html %])?</h1>
292
            <h1>Are you sure you want to delete [% library.branchname | html %] ([% library.branchcode | html %])?</h1>
291
            <input type="hidden" name="op" value="delete_confirmed" />
293
            <input type="hidden" name="op" value="delete_confirmed" />
292
            <input type="hidden" name="branchcode" value="[% library.branchcode | html %]" />
294
            <input type="hidden" name="branchcode" value="[% library.branchcode | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/cash_registers.tt (+1 lines)
Lines 91-96 Cash registers &rsaquo; Administration &rsaquo; Koha Link Here
91
                [% IF op == 'add_form' %]
91
                [% IF op == 'add_form' %]
92
                <h1>[% IF cash_register %]Modify cash register[% ELSE %]Add new cash register[% END %]</h1>
92
                <h1>[% IF cash_register %]Modify cash register[% ELSE %]Add new cash register[% END %]</h1>
93
                <form action="/cgi-bin/koha/admin/cash_registers.pl" id="Aform" name="Aform" class="validated" method="post">
93
                <form action="/cgi-bin/koha/admin/cash_registers.pl" id="Aform" name="Aform" class="validated" method="post">
94
                    [% INCLUDE 'csrf-token.inc' %]
94
95
95
                    <fieldset class="rows">
96
                    <fieldset class="rows">
96
                        <input type="hidden" name="op" value="add_validate" />
97
                        <input type="hidden" name="op" value="add_validate" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/categories.tt (+2 lines)
Lines 113-118 Link Here
113
113
114
[% IF op == 'add_form' %]
114
[% IF op == 'add_form' %]
115
    <form id="category_form" action="/cgi-bin/koha/admin/categories.pl" method="post">
115
    <form id="category_form" action="/cgi-bin/koha/admin/categories.pl" method="post">
116
        [% INCLUDE 'csrf-token.inc' %]
116
        <input type="hidden" name="op" value="add_validate" />
117
        <input type="hidden" name="op" value="add_validate" />
117
        <input type="hidden" name="checked" value="0" />
118
        <input type="hidden" name="checked" value="0" />
118
        [% IF category %]
119
        [% IF category %]
Lines 436-441 Link Here
436
437
437
[% IF op == 'delete_confirm' %]
438
[% IF op == 'delete_confirm' %]
438
    <form action="/cgi-bin/koha/admin/categories.pl" method="post">
439
    <form action="/cgi-bin/koha/admin/categories.pl" method="post">
440
        [% INCLUDE 'csrf-token.inc' %]
439
        <fieldset>
441
        <fieldset>
440
            <legend>
442
            <legend>
441
                <h1>
443
                <h1>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/cities.tt (+2 lines)
Lines 97-102 Link Here
97
    [% END %]
97
    [% END %]
98
98
99
    <form action="/cgi-bin/koha/admin/cities.pl" name="Aform" method="post" class="validated">
99
    <form action="/cgi-bin/koha/admin/cities.pl" name="Aform" method="post" class="validated">
100
        [% INCLUDE 'csrf-token.inc' %]
100
        <input type="hidden" name="op" value="add_validate" />
101
        <input type="hidden" name="op" value="add_validate" />
101
        <input type="hidden" name="cityid" value="[% city.cityid | html %]" />
102
        <input type="hidden" name="cityid" value="[% city.cityid | html %]" />
102
103
Lines 152-157 Link Here
152
            </tr>
153
            </tr>
153
        </table>
154
        </table>
154
        <form action="/cgi-bin/koha/admin/cities.pl" method="post">
155
        <form action="/cgi-bin/koha/admin/cities.pl" method="post">
156
            [% INCLUDE 'csrf-token.inc' %]
155
            <input type="hidden" name="op" value="delete_confirmed" />
157
            <input type="hidden" name="op" value="delete_confirmed" />
156
            <input type="hidden" name="cityid" value="[% city.cityid | html %]" />
158
            <input type="hidden" name="cityid" value="[% city.cityid | html %]" />
157
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
159
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/classsources.tt (+3 lines)
Lines 142-147 Classification sources &rsaquo; Administration &rsaquo; Koha Link Here
142
<h1>Add classification source</h1>
142
<h1>Add classification source</h1>
143
  [% END %]
143
  [% END %]
144
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
144
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
145
    [% INCLUDE 'csrf-token.inc' %]
145
  <input type="hidden" name="op" value="add_source_validate" />
146
  <input type="hidden" name="op" value="add_source_validate" />
146
  <fieldset class="rows">
147
  <fieldset class="rows">
147
    <ol>
148
    <ol>
Lines 206-211 Classification sources &rsaquo; Administration &rsaquo; Koha Link Here
206
<h1>Add filing rule</h1>
207
<h1>Add filing rule</h1>
207
  [% END %]
208
  [% END %]
208
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
209
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
210
    [% INCLUDE 'csrf-token.inc' %]
209
  <input type="hidden" name="op" value="add_sort_rule_validate" />
211
  <input type="hidden" name="op" value="add_sort_rule_validate" />
210
  <fieldset class="rows">
212
  <fieldset class="rows">
211
    <ol>
213
    <ol>
Lines 252-257 Classification sources &rsaquo; Administration &rsaquo; Koha Link Here
252
<h1>Add splitting rule</h1>
254
<h1>Add splitting rule</h1>
253
  [% END %]
255
  [% END %]
254
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
256
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
257
    [% INCLUDE 'csrf-token.inc' %]
255
  <input type="hidden" name="op" value="add_split_rule_validate" />
258
  <input type="hidden" name="op" value="add_split_rule_validate" />
256
  <fieldset class="rows">
259
  <fieldset class="rows">
257
    <ol>
260
    <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/clone-rules.tt (+1 lines)
Lines 46-51 Link Here
46
46
47
    <p class="help">Use carefully! If the destination library already has circulation and fine rules, they will be deleted without warning!</p>
47
    <p class="help">Use carefully! If the destination library already has circulation and fine rules, they will be deleted without warning!</p>
48
    <form action="/cgi-bin/koha/admin/clone-rules.pl" method="post">
48
    <form action="/cgi-bin/koha/admin/clone-rules.pl" method="post">
49
        [% INCLUDE 'csrf-token.inc' %]
49
        [% UNLESS ( frombranch ) %]
50
        [% UNLESS ( frombranch ) %]
50
            <fieldset>
51
            <fieldset>
51
                <legend>Please choose a library to clone rules from:</legend>
52
                <legend>Please choose a library to clone rules from:</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/columns_settings.tt (+1 lines)
Lines 12-17 Link Here
12
    [% END %]
12
    [% END %]
13
    <div class="pagelist">
13
    <div class="pagelist">
14
        <form method="post" action="/cgi-bin/koha/admin/columns_settings.pl">
14
        <form method="post" action="/cgi-bin/koha/admin/columns_settings.pl">
15
            [% INCLUDE 'csrf-token.inc' %]
15
            <input type="hidden" name="action" value="save" />
16
            <input type="hidden" name="action" value="save" />
16
            <input type="hidden" name="module" value="[% modulename | html %]" />
17
            <input type="hidden" name="module" value="[% modulename | html %]" />
17
            [% IF module.keys and module.keys.size > 0 %]
18
            [% IF module.keys and module.keys.size > 0 %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/credit_types.tt (+1 lines)
Lines 80-85 Link Here
80
                    [% END %]
80
                    [% END %]
81
81
82
                    <form action="/cgi-bin/koha/admin/credit_types.pl" name="Aform" method="post" class="validated">
82
                    <form action="/cgi-bin/koha/admin/credit_types.pl" name="Aform" method="post" class="validated">
83
                        [% INCLUDE 'csrf-token.inc' %]
83
                        <input type="hidden" name="op" value="add_validate" />
84
                        <input type="hidden" name="op" value="add_validate" />
84
                        <fieldset class="rows">
85
                        <fieldset class="rows">
85
                            <ol>
86
                            <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/curbside_pickup.tt (+1 lines)
Lines 61-66 Link Here
61
        <div class="dialog message">The [% pref_CurbsidePickup_link | $raw | $KohaSpan %] preference is not enabled, do not forget to enable it to turn the feature on.</div>
61
        <div class="dialog message">The [% pref_CurbsidePickup_link | $raw | $KohaSpan %] preference is not enabled, do not forget to enable it to turn the feature on.</div>
62
    [% END %]
62
    [% END %]
63
    <form method="post" class="form">
63
    <form method="post" class="form">
64
        [% INCLUDE 'csrf-token.inc' %]
64
        <div id="curbside_pickup_tabs" class="toptabs">
65
        <div id="curbside_pickup_tabs" class="toptabs">
65
            <ul class="nav nav-tabs" role="tablist">
66
            <ul class="nav nav-tabs" role="tablist">
66
                [% FOREACH l IN libraries %]
67
                [% FOREACH l IN libraries %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/currency.tt (+4 lines)
Lines 86-91 Link Here
86
[% IF op == 'add_form' %]
86
[% IF op == 'add_form' %]
87
87
88
<form action="/cgi-bin/koha/admin/currency.pl" name="Aform" method="post" class="validated">
88
<form action="/cgi-bin/koha/admin/currency.pl" name="Aform" method="post" class="validated">
89
    [% INCLUDE 'csrf-token.inc' %]
89
    <input type="hidden" name="op" value="add_validate" />
90
    <input type="hidden" name="op" value="add_validate" />
90
    <fieldset class="rows">
91
    <fieldset class="rows">
91
        <legend>
92
        <legend>
Lines 164-169 Link Here
164
            <span>Deletion not possible</span>
165
            <span>Deletion not possible</span>
165
        </p>
166
        </p>
166
        <form action="/cgi-bin/koha/admin/currency.pl" method="post">
167
        <form action="/cgi-bin/koha/admin/currency.pl" method="post">
168
            [% INCLUDE 'csrf-token.inc' %]
167
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
169
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
168
        </form>
170
        </form>
169
    </div>
171
    </div>
Lines 179-189 Link Here
179
            </tr>
181
            </tr>
180
        </table>
182
        </table>
181
        <form action="/cgi-bin/koha/admin/currency.pl" method="post">
183
        <form action="/cgi-bin/koha/admin/currency.pl" method="post">
184
            [% INCLUDE 'csrf-token.inc' %]
182
            <input type="hidden" name="op" value="delete_confirmed" />
185
            <input type="hidden" name="op" value="delete_confirmed" />
183
            <input type="hidden" name="currency_code" value="[% currency.currency | html %]" />
186
            <input type="hidden" name="currency_code" value="[% currency.currency | html %]" />
184
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this currency</button>
187
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this currency</button>
185
        </form>
188
        </form>
186
        <form action="/cgi-bin/koha/admin/currency.pl" method="post">
189
        <form action="/cgi-bin/koha/admin/currency.pl" method="post">
190
            [% INCLUDE 'csrf-token.inc' %]
187
            <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
191
            <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
188
        </form>
192
        </form>
189
    </div>
193
    </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/debit_types.tt (+1 lines)
Lines 78-83 Link Here
78
                    [% END %]
78
                    [% END %]
79
79
80
                    <form action="/cgi-bin/koha/admin/debit_types.pl" name="Aform" method="post" class="validated">
80
                    <form action="/cgi-bin/koha/admin/debit_types.pl" name="Aform" method="post" class="validated">
81
                        [% INCLUDE 'csrf-token.inc' %]
81
                        <input type="hidden" name="op" value="add_validate" />
82
                        <input type="hidden" name="op" value="add_validate" />
82
                        <fieldset class="rows">
83
                        <fieldset class="rows">
83
                            <ol>
84
                            <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/desks.tt (+2 lines)
Lines 93-98 Link Here
93
    [% END %]
93
    [% END %]
94
94
95
    <form action="/cgi-bin/koha/admin/desks.pl" name="Aform" method="post" class="validated">
95
    <form action="/cgi-bin/koha/admin/desks.pl" name="Aform" method="post" class="validated">
96
        [% INCLUDE 'csrf-token.inc' %]
96
        <input type="hidden" name="op" value="add_validate" />
97
        <input type="hidden" name="op" value="add_validate" />
97
        <input type="hidden" name="desk_id" value="[% desk.desk_id | html %]" />
98
        <input type="hidden" name="desk_id" value="[% desk.desk_id | html %]" />
98
99
Lines 149-154 Link Here
149
            </tr>
150
            </tr>
150
        </table>
151
        </table>
151
        <form action="/cgi-bin/koha/admin/desks.pl" method="post">
152
        <form action="/cgi-bin/koha/admin/desks.pl" method="post">
153
            [% INCLUDE 'csrf-token.inc' %]
152
            <input type="hidden" name="op" value="delete_confirmed" />
154
            <input type="hidden" name="op" value="delete_confirmed" />
153
            <input type="hidden" name="desk_id" value="[% desk.desk_id | html %]" />
155
            <input type="hidden" name="desk_id" value="[% desk.desk_id | html %]" />
154
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
156
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/didyoumean.tt (+1 lines)
Lines 62-67 Link Here
62
            plugins that you want to use.
62
            plugins that you want to use.
63
        </div>
63
        </div>
64
        <form action="/cgi-bin/koha/admin/didyoumean.pl" method="post">
64
        <form action="/cgi-bin/koha/admin/didyoumean.pl" method="post">
65
            [% INCLUDE 'csrf-token.inc' %]
65
            <fieldset id="didyoumeanopac">
66
            <fieldset id="didyoumeanopac">
66
                <legend>OPAC</legend>
67
                <legend>OPAC</legend>
67
                [% PROCESS pluginlist plugins=OPACpluginlist type='opac' %]
68
                [% PROCESS pluginlist plugins=OPACpluginlist type='opac' %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/edi_accounts.tt (+2 lines)
Lines 80-85 EDI accounts &rsaquo; Administration &rsaquo; Koha Link Here
80
80
81
[% IF acct_form %]
81
[% IF acct_form %]
82
<form action="/cgi-bin/koha/admin/edi_accounts.pl" name="Actform" method="post">
82
<form action="/cgi-bin/koha/admin/edi_accounts.pl" name="Actform" method="post">
83
    [% INCLUDE 'csrf-token.inc' %]
83
  <input type="hidden" name="op" value="save" />
84
  <input type="hidden" name="op" value="save" />
84
  [% IF account %]
85
  [% IF account %]
85
  <input type="hidden" name="id" value="[% account.id | html %]" />
86
  <input type="hidden" name="id" value="[% account.id | html %]" />
Lines 277-282 EDI accounts &rsaquo; Administration &rsaquo; Koha Link Here
277
    </tr>
278
    </tr>
278
</table>
279
</table>
279
<form action="/cgi-bin/koha/admin/edi_accounts.pl" method="post">
280
<form action="/cgi-bin/koha/admin/edi_accounts.pl" method="post">
281
    [% INCLUDE 'csrf-token.inc' %]
280
    <table>
282
    <table>
281
    </table>
283
    </table>
282
    <input type="hidden" name="op" value="delete_confirmed" />
284
    <input type="hidden" name="op" value="delete_confirmed" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/edi_ean_accounts.tt (+2 lines)
Lines 70-75 Library EANs &rsaquo; Administration &rsaquo; Koha Link Here
70
70
71
[% IF ean_form %]
71
[% IF ean_form %]
72
<form action="/cgi-bin/koha/admin/edi_ean_accounts.pl" name="Eanform" method="post">
72
<form action="/cgi-bin/koha/admin/edi_ean_accounts.pl" name="Eanform" method="post">
73
    [% INCLUDE 'csrf-token.inc' %]
73
  <input type="hidden" name="op" value="save" />
74
  <input type="hidden" name="op" value="save" />
74
  [% IF ean %]
75
  [% IF ean %]
75
      <input type="hidden" name="oldbranchcode" value="[% ean.branch.branchcode | html %]" />
76
      <input type="hidden" name="oldbranchcode" value="[% ean.branch.branchcode | html %]" />
Lines 139-144 Library EANs &rsaquo; Administration &rsaquo; Koha Link Here
139
<div class="dialog alert">
140
<div class="dialog alert">
140
<h1>Delete EAN [% ean.ean | html %] for [% ean.branch.branchname | html %]?</h1>
141
<h1>Delete EAN [% ean.ean | html %] for [% ean.branch.branchname | html %]?</h1>
141
<form action="/cgi-bin/koha/admin/edi_ean_accounts.pl" method="post">
142
<form action="/cgi-bin/koha/admin/edi_ean_accounts.pl" method="post">
143
    [% INCLUDE 'csrf-token.inc' %]
142
    <input type="hidden" name="op" value="delete_confirmed" />
144
    <input type="hidden" name="op" value="delete_confirmed" />
143
    <input type="hidden" name="id" value="[% ean.id | html %]" />
145
    <input type="hidden" name="id" value="[% ean.id | html %]" />
144
    <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
146
    <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/identity_provider_domains.tt (+2 lines)
Lines 81-86 Link Here
81
    <h1>New email domain</h1>
81
    <h1>New email domain</h1>
82
    <div class="page-section">
82
    <div class="page-section">
83
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="add" name="add" class="validated" method="post">
83
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="add" name="add" class="validated" method="post">
84
            [% INCLUDE 'csrf-token.inc' %]
84
            <input type="hidden" name="op" value="add" />
85
            <input type="hidden" name="op" value="add" />
85
            <input type="hidden" name="domain_ops" value="1" />
86
            <input type="hidden" name="domain_ops" value="1" />
86
            <input type="hidden" name="identity_provider_id" value="[%- identity_provider_id | html -%]" />
87
            <input type="hidden" name="identity_provider_id" value="[%- identity_provider_id | html -%]" />
Lines 162-167 Link Here
162
    <h1>Edit identity provider domain</h1>
163
    <h1>Edit identity provider domain</h1>
163
    <div class="page-section">
164
    <div class="page-section">
164
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="edit_save" name="edit_save" class="validated" method="post">
165
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="edit_save" name="edit_save" class="validated" method="post">
166
            [% INCLUDE 'csrf-token.inc' %]
165
            <input type="hidden" name="op" value="edit_save" />
167
            <input type="hidden" name="op" value="edit_save" />
166
            <input type="hidden" name="domain_ops" value="1" />
168
            <input type="hidden" name="domain_ops" value="1" />
167
            <input type="hidden" name="identity_provider_id" value="[%- identity_provider_id | html -%]" />
169
            <input type="hidden" name="identity_provider_id" value="[%- identity_provider_id | html -%]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/identity_providers.tt (+2 lines)
Lines 78-83 Link Here
78
    <h1>New identity provider</h1>
78
    <h1>New identity provider</h1>
79
    <div class="page-section">
79
    <div class="page-section">
80
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="add" name="add" class="validated" method="post">
80
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="add" name="add" class="validated" method="post">
81
            [% INCLUDE 'csrf-token.inc' %]
81
            <input type="hidden" name="op" value="add" />
82
            <input type="hidden" name="op" value="add" />
82
            <fieldset class="rows">
83
            <fieldset class="rows">
83
                <legend id="identity_provider_basic">Basic configuration</legend>
84
                <legend id="identity_provider_basic">Basic configuration</legend>
Lines 232-237 Link Here
232
    <h1>Edit identity provider</h1>
233
    <h1>Edit identity provider</h1>
233
    <div class="page-section">
234
    <div class="page-section">
234
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="edit_save" name="edit_save" class="validated" method="post">
235
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="edit_save" name="edit_save" class="validated" method="post">
236
            [% INCLUDE 'csrf-token.inc' %]
235
            <input type="hidden" name="op" value="edit_save" />
237
            <input type="hidden" name="op" value="edit_save" />
236
            <input type="hidden" name="identity_provider_id" value="[%- identity_provider.identity_provider_id | html -%]" />
238
            <input type="hidden" name="identity_provider_id" value="[%- identity_provider.identity_provider_id | html -%]" />
237
            <fieldset class="rows">
239
            <fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/items_search_field.tt (+1 lines)
Lines 42-47 Link Here
42
                    <h1>Item search field: [% field.label | html %]</h1>
42
                    <h1>Item search field: [% field.label | html %]</h1>
43
43
44
                    <form action="/cgi-bin/koha/admin/items_search_field.pl" method="POST" id="edit_search_fields">
44
                    <form action="/cgi-bin/koha/admin/items_search_field.pl" method="POST" id="edit_search_fields">
45
                        [% INCLUDE 'csrf-token.inc' %]
45
                        <fieldset class="rows">
46
                        <fieldset class="rows">
46
                        <legend>Edit field</legend>
47
                        <legend>Edit field</legend>
47
                        [% INCLUDE 'admin-items-search-field-form.inc' field=field %]
48
                        [% INCLUDE 'admin-items-search-field-form.inc' field=field %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/items_search_fields.tt (+1 lines)
Lines 104-109 Link Here
104
                    [% END %]
104
                    [% END %]
105
105
106
                    <form id="add_field_form" action="/cgi-bin/koha/admin/items_search_fields.pl" method="POST">
106
                    <form id="add_field_form" action="/cgi-bin/koha/admin/items_search_fields.pl" method="POST">
107
                        [% INCLUDE 'csrf-token.inc' %]
107
                        <fieldset class="rows">
108
                        <fieldset class="rows">
108
                            <legend><h1>Add a new field</h1></legend>
109
                            <legend><h1>Add a new field</h1></legend>
109
                            [% INCLUDE 'admin-items-search-field-form.inc' field=undef %]
110
                            [% INCLUDE 'admin-items-search-field-form.inc' field=undef %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/itemtypes.tt (+3 lines)
Lines 143-148 Item types &rsaquo; Administration &rsaquo; Koha Link Here
143
        <h1>Add item type</h1>
143
        <h1>Add item type</h1>
144
    [% END %]
144
    [% END %]
145
    <form action="/cgi-bin/koha/admin/itemtypes.pl" name="Aform" method="post" id="itemtypeentry">
145
    <form action="/cgi-bin/koha/admin/itemtypes.pl" name="Aform" method="post" id="itemtypeentry">
146
        [% INCLUDE 'csrf-token.inc' %]
146
        <input type="hidden" name="op" value="add_validate" />
147
        <input type="hidden" name="op" value="add_validate" />
147
        <fieldset class="rows">
148
        <fieldset class="rows">
148
            <ol>
149
            <ol>
Lines 367-376 Item types &rsaquo; Administration &rsaquo; Koha Link Here
367
            <tr><th scope="row">Rental charge</th><td>[% itemtype.rentalcharge | $Price %]</td></tr>
368
            <tr><th scope="row">Rental charge</th><td>[% itemtype.rentalcharge | $Price %]</td></tr>
368
        </table>
369
        </table>
369
        <form action="/cgi-bin/koha/admin/itemtypes.pl" method="post">
370
        <form action="/cgi-bin/koha/admin/itemtypes.pl" method="post">
371
            [% INCLUDE 'csrf-token.inc' %]
370
            <input type="hidden" name="op" value="delete_confirmed" /><input type="hidden" name="itemtype" value="[% itemtype.itemtype | html %]" />
372
            <input type="hidden" name="op" value="delete_confirmed" /><input type="hidden" name="itemtype" value="[% itemtype.itemtype | html %]" />
371
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this item type</button>
373
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this item type</button>
372
        </form>
374
        </form>
373
        <form action="/cgi-bin/koha/admin/itemtypes.pl" method="post">
375
        <form action="/cgi-bin/koha/admin/itemtypes.pl" method="post">
376
            [% INCLUDE 'csrf-token.inc' %]
374
            <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
377
            <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
375
        </form>
378
        </form>
376
    </div>
379
    </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/koha2marclinks.tt (+1 lines)
Lines 31-36 Link Here
31
<br/>
31
<br/>
32
<div class="dialog message">If you make any change to the mappings, you must ask your administrator to run misc/batchRebuildBiblioTables.pl.</div>
32
<div class="dialog message">If you make any change to the mappings, you must ask your administrator to run misc/batchRebuildBiblioTables.pl.</div>
33
<form action="/cgi-bin/koha/admin/koha2marclinks.pl" method="post" id="koha2marc">
33
<form action="/cgi-bin/koha/admin/koha2marclinks.pl" method="post" id="koha2marc">
34
    [% INCLUDE 'csrf-token.inc' %]
34
35
35
[% IF error_add %]
36
[% IF error_add %]
36
    <div class="dialog alert">Failed to add mapping for [% error_info | html %]</div>
37
    <div class="dialog alert">Failed to add mapping for [% error_info | html %]</div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/localization.tt (+1 lines)
Lines 13-18 Link Here
13
            <div class="col-sm-12">
13
            <div class="col-sm-12">
14
                <h1>Localization</h1>
14
                <h1>Localization</h1>
15
<form id="add_translation" method="post">
15
<form id="add_translation" method="post">
16
    [% INCLUDE 'csrf-token.inc' %]
16
    <input type="hidden" name="entity" value="[% entity | html %]" />
17
    <input type="hidden" name="entity" value="[% entity | html %]" />
17
    <input type="hidden" name="code" value="[% code | html %]" />
18
    <input type="hidden" name="code" value="[% code | html %]" />
18
    <input type="hidden" name="interface" value="[% interface_side | html %]" />
19
    <input type="hidden" name="interface" value="[% interface_side | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/marc-overlay-rules.tt (+2 lines)
Lines 73-78 Link Here
73
73
74
                <div class="page-section">
74
                <div class="page-section">
75
                <form action="/cgi-bin/koha/admin/marc-overlay-rules.pl" method="POST" id="marc-overlay-rules-form">
75
                <form action="/cgi-bin/koha/admin/marc-overlay-rules.pl" method="POST" id="marc-overlay-rules-form">
76
                    [% INCLUDE 'csrf-token.inc' %]
76
                    <table id="marc-overlay-rules">
77
                    <table id="marc-overlay-rules">
77
                        <thead><tr>
78
                        <thead><tr>
78
                            <th>Rule</th>
79
                            <th>Rule</th>
Lines 254-259 Link Here
254
                </div> <!-- /.page-section -->
255
                </div> <!-- /.page-section -->
255
256
256
                <form action="/cgi-bin/koha/admin/marc-overlay-rules.pl" method="post">
257
                <form action="/cgi-bin/koha/admin/marc-overlay-rules.pl" method="post">
258
                    [% INCLUDE 'csrf-token.inc' %]
257
                    <input type="hidden" name="op" value="redo-matching" />
259
                    <input type="hidden" name="op" value="redo-matching" />
258
                </form>
260
                </form>
259
261
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/marc_subfields_structure.tt (+3 lines)
Lines 111-116 Link Here
111
                        <div class="hint">You can drag and drop the subfield tabs to change the order.</div>
111
                        <div class="hint">You can drag and drop the subfield tabs to change the order.</div>
112
112
113
                        <form action="[% script_name | html %]" name="Aform" method="post">
113
                        <form action="[% script_name | html %]" name="Aform" method="post">
114
                            [% INCLUDE 'csrf-token.inc' %]
114
                            <input type="hidden" name="op" value="add_validate" />
115
                            <input type="hidden" name="op" value="add_validate" />
115
                            <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
116
                            <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
116
                            <input type="hidden" name="frameworkcode" value="[% frameworkcode | html %]" />
117
                            <input type="hidden" name="frameworkcode" value="[% frameworkcode | html %]" />
Lines 345-350 Link Here
345
                            <p>Description: [% mss.liblibrarian | html_entity %]</p>
346
                            <p>Description: [% mss.liblibrarian | html_entity %]</p>
346
347
347
                            <form action="[% delete_link | html %]" method="post"><input type="hidden" name="op" value="delete_confirmed" />
348
                            <form action="[% delete_link | html %]" method="post"><input type="hidden" name="op" value="delete_confirmed" />
349
                                [% INCLUDE 'csrf-token.inc' %]
348
                                <input type="hidden" name="tagfield" value="[% mss.tagfield | html %]" />
350
                                <input type="hidden" name="tagfield" value="[% mss.tagfield | html %]" />
349
                                <input type="hidden" name="tagsubfield" value="[% mss.tagsubfield | html %]" />
351
                                <input type="hidden" name="tagsubfield" value="[% mss.tagsubfield | html %]" />
350
                                <input type="hidden" name="frameworkcode" value="[% mss.frameworkcode | html %]" />
352
                                <input type="hidden" name="frameworkcode" value="[% mss.frameworkcode | html %]" />
Lines 353-358 Link Here
353
355
354
356
355
                            <form action="[% script_name | html %]" method="post">
357
                            <form action="[% script_name | html %]" method="post">
358
                                [% INCLUDE 'csrf-token.inc' %]
356
                                <input type="hidden" name="tagfield" value="[% mss.tagfield | html %]" />
359
                                <input type="hidden" name="tagfield" value="[% mss.tagfield | html %]" />
357
                                <input type="hidden" name="tagsubfield" value="[% mss.tagsubfield | html %]" />
360
                                <input type="hidden" name="tagsubfield" value="[% mss.tagsubfield | html %]" />
358
                                <input type="hidden" name="frameworkcode" value="[% mss.frameworkcode | html %]" />
361
                                <input type="hidden" name="frameworkcode" value="[% mss.frameworkcode | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/marctagstructure.tt (+5 lines)
Lines 112-117 MARC frameworks &rsaquo; Administration &rsaquo; Koha Link Here
112
[% IF ( add_form ) %]
112
[% IF ( add_form ) %]
113
113
114
    <form action="[% script_name | html %]" name="Aform" method="post" class="validated">
114
    <form action="[% script_name | html %]" name="Aform" method="post" class="validated">
115
        [% INCLUDE 'csrf-token.inc' %]
115
116
116
      <fieldset class="rows">
117
      <fieldset class="rows">
117
            <legend>
118
            <legend>
Lines 185-190 MARC frameworks &rsaquo; Administration &rsaquo; Koha Link Here
185
        <p>Tag: [% searchfield | html %]</p>
186
        <p>Tag: [% searchfield | html %]</p>
186
        <p>Description: [% liblibrarian | html %]</p>
187
        <p>Description: [% liblibrarian | html %]</p>
187
        <form action="[% script_name | html %]" method="post">
188
        <form action="[% script_name | html %]" method="post">
189
            [% INCLUDE 'csrf-token.inc' %]
188
            <input type="hidden" name="op" value="delete_confirmed" />
190
            <input type="hidden" name="op" value="delete_confirmed" />
189
            <input type="hidden" name="searchfield" value="[% searchfield | html %]" />
191
            <input type="hidden" name="searchfield" value="[% searchfield | html %]" />
190
            <input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
192
            <input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
Lines 200-211 MARC frameworks &rsaquo; Administration &rsaquo; Koha Link Here
200
202
201
    <div class="dialog message"><h3>Tag deleted</h3>
203
    <div class="dialog message"><h3>Tag deleted</h3>
202
    <form action="[% script_name | html %]" method="post"><input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
204
    <form action="[% script_name | html %]" method="post"><input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
205
        [% INCLUDE 'csrf-token.inc' %]
203
        <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
206
        <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
204
    </form></div>
207
    </form></div>
205
[% END %]
208
[% END %]
206
[% IF ( framework_create ) %]
209
[% IF ( framework_create ) %]
207
210
208
    <form action="[% script_name | html %]" method="post">
211
    <form action="[% script_name | html %]" method="post">
212
        [% INCLUDE 'csrf-token.inc' %]
209
        <input type="hidden" name="op" value="framework_create_confirm" />
213
        <input type="hidden" name="op" value="framework_create_confirm" />
210
        <input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
214
        <input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
211
        Create framework for [% framework.frameworkcode | html %] ([% framework.frameworktext | html %]) using
215
        Create framework for [% framework.frameworkcode | html %] ([% framework.frameworktext | html %]) using
Lines 222-227 MARC frameworks &rsaquo; Administration &rsaquo; Koha Link Here
222
226
223
[% IF ( else ) %]
227
[% IF ( else ) %]
224
<form name="f" action="[% script_name | html %]" method="post">
228
<form name="f" action="[% script_name | html %]" method="post">
229
    [% INCLUDE 'csrf-token.inc' %]
225
<fieldset style="padding:.5em;">
230
<fieldset style="padding:.5em;">
226
        <label for="tag_search"><strong>Search for tag:</strong> </label>
231
        <label for="tag_search"><strong>Search for tag:</strong> </label>
227
        <input type="text" name="searchfield" id="tag_search" size="4" value="[% searchfield | html %]" />
232
        <input type="text" name="searchfield" id="tag_search" size="4" value="[% searchfield | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/matching-rules.tt (+2 lines)
Lines 109-114 Link Here
109
                        <h1>Add record matching rule</h1>
109
                        <h1>Add record matching rule</h1>
110
                    [% END %]
110
                    [% END %]
111
                    <form action="[% script_name | html %]" name="Aform" method="post">
111
                    <form action="[% script_name | html %]" name="Aform" method="post">
112
                        [% INCLUDE 'csrf-token.inc' %]
112
                        <input type="hidden" name="op" value="[% confirm_op | html %]" />
113
                        <input type="hidden" name="op" value="[% confirm_op | html %]" />
113
                        <fieldset class="rows">
114
                        <fieldset class="rows">
114
                            <ol>
115
                            <ol>
Lines 419-424 Link Here
419
                    <div class="dialog alert">
420
                    <div class="dialog alert">
420
                        <h1>Confirm deletion of record matching rule <span class="ex">'[% code | html %]' ([% description | html %])</span>?</h1>
421
                        <h1>Confirm deletion of record matching rule <span class="ex">'[% code | html %]' ([% description | html %])</span>?</h1>
421
                        <form action="[% script_name | html %]" name="Aform" method="post">
422
                        <form action="[% script_name | html %]" name="Aform" method="post">
423
                            [% INCLUDE 'csrf-token.inc' %]
422
                            <input type="hidden" name="op" value="[% confirm_op | html %]" />
424
                            <input type="hidden" name="op" value="[% confirm_op | html %]" />
423
                            <input type="hidden" name="matcher_id" value="[% matcher_id | html %]" />
425
                            <input type="hidden" name="matcher_id" value="[% matcher_id | html %]" />
424
                            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete record matching rule</button>
426
                            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete record matching rule</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/oai_set_mappings.tt (+1 lines)
Lines 43-48 Link Here
43
43
44
        <div class="page-section">
44
        <div class="page-section">
45
            <form action="/cgi-bin/koha/admin/oai_set_mappings.pl" method="post" id="mappingform">
45
            <form action="/cgi-bin/koha/admin/oai_set_mappings.pl" method="post" id="mappingform">
46
                [% INCLUDE 'csrf-token.inc' %]
46
                <table id="mappings">
47
                <table id="mappings">
47
                    <thead>
48
                    <thead>
48
                        <tr>
49
                        <tr>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/oai_sets.tt (+1 lines)
Lines 52-57 Link Here
52
52
53
        [% IF ( op_new || op_mod ) %]
53
        [% IF ( op_new || op_mod ) %]
54
            <form method="post" action="/cgi-bin/koha/admin/oai_sets.pl" class="validated">
54
            <form method="post" action="/cgi-bin/koha/admin/oai_sets.pl" class="validated">
55
                [% INCLUDE 'csrf-token.inc' %]
55
            [% IF ( op_new ) %]
56
            [% IF ( op_new ) %]
56
                <h1>Add a new OAI set</h1>
57
                <h1>Add a new OAI set</h1>
57
                <input type="hidden" name="op" value="savenew" />
58
                <input type="hidden" name="op" value="savenew" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/overdrive.tt (+1 lines)
Lines 33-38 Link Here
33
                <h1>OverDrive library authnames</h1>
33
                <h1>OverDrive library authnames</h1>
34
34
35
                <form action="/cgi-bin/koha/admin/overdrive.pl" name="overdrive_form" method="post" class="validated">
35
                <form action="/cgi-bin/koha/admin/overdrive.pl" name="overdrive_form" method="post" class="validated">
36
                    [% INCLUDE 'csrf-token.inc' %]
36
                    <input type="hidden" name="op" value="update" />
37
                    <input type="hidden" name="op" value="update" />
37
                    <fieldset>
38
                    <fieldset>
38
                        <table id="od_info">
39
                        <table id="od_info">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/patron-attr-types.tt (+2 lines)
Lines 81-86 Patron attribute types &rsaquo; Administration &rsaquo; Koha Link Here
81
</div>
81
</div>
82
[% END %]
82
[% END %]
83
<form action="[% script_name | html %]" class="validated" method="post">
83
<form action="[% script_name | html %]" class="validated" method="post">
84
    [% INCLUDE 'csrf-token.inc' %]
84
  <input type="hidden" name="op" value="[% confirm_op | html %]" />
85
  <input type="hidden" name="op" value="[% confirm_op | html %]" />
85
  <fieldset class="rows">
86
  <fieldset class="rows">
86
    <ol>
87
    <ol>
Lines 245-250 Patron attribute types &rsaquo; Administration &rsaquo; Koha Link Here
245
    <div class="dialog alert">
246
    <div class="dialog alert">
246
        <h1>Confirm deletion of patron attribute type <span class="ex">'[% code | html %]' ([% description | html %])</span>?</h1>
247
        <h1>Confirm deletion of patron attribute type <span class="ex">'[% code | html %]' ([% description | html %])</span>?</h1>
247
        <form action="[% script_name | html %]" name="Aform" method="post">
248
        <form action="[% script_name | html %]" name="Aform" method="post">
249
            [% INCLUDE 'csrf-token.inc' %]
248
            <input type="hidden" name="op" value="[% confirm_op | html %]" />
250
            <input type="hidden" name="op" value="[% confirm_op | html %]" />
249
            <input type="hidden" name="code" value="[% code | html %]" />
251
            <input type="hidden" name="code" value="[% code | html %]" />
250
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete patron attribute type</button>
252
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete patron attribute type</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/preferences.tt (+1 lines)
Lines 53-58 Link Here
53
    <div class="prefs-tab">
53
    <div class="prefs-tab">
54
    <h2>[% TAB.tab_title | html %] preferences</h2>
54
    <h2>[% TAB.tab_title | html %] preferences</h2>
55
    <form action="/cgi-bin/koha/admin/preferences.pl" method="post">
55
    <form action="/cgi-bin/koha/admin/preferences.pl" method="post">
56
        [% INCLUDE 'csrf-token.inc' %]
56
        [% UNLESS ( searchfield ) %]<div id="toolbar"><button class="save-all btn btn-primary" type="submit">Save all [% TAB.tab_title | html %] preferences</button></div>[% END %]
57
        [% UNLESS ( searchfield ) %]<div id="toolbar"><button class="save-all btn btn-primary" type="submit">Save all [% TAB.tab_title | html %] preferences</button></div>[% END %]
57
        <input type="hidden" name="op" value="save" />
58
        <input type="hidden" name="op" value="save" />
58
        <input type="hidden" name="tab" value="[% TAB.tab_id | html %]" />
59
        <input type="hidden" name="tab" value="[% TAB.tab_id | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/restrictions.tt (+2 lines)
Lines 81-86 Link Here
81
81
82
[% IF op == 'add_form' %]
82
[% IF op == 'add_form' %]
83
    <form id="restriction_form" action="/cgi-bin/koha/admin/restrictions.pl" method="post">
83
    <form id="restriction_form" action="/cgi-bin/koha/admin/restrictions.pl" method="post">
84
        [% INCLUDE 'csrf-token.inc' %]
84
        <input type="hidden" name="op" value="add_validate" />
85
        <input type="hidden" name="op" value="add_validate" />
85
        <input type="hidden" name="checked" value="0" />
86
        <input type="hidden" name="checked" value="0" />
86
        [% IF restriction %]
87
        [% IF restriction %]
Lines 125-130 Link Here
125
126
126
[% IF op == 'delete_confirm' %]
127
[% IF op == 'delete_confirm' %]
127
    <form action="/cgi-bin/koha/admin/restrictions.pl" method="post">
128
    <form action="/cgi-bin/koha/admin/restrictions.pl" method="post">
129
        [% INCLUDE 'csrf-token.inc' %]
128
        <fieldset>
130
        <fieldset>
129
            <legend>
131
            <legend>
130
                Confirm restriction type deletion
132
                Confirm restriction type deletion
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/searchengine/elasticsearch/mappings.tt (+3 lines)
Lines 88-98 a.add, a.delete { Link Here
88
        <div class="dialog alert">
88
        <div class="dialog alert">
89
            <h3>The current mappings you see on the screen will be erased and replaced by the mappings in the mappings.yaml file.</h3>
89
            <h3>The current mappings you see on the screen will be erased and replaced by the mappings in the mappings.yaml file.</h3>
90
            <form method="post">
90
            <form method="post">
91
                [% INCLUDE 'csrf-token.inc' %]
91
                <input type="hidden" name="op" value="reset_confirmed" />
92
                <input type="hidden" name="op" value="reset_confirmed" />
92
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, reset mappings</button>
93
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, reset mappings</button>
93
            </form>
94
            </form>
94
95
95
            <form method="post">
96
            <form method="post">
97
                [% INCLUDE 'csrf-token.inc' %]
96
                <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not reset mappings</button>
98
                <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not reset mappings</button>
97
            </form>
99
            </form>
98
        </div>
100
        </div>
Lines 111-116 a.add, a.delete { Link Here
111
    </div>
113
    </div>
112
114
113
    <form id="es_mappings" method="post">
115
    <form id="es_mappings" method="post">
116
        [% INCLUDE 'csrf-token.inc' %]
114
117
115
        [% WRAPPER tabs id= "tabs" %]
118
        [% WRAPPER tabs id= "tabs" %]
116
119
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/share_content.tt (+3 lines)
Lines 62-67 Link Here
62
                    [% END %]
62
                    [% END %]
63
63
64
                    <form id="mana_preference" method="post" class="clearfix">
64
                    <form id="mana_preference" method="post" class="clearfix">
65
                        [% INCLUDE 'csrf-token.inc' %]
65
                        <fieldset class="rows">
66
                        <fieldset class="rows">
66
                            <ol>
67
                            <ol>
67
                                <li>
68
                                <li>
Lines 111-116 Link Here
111
112
112
                    [% IF Koha.Preference('ManaToken') %]
113
                    [% IF Koha.Preference('ManaToken') %]
113
                        <form id="mana_token" method="post" class="clearfix">
114
                        <form id="mana_token" method="post" class="clearfix">
115
                            [% INCLUDE 'csrf-token.inc' %]
114
                            <fieldset class="rows">
116
                            <fieldset class="rows">
115
                            <legend>Mana KB token</legend>
117
                            <legend>Mana KB token</legend>
116
                                <ol>
118
                                <ol>
Lines 128-133 Link Here
128
                        </form>
130
                        </form>
129
                    [% ELSE %]
131
                    [% ELSE %]
130
                        <form id="mana_request" method="post" class="clearfix">
132
                        <form id="mana_request" method="post" class="clearfix">
133
                            [% INCLUDE 'csrf-token.inc' %]
131
                            <fieldset class="rows" id="mana_subscription">
134
                            <fieldset class="rows" id="mana_subscription">
132
                                <ol>
135
                                <ol>
133
                                    <li>
136
                                    <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/smart-rules.tt (+9 lines)
Lines 86-91 Link Here
86
                        </form>
86
                        </form>
87
                        [% IF ( definedbranch ) %]
87
                        [% IF ( definedbranch ) %]
88
                            <form action="/cgi-bin/koha/admin/clone-rules.pl" method="post">
88
                            <form action="/cgi-bin/koha/admin/clone-rules.pl" method="post">
89
                                [% INCLUDE 'csrf-token.inc' %]
89
                                <label for="tobranch"><strong>Clone these rules to:</strong></label>
90
                                <label for="tobranch"><strong>Clone these rules to:</strong></label>
90
                                <input type="hidden" name="frombranch" value="[% current_branch | html %]" />
91
                                <input type="hidden" name="frombranch" value="[% current_branch | html %]" />
91
                                <select name="tobranch" id="tobranch">
92
                                <select name="tobranch" id="tobranch">
Lines 99-104 Link Here
99
100
100
                <div class="page-section">
101
                <div class="page-section">
101
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
102
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
103
                        [% INCLUDE 'csrf-token.inc' %]
102
                        <input type="hidden" name="op" value="add" />
104
                        <input type="hidden" name="op" value="add" />
103
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
105
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
104
                        <table id="default-circulation-rules">
106
                        <table id="default-circulation-rules">
Lines 602-607 Link Here
602
                    <h2>Default checkout, hold and return policy[% IF humanbranch %] for [% Branches.GetName( humanbranch ) | html %][% END %]</h2>
604
                    <h2>Default checkout, hold and return policy[% IF humanbranch %] for [% Branches.GetName( humanbranch ) | html %][% END %]</h2>
603
                    <p>You can set a default maximum number of checkouts, hold policy and return policy that will be used if none is defined below for a particular item type or category.</p>
605
                    <p>You can set a default maximum number of checkouts, hold policy and return policy that will be used if none is defined below for a particular item type or category.</p>
604
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
606
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
607
                        [% INCLUDE 'csrf-token.inc' %]
605
                        <input type="hidden" name="op" value="set-branch-defaults" />
608
                        <input type="hidden" name="op" value="set-branch-defaults" />
606
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
609
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
607
                        <table>
610
                        <table>
Lines 789-794 Link Here
789
                       no limit applies, except possibly for a limit you define for a specific item type.
792
                       no limit applies, except possibly for a limit you define for a specific item type.
790
                    </p>
793
                    </p>
791
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
794
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
795
                        [% INCLUDE 'csrf-token.inc' %]
792
                        <input type="hidden" name="op" value="add-branch-cat" />
796
                        <input type="hidden" name="op" value="add-branch-cat" />
793
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
797
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
794
                        <table>
798
                        <table>
Lines 868-873 Link Here
868
                [% END %]
872
                [% END %]
869
                    <p>Specify if waiting holds can be cancelled for a given patron category.</p>
873
                    <p>Specify if waiting holds can be cancelled for a given patron category.</p>
870
                    <form id="set-waiting-hold-cancellation" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
874
                    <form id="set-waiting-hold-cancellation" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
875
                        [% INCLUDE 'csrf-token.inc' %]
871
                        <input type="hidden" name="op" value="set-waiting-hold-cancellation" />
876
                        <input type="hidden" name="op" value="set-waiting-hold-cancellation" />
872
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
877
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
873
                        <table>
878
                        <table>
Lines 952-957 Link Here
952
                [% END %]
957
                [% END %]
953
                    <p>Specify the maximum number simultaneous current article requests a patron of a given category can have.</p>
958
                    <p>Specify the maximum number simultaneous current article requests a patron of a given category can have.</p>
954
                    <form id="set-article-requests-daily-limit" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
959
                    <form id="set-article-requests-daily-limit" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
960
                        [% INCLUDE 'csrf-token.inc' %]
955
                        <input type="hidden" name="op" value="add-open-article-requests-limit" />
961
                        <input type="hidden" name="op" value="add-open-article-requests-limit" />
956
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
962
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
957
                        <table>
963
                        <table>
Lines 1006-1011 Link Here
1006
                [% END %]
1012
                [% END %]
1007
                    <p>Specify the article request fee for a given patron category.</p>
1013
                    <p>Specify the article request fee for a given patron category.</p>
1008
                    <form id="set-article-request-fee" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
1014
                    <form id="set-article-request-fee" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
1015
                        [% INCLUDE 'csrf-token.inc' %]
1009
                        <input type="hidden" name="op" value="set-article-request-fee" />
1016
                        <input type="hidden" name="op" value="set-article-request-fee" />
1010
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
1017
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
1011
                        <table>
1018
                        <table>
Lines 1066-1071 Link Here
1066
                [% END %]
1073
                [% END %]
1067
                    <p>Specify the default policy for lost item fees on return.</p>
1074
                    <p>Specify the default policy for lost item fees on return.</p>
1068
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
1075
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
1076
                        [% INCLUDE 'csrf-token.inc' %]
1069
                        <input type="hidden" name="op" value="mod-refund-lost-item-fee-rule" />
1077
                        <input type="hidden" name="op" value="mod-refund-lost-item-fee-rule" />
1070
                        <input type="hidden" name="branch" value="[% current_branch | html %]" />
1078
                        <input type="hidden" name="branch" value="[% current_branch | html %]" />
1071
                        <table>
1079
                        <table>
Lines 1267-1272 Link Here
1267
                    </ul>
1275
                    </ul>
1268
1276
1269
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
1277
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
1278
                        [% INCLUDE 'csrf-token.inc' %]
1270
                        <input type="hidden" name="op" value="add-branch-item" />
1279
                        <input type="hidden" name="op" value="add-branch-item" />
1271
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
1280
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
1272
                        <table>
1281
                        <table>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/sms_providers.tt (+1 lines)
Lines 74-79 Link Here
74
74
75
                <div id="sms_add_form">
75
                <div id="sms_add_form">
76
                    <form id="sms_form" action="sms_providers.pl" method="post" class="validated">
76
                    <form id="sms_form" action="sms_providers.pl" method="post" class="validated">
77
                        [% INCLUDE 'csrf-token.inc' %]
77
                        <fieldset class="rows">
78
                        <fieldset class="rows">
78
                            <legend>Add an SMS cellular provider</legend>
79
                            <legend>Add an SMS cellular provider</legend>
79
                            <input type="hidden" id="id" name="id" value="" />
80
                            <input type="hidden" id="id" name="id" value="" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/smtp_servers.tt (+2 lines)
Lines 75-80 Link Here
75
[% IF op == 'add_form' %]
75
[% IF op == 'add_form' %]
76
    <h1>New SMTP server</h1>
76
    <h1>New SMTP server</h1>
77
    <form action="/cgi-bin/koha/admin/smtp_servers.pl" id="add" name="add" class="validated" method="post">
77
    <form action="/cgi-bin/koha/admin/smtp_servers.pl" id="add" name="add" class="validated" method="post">
78
        [% INCLUDE 'csrf-token.inc' %]
78
        <input type="hidden" name="op" value="add" />
79
        <input type="hidden" name="op" value="add" />
79
        <fieldset class="rows">
80
        <fieldset class="rows">
80
            <ol>
81
            <ol>
Lines 143-148 Link Here
143
[% IF op == 'edit_form' %]
144
[% IF op == 'edit_form' %]
144
    <h1>Edit SMTP server</h1>
145
    <h1>Edit SMTP server</h1>
145
    <form action="/cgi-bin/koha/admin/smtp_servers.pl" id="edit_save" name="edit_save" class="validated" method="post">
146
    <form action="/cgi-bin/koha/admin/smtp_servers.pl" id="edit_save" name="edit_save" class="validated" method="post">
147
        [% INCLUDE 'csrf-token.inc' %]
146
        <input type="hidden" name="op" value="edit_save" />
148
        <input type="hidden" name="op" value="edit_save" />
147
        <input type="hidden" name="smtp_server_id" value="[%- smtp_server.id | html -%]" />
149
        <input type="hidden" name="smtp_server_id" value="[%- smtp_server.id | html -%]" />
148
        <fieldset class="rows">
150
        <fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/sru_modmapping.tt (+1 lines)
Lines 14-19 Link Here
14
        <h1>Modify SRU search fields mapping for bibliographic records</h1>
14
        <h1>Modify SRU search fields mapping for bibliographic records</h1>
15
15
16
        <form id="form01" method="post">
16
        <form id="form01" method="post">
17
            [% INCLUDE 'csrf-token.inc' %]
17
            <fieldset class="rows">
18
            <fieldset class="rows">
18
                <div class="row">
19
                <div class="row">
19
                    <div class="col-xs-6">
20
                    <div class="col-xs-6">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/sru_modmapping_auth.tt (+1 lines)
Lines 11-16 Link Here
11
    <main>
11
    <main>
12
        <h1>Modify SRU search fields mapping for authorities</h1>
12
        <h1>Modify SRU search fields mapping for authorities</h1>
13
        <form id="form01" method="post">
13
        <form id="form01" method="post">
14
            [% INCLUDE 'csrf-token.inc' %]
14
            <fieldset class="rows">
15
            <fieldset class="rows">
15
                <div class="row">
16
                <div class="row">
16
                    <div class="col-xs-6">
17
                    <div class="col-xs-6">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/systempreferences.tt (+6 lines)
Lines 91-96 Link Here
91
            <form action="[% script_name | html %]" name="Aform" method="post" enctype="multipart/form-data">
91
            <form action="[% script_name | html %]" name="Aform" method="post" enctype="multipart/form-data">
92
        [% ELSE %]
92
        [% ELSE %]
93
            <form action="[% script_name | html %]" name="Aform" method="post">
93
            <form action="[% script_name | html %]" name="Aform" method="post">
94
                [% INCLUDE 'csrf-token.inc' %]
94
        [% END %]
95
        [% END %]
95
        <fieldset class="rows"><legend>
96
        <fieldset class="rows"><legend>
96
        <h1>
97
        <h1>
Lines 272-277 Link Here
272
        <h1>Data recorded</h1>
273
        <h1>Data recorded</h1>
273
        
274
        
274
        <form action="[% script_name | html %]" method="post">
275
        <form action="[% script_name | html %]" method="post">
276
            [% INCLUDE 'csrf-token.inc' %]
275
        <input type="submit" class="btn btn-primary" value="OK" />
277
        <input type="submit" class="btn btn-primary" value="OK" />
276
        </form>
278
        </form>
277
    [% END %]
279
    [% END %]
Lines 287-302 Link Here
287
        [% Tvalue | html %]
289
        [% Tvalue | html %]
288
        </td></tr></table>
290
        </td></tr></table>
289
        <form class="inline" action="[% script_name | html %]" method="post">
291
        <form class="inline" action="[% script_name | html %]" method="post">
292
            [% INCLUDE 'csrf-token.inc' %]
290
        <input type="hidden" name="op" value="delete_confirmed" />
293
        <input type="hidden" name="op" value="delete_confirmed" />
291
        <input type="hidden" name="searchfield" value="[% searchfield | html %]" />
294
        <input type="hidden" name="searchfield" value="[% searchfield | html %]" />
292
        <input type="hidden" name="Tvalue" value="[% Tvalue | html %]" />
295
        <input type="hidden" name="Tvalue" value="[% Tvalue | html %]" />
293
        <input type="submit"  value="Yes, delete" /></form>
296
        <input type="submit"  value="Yes, delete" /></form>
294
        <form class="inline" action="[% script_name | html %]" method="post"><input type="submit" value="No, do not delete" /></form>
297
        <form class="inline" action="[% script_name | html %]" method="post"><input type="submit" value="No, do not delete" /></form>
298
            [% INCLUDE 'csrf-token.inc' %]
295
    [% END %]
299
    [% END %]
296
    
300
    
297
    [% IF ( delete_confirmed ) %]
301
    [% IF ( delete_confirmed ) %]
298
        <h1>Data deleted</h1>
302
        <h1>Data deleted</h1>
299
        <form action="[% script_name | html %]" method="post">
303
        <form action="[% script_name | html %]" method="post">
304
            [% INCLUDE 'csrf-token.inc' %]
300
            <input type="submit" class="btn btn-primary" value="Back to system preferences" />
305
            <input type="submit" class="btn btn-primary" value="Back to system preferences" />
301
        </form>
306
        </form>
302
    [% END %]
307
    [% END %]
Lines 334-339 Link Here
334
            <form action="/cgi-bin/koha/admin/systempreferences.pl" method="post" enctype="multipart/form-data">
339
            <form action="/cgi-bin/koha/admin/systempreferences.pl" method="post" enctype="multipart/form-data">
335
        [% ELSE %]
340
        [% ELSE %]
336
            <form action="/cgi-bin/koha/admin/systempreferences.pl" method="post">
341
            <form action="/cgi-bin/koha/admin/systempreferences.pl" method="post">
342
                [% INCLUDE 'csrf-token.inc' %]
337
        [% END %]
343
        [% END %]
338
                [% IF ( loo.type_free ) %]
344
                [% IF ( loo.type_free ) %]
339
                <input type="text" name="value" size="[% loo.fieldlength | html %]" value="[% loo.value | html %]" />
345
                <input type="text" name="value" size="[% loo.fieldlength | html %]" value="[% loo.value | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/transport-cost-matrix.tt (+1 lines)
Lines 50-55 Link Here
50
    </div>[% END %]
50
    </div>[% END %]
51
51
52
        <form method="post" action="/cgi-bin/koha/admin/transport-cost-matrix.pl" id="cost_matrix_form">
52
        <form method="post" action="/cgi-bin/koha/admin/transport-cost-matrix.pl" id="cost_matrix_form">
53
            [% INCLUDE 'csrf-token.inc' %]
53
            <input type="hidden" name="op" value="set-cost-matrix" />
54
            <input type="hidden" name="op" value="set-cost-matrix" />
54
            <fieldset id="transport-cost-matrix">
55
            <fieldset id="transport-cost-matrix">
55
                <div class="help">
56
                <div class="help">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/usage_statistics.tt (+1 lines)
Lines 59-64 Link Here
59
[% END %]
59
[% END %]
60
60
61
    <form id="category_form" action="/cgi-bin/koha/admin/usage_statistics.pl" method="post">
61
    <form id="category_form" action="/cgi-bin/koha/admin/usage_statistics.pl" method="post">
62
        [% INCLUDE 'csrf-token.inc' %]
62
        <h1>Modify the statistics you share with the Koha community</h1>
63
        <h1>Modify the statistics you share with the Koha community</h1>
63
        <div class="row">
64
        <div class="row">
64
            <div class="col-xs-12 col-sm-6">
65
            <div class="col-xs-12 col-sm-6">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/z3950servers.tt (+1 lines)
Lines 75-80 Link Here
75
75
76
[% IF ( add_form ) %]
76
[% IF ( add_form ) %]
77
    <form action="[% script_name | html %]" name="Aform" method="post" id="serverentry">
77
    <form action="[% script_name | html %]" name="Aform" method="post" id="serverentry">
78
        [% INCLUDE 'csrf-token.inc' %]
78
        <input type="hidden" name="op" value="add_validated" />
79
        <input type="hidden" name="op" value="add_validated" />
79
        <input type="hidden" name="servertype" value="[% server.servertype||type||'zed' | html %]"/>
80
        <input type="hidden" name="servertype" value="[% server.servertype||type||'zed' | html %]"/>
80
        [% IF op == 'edit' %]
81
        [% IF op == 'edit' %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/auth.tt (+2 lines)
Lines 103-108 Link Here
103
    [% END # /IF  identity_providers.size %]
103
    [% END # /IF  identity_providers.size %]
104
104
105
    <form action="[% script_name | html %]" method="post" name="loginform" id="loginform">
105
    <form action="[% script_name | html %]" method="post" name="loginform" id="loginform">
106
        [% INCLUDE 'csrf-token.inc' %]
106
        <input type="hidden" name="koha_login_context" value="intranet" />
107
        <input type="hidden" name="koha_login_context" value="intranet" />
107
    [% FOREACH INPUT IN INPUTS %]
108
    [% FOREACH INPUT IN INPUTS %]
108
        <input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />
109
        <input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />
Lines 176-181 Link Here
176
    [% END %]
177
    [% END %]
177
[% ELSIF TwoFA_prompt %]
178
[% ELSIF TwoFA_prompt %]
178
    <form action="[% script_name | html %]" method="post" name="loginform" id="loginform" autocomplete="off">
179
    <form action="[% script_name | html %]" method="post" name="loginform" id="loginform" autocomplete="off">
180
        [% INCLUDE 'csrf-token.inc' %]
179
        <input type="hidden" name="koha_login_context" value="intranet" />
181
        <input type="hidden" name="koha_login_context" value="intranet" />
180
        [% FOREACH INPUT IN INPUTS %]
182
        [% FOREACH INPUT IN INPUTS %]
181
            <input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />
183
            <input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/authorities/authorities.tt (+1 lines)
Lines 401-406 Link Here
401
                [% END # /IF duplicateauthid %]
401
                [% END # /IF duplicateauthid %]
402
402
403
                <form method="post" id="f" name="f" action="/cgi-bin/koha/authorities/authorities.pl">
403
                <form method="post" id="f" name="f" action="/cgi-bin/koha/authorities/authorities.pl">
404
                    [% INCLUDE 'csrf-token.inc' %]
404
                    <input type="hidden" name="op" value="add" />
405
                    <input type="hidden" name="op" value="add" />
405
                    <input type="hidden" name="addfield_field" value="" />
406
                    <input type="hidden" name="addfield_field" value="" />
406
                    <input type="hidden" name="repeat_field" value="" />
407
                    <input type="hidden" name="repeat_field" value="" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/authorities/merge.tt (+2 lines)
Lines 63-68 div#result { margin-top: 1em; } Link Here
63
63
64
<p>Please choose which record will be the reference for the merge. The record chosen as reference will be kept, and the other will be deleted.</p>
64
<p>Please choose which record will be the reference for the merge. The record chosen as reference will be kept, and the other will be deleted.</p>
65
<form id="mergeform" action="/cgi-bin/koha/authorities/merge.pl" method="post">
65
<form id="mergeform" action="/cgi-bin/koha/authorities/merge.pl" method="post">
66
    [% INCLUDE 'csrf-token.inc' %]
66
    <fieldset class="rows">
67
    <fieldset class="rows">
67
    <legend>Merge reference</legend>
68
    <legend>Merge reference</legend>
68
    <ol>
69
    <ol>
Lines 96-101 div#result { margin-top: 1em; } Link Here
96
[% ELSE %]
97
[% ELSE %]
97
98
98
<form id="mergeform" action="/cgi-bin/koha/authorities/merge.pl" method="post" onsubmit="return mergeformsubmit()">
99
<form id="mergeform" action="/cgi-bin/koha/authorities/merge.pl" method="post" onsubmit="return mergeformsubmit()">
100
    [% INCLUDE 'csrf-token.inc' %]
99
101
100
    <div class="row">
102
    <div class="row">
101
        <div class="col-sm-6">
103
        <div class="col-sm-6">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/basket/downloadcart.tt (+1 lines)
Lines 7-12 Link Here
7
    <p>Your download should begin automatically.</p>
7
    <p>Your download should begin automatically.</p>
8
[% ELSE %]
8
[% ELSE %]
9
<form method="post" action="/cgi-bin/koha/basket/downloadcart.pl">
9
<form method="post" action="/cgi-bin/koha/basket/downloadcart.pl">
10
    [% INCLUDE 'csrf-token.inc' %]
10
<fieldset class="rows">
11
<fieldset class="rows">
11
	<legend>Download cart</legend>
12
	<legend>Download cart</legend>
12
	<ol><li>
13
	<ol><li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/basket/sendbasketform.tt (+1 lines)
Lines 18-23 Link Here
18
18
19
[% INCLUDE 'blocking_errors.inc' %]
19
[% INCLUDE 'blocking_errors.inc' %]
20
<form action="/cgi-bin/koha/basket/sendbasket.pl" method="post">
20
<form action="/cgi-bin/koha/basket/sendbasket.pl" method="post">
21
    [% INCLUDE 'csrf-token.inc' %]
21
22
22
<fieldset class="rows"> 
23
<fieldset class="rows"> 
23
<legend>Sending your cart</legend>
24
<legend>Sending your cart</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/moredetail.tt (+6 lines)
Lines 193-198 Link Here
193
                                                [% IF ( CAN_user_circulate ) %]
193
                                                [% IF ( CAN_user_circulate ) %]
194
                                                    [% SET ClaimReturnedLostValue = Koha.Preference('ClaimReturnedLostValue') %]
194
                                                    [% SET ClaimReturnedLostValue = Koha.Preference('ClaimReturnedLostValue') %]
195
                                                    <form action="updateitem.pl" method="post">
195
                                                    <form action="updateitem.pl" method="post">
196
                                                        [% INCLUDE 'csrf-token.inc' %]
196
                                                        <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
197
                                                        <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
197
                                                        <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
198
                                                        <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
198
                                                        <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
199
                                                        <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
Lines 242-247 Link Here
242
                                                <span class="label">Damaged status:</span>
243
                                                <span class="label">Damaged status:</span>
243
                                                [% IF ( CAN_user_circulate ) %]
244
                                                [% IF ( CAN_user_circulate ) %]
244
                                                    <form action="updateitem.pl" method="post">
245
                                                    <form action="updateitem.pl" method="post">
246
                                                        [% INCLUDE 'csrf-token.inc' %]
245
                                                        <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
247
                                                        <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
246
                                                        <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
248
                                                        <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
247
                                                        <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
249
                                                        <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
Lines 276-281 Link Here
276
                                                <span class="label">Withdrawn status:</span>
278
                                                <span class="label">Withdrawn status:</span>
277
                                                [% IF ( CAN_user_circulate ) %]
279
                                                [% IF ( CAN_user_circulate ) %]
278
                                                    <form action="updateitem.pl" method="post">
280
                                                    <form action="updateitem.pl" method="post">
281
                                                        [% INCLUDE 'csrf-token.inc' %]
279
                                                        <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
282
                                                        <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
280
                                                        <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
283
                                                        <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
281
                                                        <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
284
                                                        <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
Lines 315-320 Link Here
315
                                        <li>
318
                                        <li>
316
                                            <span class="label">Exclude from local holds priority:</span>
319
                                            <span class="label">Exclude from local holds priority:</span>
317
                                            <form action="updateitem.pl" method="post">
320
                                            <form action="updateitem.pl" method="post">
321
                                                [% INCLUDE 'csrf-token.inc' %]
318
                                                <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
322
                                                <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
319
                                                <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
323
                                                <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
320
                                                <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
324
                                                <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
Lines 428-433 Link Here
428
                                            <span class="label">Public note:</span>
432
                                            <span class="label">Public note:</span>
429
                                            [% IF ( CAN_user_editcatalogue_edit_items ) %]
433
                                            [% IF ( CAN_user_editcatalogue_edit_items ) %]
430
                                                <form class="inline" action="updateitem.pl" method="post"><input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
434
                                                <form class="inline" action="updateitem.pl" method="post"><input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
435
                                                    [% INCLUDE 'csrf-token.inc' %]
431
                                                    <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" /><input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
436
                                                    <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" /><input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
432
                                                    <input type="hidden" name="op" value="set_public_note" />
437
                                                    <input type="hidden" name="op" value="set_public_note" />
433
                                                    <textarea name="itemnotes" rows="2" cols="30">[% ITEM_DAT.itemnotes | html %]</textarea><input type="submit" name="submit" class="btn btn-primary btn-xs" value="Update" />
438
                                                    <textarea name="itemnotes" rows="2" cols="30">[% ITEM_DAT.itemnotes | html %]</textarea><input type="submit" name="submit" class="btn btn-primary btn-xs" value="Update" />
Lines 441-446 Link Here
441
                                            <span class="label">Non-public note:</span>
446
                                            <span class="label">Non-public note:</span>
442
                                            [% IF ( CAN_user_editcatalogue_edit_items ) %]
447
                                            [% IF ( CAN_user_editcatalogue_edit_items ) %]
443
                                                <form class="inline" action="updateitem.pl" method="post"><input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
448
                                                <form class="inline" action="updateitem.pl" method="post"><input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
449
                                                    [% INCLUDE 'csrf-token.inc' %]
444
                                                    <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" /><input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
450
                                                    <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" /><input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
445
                                                    <input type="hidden" name="op" value="set_non_public_note" />
451
                                                    <input type="hidden" name="op" value="set_non_public_note" />
446
                                                    <textarea name="itemnotes_nonpublic" rows="2" cols="30">[% ITEM_DAT.itemnotes_nonpublic | html %]</textarea><input type="submit" name="submit" class="btn btn-primary btn-xs" value="Update" />
452
                                                    <textarea name="itemnotes_nonpublic" rows="2" cols="30">[% ITEM_DAT.itemnotes_nonpublic | html %]</textarea><input type="submit" name="submit" class="btn btn-primary btn-xs" value="Update" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tt (+1 lines)
Lines 341-346 Link Here
341
341
342
                [% ELSE # /IF total %]
342
                [% ELSE # /IF total %]
343
                    <form method="post" name="fz3950" class="fz3950bigrpad">
343
                    <form method="post" name="fz3950" class="fz3950bigrpad">
344
                        [% INCLUDE 'csrf-token.inc' %]
344
                        <div id="toolbar" class="btn-toolbar" style="background-color:transparent"><div>
345
                        <div id="toolbar" class="btn-toolbar" style="background-color:transparent"><div>
345
                            <button class="btn btn-default" type="button" id="z3950submit"><i class="fa fa-search"></i> Z39.50/SRU search</button>
346
                            <button class="btn btn-default" type="button" id="z3950submit"><i class="fa fa-search"></i> Z39.50/SRU search</button>
346
                        </div></div>
347
                        </div></div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/search-history.tt (+4 lines)
Lines 42-47 Link Here
42
                        [% IF ( current_biblio_searches ) %]
42
                        [% IF ( current_biblio_searches ) %]
43
                            <h2>Current session</h2>
43
                            <h2>Current session</h2>
44
                            <form id="current_cat" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
44
                            <form id="current_cat" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
45
                                [% INCLUDE 'csrf-token.inc' %]
45
                                <p class="selections-toolbar">
46
                                <p class="selections-toolbar">
46
                                    <a class="CheckAll" data-form="current_cat" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
47
                                    <a class="CheckAll" data-form="current_cat" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
47
                                    <span class="sep">|</span>
48
                                    <span class="sep">|</span>
Lines 83-88 Link Here
83
                        [% IF ( previous_biblio_searches ) %]
84
                        [% IF ( previous_biblio_searches ) %]
84
                            <h2>Previous sessions</h2>
85
                            <h2>Previous sessions</h2>
85
                            <form id="previous_cat" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
86
                            <form id="previous_cat" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
87
                                [% INCLUDE 'csrf-token.inc' %]
86
                                <p class="selections-toolbar">
88
                                <p class="selections-toolbar">
87
                                    <a class="CheckAll" data-form="previous_cat" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
89
                                    <a class="CheckAll" data-form="previous_cat" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
88
                                    <span class="sep">|</span>
90
                                    <span class="sep">|</span>
Lines 126-131 Link Here
126
                        [% IF ( current_authority_searches ) %]
128
                        [% IF ( current_authority_searches ) %]
127
                            <h2>Current session</h2>
129
                            <h2>Current session</h2>
128
                            <form id="current_auth" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
130
                            <form id="current_auth" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
131
                                [% INCLUDE 'csrf-token.inc' %]
129
                                <p class="selections-toolbar">
132
                                <p class="selections-toolbar">
130
                                    <a class="CheckAll" data-form="current_auth" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
133
                                    <a class="CheckAll" data-form="current_auth" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
131
                                    <span class="sep">|</span>
134
                                    <span class="sep">|</span>
Lines 167-172 Link Here
167
                        [% IF ( previous_authority_searches ) %]
170
                        [% IF ( previous_authority_searches ) %]
168
                            <h2>Previous sessions</h2>
171
                            <h2>Previous sessions</h2>
169
                            <form id="previous_auth" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
172
                            <form id="previous_auth" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
173
                                [% INCLUDE 'csrf-token.inc' %]
170
                                <p class="selections-toolbar">
174
                                <p class="selections-toolbar">
171
                                    <a class="CheckAll" data-form="previous_auth" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
175
                                    <a class="CheckAll" data-form="previous_auth" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
172
                                    <span class="sep">|</span>
176
                                    <span class="sep">|</span>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/stockrotation.tt (+1 lines)
Lines 134-139 Link Here
134
                                        </a>
134
                                        </a>
135
                                    [% ELSE %]
135
                                    [% ELSE %]
136
                                        <form class="rota_select_form" method="post" enctype="multipart/form-data">
136
                                        <form class="rota_select_form" method="post" enctype="multipart/form-data">
137
                                            [% INCLUDE 'csrf-token.inc' %]
137
                                            <select class="item_select_rota" name="rota_id">
138
                                            <select class="item_select_rota" name="rota_id">
138
                                                [% FOREACH rota IN rotas %]
139
                                                [% FOREACH rota IN rotas %]
139
                                                    <option value="[% rota.rota_id | uri %]">[% rota.title | html %]</option>
140
                                                    <option value="[% rota.rota_id | uri %]">[% rota.title | html %]</option>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/addbiblio.tt (+1 lines)
Lines 866-871 function PopupMARCFieldDoc(field) { Link Here
866
                    </script>
866
                    </script>
867
                [% ELSE %]
867
                [% ELSE %]
868
                    <form method="post" name="f" id="f" action="/cgi-bin/koha/cataloguing/addbiblio.pl" onsubmit="return Check();">
868
                    <form method="post" name="f" id="f" action="/cgi-bin/koha/cataloguing/addbiblio.pl" onsubmit="return Check();">
869
                        [% INCLUDE 'csrf-token.inc' %]
869
                        <input type="hidden" value="[% IF ( biblionumber ) %]view[% ELSE %]items[% END %]" id="redirect" name="redirect" />
870
                        <input type="hidden" value="[% IF ( biblionumber ) %]view[% ELSE %]items[% END %]" id="redirect" name="redirect" />
870
                        <input type="hidden" value="" id="current_tab" name="current_tab" />
871
                        <input type="hidden" value="" id="current_tab" name="current_tab" />
871
                        <input type="hidden" value="0" id="confirm_not_duplicate" name="confirm_not_duplicate" />
872
                        <input type="hidden" value="0" id="confirm_not_duplicate" name="confirm_not_duplicate" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/additem.tt (+1 lines)
Lines 166-171 Link Here
166
166
167
<div id="cataloguing_additem_newitem" class="item_edit_form page-section">
167
<div id="cataloguing_additem_newitem" class="item_edit_form page-section">
168
    <form id="f" method="post" action="/cgi-bin/koha/cataloguing/additem.pl?biblionumber=[% biblio.biblionumber | html %]" name="f">
168
    <form id="f" method="post" action="/cgi-bin/koha/cataloguing/additem.pl?biblionumber=[% biblio.biblionumber | html %]" name="f">
169
        [% INCLUDE 'csrf-token.inc' %]
169
    <input type="hidden" name="op" value="[% op | html %]" />
170
    <input type="hidden" name="op" value="[% op | html %]" />
170
    [% IF (popup) %]
171
    [% IF (popup) %]
171
        <input type="hidden" name="popup" value="1" />
172
        <input type="hidden" name="popup" value="1" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/linkitem.tt (+3 lines)
Lines 32-37 Link Here
32
	[% IF ( errornohostitemnumber ) %]ERROR: Unable to get the item number from this barcode.[% END %]
32
	[% IF ( errornohostitemnumber ) %]ERROR: Unable to get the item number from this barcode.[% END %]
33
    </div>
33
    </div>
34
    <form action="/cgi-bin/koha/catalogue/MARCdetail.pl" method="post">
34
    <form action="/cgi-bin/koha/catalogue/MARCdetail.pl" method="post">
35
        [% INCLUDE 'csrf-token.inc' %]
35
    <input type="submit" class="btn btn-primary" value="OK" />
36
    <input type="submit" class="btn btn-primary" value="OK" />
36
	<input type="hidden" name="biblionumber" value="[% biblionumber | html %]" />
37
	<input type="hidden" name="biblionumber" value="[% biblionumber | html %]" />
37
    </form>
38
    </form>
Lines 39-50 Link Here
39
    [% IF ( success ) %]
40
    [% IF ( success ) %]
40
    <div class="dialog message">The item has successfully been linked to <em>[% bibliotitle | html %]</em>.</div>
41
    <div class="dialog message">The item has successfully been linked to <em>[% bibliotitle | html %]</em>.</div>
41
	<form action="/cgi-bin/koha/catalogue/MARCdetail.pl" method="post">
42
	<form action="/cgi-bin/koha/catalogue/MARCdetail.pl" method="post">
43
	    [% INCLUDE 'csrf-token.inc' %]
42
        <input type="submit" class="btn btn-primary" value="OK" />
44
        <input type="submit" class="btn btn-primary" value="OK" />
43
	    <input type="hidden" name="biblionumber" value="[% biblionumber | html %]" />
45
	    <input type="hidden" name="biblionumber" value="[% biblionumber | html %]" />
44
	</form>
46
	</form>
45
    [% ELSE %]
47
    [% ELSE %]
46
	[% IF ( missingparameter ) %]
48
	[% IF ( missingparameter ) %]
47
	<form method="post" action="/cgi-bin/koha/cataloguing/linkitem.pl">
49
	<form method="post" action="/cgi-bin/koha/cataloguing/linkitem.pl">
50
	    [% INCLUDE 'csrf-token.inc' %]
48
	    [% IF ( missingbiblionumber ) %]
51
	    [% IF ( missingbiblionumber ) %]
49
	    <fieldset id="biblionumber_fieldset">
52
	    <fieldset id="biblionumber_fieldset">
50
		<label for="biblionumber_fieldset">Select the biblionumber to link the item to</label>
53
		<label for="biblionumber_fieldset">Select the biblionumber to link the item to</label>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/merge.tt (+2 lines)
Lines 101-106 div#result { margin-top: 1em; } Link Here
101
[% IF ( choosereference ) %]
101
[% IF ( choosereference ) %]
102
<p>Please choose which record will be the reference for the merge. The record chosen as reference will be kept, and the other will be deleted.</p>
102
<p>Please choose which record will be the reference for the merge. The record chosen as reference will be kept, and the other will be deleted.</p>
103
<form id="mergeform" action="/cgi-bin/koha/cataloguing/merge.pl" method="post">
103
<form id="mergeform" action="/cgi-bin/koha/cataloguing/merge.pl" method="post">
104
    [% INCLUDE 'csrf-token.inc' %]
104
    <fieldset class="rows">
105
    <fieldset class="rows">
105
    <legend>Merge reference</legend>
106
    <legend>Merge reference</legend>
106
    <ol>
107
    <ol>
Lines 164-169 div#result { margin-top: 1em; } Link Here
164
    </div>
165
    </div>
165
[% ELSE %]
166
[% ELSE %]
166
<form id="mergeform" action="/cgi-bin/koha/cataloguing/merge.pl" method="post" onsubmit="return mergeformsubmit()">
167
<form id="mergeform" action="/cgi-bin/koha/cataloguing/merge.pl" method="post" onsubmit="return mergeformsubmit()">
168
    [% INCLUDE 'csrf-token.inc' %]
167
169
168
<div class="col-sm-6">
170
<div class="col-sm-6">
169
[% PROCESS mergesource sourcerecords=records %]
171
[% PROCESS mergesource sourcerecords=records %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/moveitem.tt (+2 lines)
Lines 37-42 Link Here
37
                             <form action="/cgi-bin/koha/catalogue/ISBDdetail.pl" method="post">
37
                             <form action="/cgi-bin/koha/catalogue/ISBDdetail.pl" method="post">
38
                        [% ELSE %]
38
                        [% ELSE %]
39
                             <form action="/cgi-bin/koha/catalogue/detail.pl" method="post">
39
                             <form action="/cgi-bin/koha/catalogue/detail.pl" method="post">
40
                                 [% INCLUDE 'csrf-token.inc' %]
40
                        [% END %]
41
                        [% END %]
41
[% END %]
42
[% END %]
42
43
Lines 98-103 Link Here
98
    [% ELSE %]
99
    [% ELSE %]
99
	[% IF ( missingparameter ) %]
100
	[% IF ( missingparameter ) %]
100
	<form method="post" action="/cgi-bin/koha/cataloguing/moveitem.pl">
101
	<form method="post" action="/cgi-bin/koha/cataloguing/moveitem.pl">
102
	    [% INCLUDE 'csrf-token.inc' %]
101
	    [% IF ( missingbiblionumber ) %]
103
	    [% IF ( missingbiblionumber ) %]
102
	    <fieldset id="biblionumber_fieldset">
104
	    <fieldset id="biblionumber_fieldset">
103
		<label for="biblionumber">Select the biblionumber to attach the item to</label>
105
		<label for="biblionumber">Select the biblionumber to attach the item to</label>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/marc21_linking_section.tt (+1 lines)
Lines 16-21 Link Here
16
        <div id="MARC21_Linking_section_search" class="page-section">
16
        <div id="MARC21_Linking_section_search" class="page-section">
17
            <h2>Search for</h2>
17
            <h2>Search for</h2>
18
            <form name="f" method="post" action="/cgi-bin/koha/cataloguing/plugin_launcher.pl?plugin_name=marc21_linking_section.pl">
18
            <form name="f" method="post" action="/cgi-bin/koha/cataloguing/plugin_launcher.pl?plugin_name=marc21_linking_section.pl">
19
                [% INCLUDE 'csrf-token.inc' %]
19
20
20
                <p>
21
                <p>
21
                    <input type="hidden" name="plugin_name" value="marc21_linking_section.pl" />
22
                    <input type="hidden" name="plugin_name" value="marc21_linking_section.pl" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/unimarc_field_210c.tt (+1 lines)
Lines 10-15 Link Here
10
<h1>UNIMARC field 210c builder</h1>
10
<h1>UNIMARC field 210c builder</h1>
11
    <h4>Search for authority type: EDITORS</h4>
11
    <h4>Search for authority type: EDITORS</h4>
12
        <form name="f" method="post" action="plugin_launcher.pl">
12
        <form name="f" method="post" action="plugin_launcher.pl">
13
            [% INCLUDE 'csrf-token.inc' %]
13
        <fieldset class="rows">
14
        <fieldset class="rows">
14
            <input type="hidden" name="plugin_name" value="unimarc_field_210c.pl" />
15
            <input type="hidden" name="plugin_name" value="unimarc_field_210c.pl" />
15
            <input type="hidden" name="op" value="do_search" />
16
            <input type="hidden" name="op" value="do_search" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/unimarc_field_4XX.tt (+1 lines)
Lines 14-19 Link Here
14
            <div id="UNIMARC_Field_4XX_search" class="page-section">
14
            <div id="UNIMARC_Field_4XX_search" class="page-section">
15
                <h2> Search on  </h2>
15
                <h2> Search on  </h2>
16
                <form name="f" method="post" action="/cgi-bin/koha/cataloguing/plugin_launcher.pl?plugin_name=unimarc_field_4XX.pl">
16
                <form name="f" method="post" action="/cgi-bin/koha/cataloguing/plugin_launcher.pl?plugin_name=unimarc_field_4XX.pl">
17
                    [% INCLUDE 'csrf-token.inc' %]
17
18
18
                    <p>
19
                    <p>
19
                        <input type="hidden" name="plugin_name" value="unimarc_field_4XX.pl" />
20
                        <input type="hidden" name="plugin_name" value="unimarc_field_4XX.pl" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/z3950_auth_search.tt (+2 lines)
Lines 18-23 Link Here
18
    [% IF ( opsearch ) %]
18
    [% IF ( opsearch ) %]
19
        <h1>Z39.50 authority search points</h1>
19
        <h1>Z39.50 authority search points</h1>
20
        <form method="post" action="z3950_auth_search.pl" name="f" class="checkboxed">
20
        <form method="post" action="z3950_auth_search.pl" name="f" class="checkboxed">
21
            [% INCLUDE 'csrf-token.inc' %]
21
        <input type="hidden" name="op" id="op" value="do_search" />
22
        <input type="hidden" name="op" id="op" value="do_search" />
22
        <input type="hidden" name="authid" value="[% authid | html %]" />
23
        <input type="hidden" name="authid" value="[% authid | html %]" />
23
        <input type="hidden" name="index" value="[% index | html %]" />
24
        <input type="hidden" name="index" value="[% index | html %]" />
Lines 118-123 Link Here
118
    </div>
119
    </div>
119
120
120
    <form method="post" action="z3950_auth_search.pl" id="page_form" name="page_form" class="checkboxed">
121
    <form method="post" action="z3950_auth_search.pl" id="page_form" name="page_form" class="checkboxed">
122
        [% INCLUDE 'csrf-token.inc' %]
121
        <input type="hidden" name="op" id="op" value="do_search" />
123
        <input type="hidden" name="op" id="op" value="do_search" />
122
        <input type="hidden" name="current_page" id="current_page" value="[% current_page | html %]" />
124
        <input type="hidden" name="current_page" id="current_page" value="[% current_page | html %]" />
123
        <input type="hidden" id="nameany"  name="nameany" value="[% nameany | html %]" />
125
        <input type="hidden" id="nameany"  name="nameany" value="[% nameany | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/z3950_search.tt (+2 lines)
Lines 38-43 Link Here
38
        [% IF ( opsearch ) %]
38
        [% IF ( opsearch ) %]
39
            <h1>Z39.50/SRU search</h1>
39
            <h1>Z39.50/SRU search</h1>
40
            <form method="post" action="z3950_search.pl" name="f" class="checkboxed">
40
            <form method="post" action="z3950_search.pl" name="f" class="checkboxed">
41
                [% INCLUDE 'csrf-token.inc' %]
41
                <div class="row">
42
                <div class="row">
42
                    <div class="col-xs-6">
43
                    <div class="col-xs-6">
43
                        <input type="hidden" name="op" id="op" value="do_search" />
44
                        <input type="hidden" name="op" id="op" value="do_search" />
Lines 221-226 Link Here
221
                            </div>
222
                            </div>
222
223
223
                            <form method="post" action="z3950_search.pl" id="page_form" name="page_form" class="checkboxed">
224
                            <form method="post" action="z3950_search.pl" id="page_form" name="page_form" class="checkboxed">
225
                                [% INCLUDE 'csrf-token.inc' %]
224
                                <input type="hidden" name="op" id="op" value="do_search" />
226
                                <input type="hidden" name="op" id="op" value="do_search" />
225
                                <input type="hidden" name="current_page" id="current_page" value="[% current_page | html %]" />
227
                                <input type="hidden" name="current_page" id="current_page" value="[% current_page | html %]" />
226
                                <input type="hidden" id="title"  name="title" value="[% title | html %]" />
228
                                <input type="hidden" id="title"  name="title" value="[% title | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/article-requests.tt (+1 lines)
Lines 157-162 Link Here
157
                [% PROCESS urls_modal %]
157
                [% PROCESS urls_modal %]
158
158
159
                <form id="ar-branchcode-form" method="post">
159
                <form id="ar-branchcode-form" method="post">
160
                    [% INCLUDE 'csrf-token.inc' %]
160
                    <select name="branchcode" id="branchcode">
161
                    <select name="branchcode" id="branchcode">
161
                        <option value="">All libraries</option>
162
                        <option value="">All libraries</option>
162
                        [% FOREACH b IN Branches.all( only_from_group => 1 ) %]
163
                        [% FOREACH b IN Branches.all( only_from_group => 1 ) %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchoverdues.tt (+1 lines)
Lines 36-41 Link Here
36
<h1>Circulation: Overdues at [% Branches.GetLoggedInBranchname | html %]</h1>
36
<h1>Circulation: Overdues at [% Branches.GetLoggedInBranchname | html %]</h1>
37
37
38
<form name="selectlocation" action="branchoverdues.pl" method="post">
38
<form name="selectlocation" action="branchoverdues.pl" method="post">
39
    [% INCLUDE 'csrf-token.inc' %]
39
    <label for="location">Shelving location selected: </label><select id="location" name="location">
40
    <label for="location">Shelving location selected: </label><select id="location" name="location">
40
        <option value="">All shelving locations</option>
41
        <option value="">All shelving locations</option>
41
        [% FOREACH locationsloo IN locationsloop %]
42
        [% FOREACH locationsloo IN locationsloop %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchtransfers.tt (+4 lines)
Lines 59-64 Link Here
59
                </th>
59
                </th>
60
                <td>
60
                <td>
61
                    <form method="post" name="mainform" id="mainform" action="branchtransfers.pl">
61
                    <form method="post" name="mainform" id="mainform" action="branchtransfers.pl">
62
                        [% INCLUDE 'csrf-token.inc' %]
62
                        [% FOREACH trsfitemloo IN trsfitemloop %]
63
                        [% FOREACH trsfitemloo IN trsfitemloop %]
63
                            <input type="hidden" name="bc-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.item.barcode | html %]" />
64
                            <input type="hidden" name="bc-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.item.barcode | html %]" />
64
                            <input type="hidden" name="fb-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.frombrcd | html %]" />
65
                            <input type="hidden" name="fb-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.frombrcd | html %]" />
Lines 85-90 Link Here
85
                        <th>Cancel hold and then attempt transfer:</th>
86
                        <th>Cancel hold and then attempt transfer:</th>
86
                        <td>
87
                        <td>
87
                            <form method="post" name="mainform" id="mainform" action="branchtransfers.pl">
88
                            <form method="post" name="mainform" id="mainform" action="branchtransfers.pl">
89
                                [% INCLUDE 'csrf-token.inc' %]
88
                                [% FOREACH trsfitemloo IN trsfitemloop %]
90
                                [% FOREACH trsfitemloo IN trsfitemloop %]
89
                                    <input type="hidden" name="bc-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.item.barcode | html %]" />
91
                                    <input type="hidden" name="bc-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.item.barcode | html %]" />
90
                                    <input type="hidden" name="fb-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.frombrcd | html %]" />
92
                                    <input type="hidden" name="fb-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.frombrcd | html %]" />
Lines 104-109 Link Here
104
                        <th>Ignore and return to transfers: </th>
106
                        <th>Ignore and return to transfers: </th>
105
                            <td>
107
                            <td>
106
                                <form method="post" name="mainform" id="mainform" action="branchtransfers.pl">
108
                                <form method="post" name="mainform" id="mainform" action="branchtransfers.pl">
109
                                    [% INCLUDE 'csrf-token.inc' %]
107
                                    <input type="hidden" name="tobranchcd" value="[% tobranchcd | html %]" />
110
                                    <input type="hidden" name="tobranchcd" value="[% tobranchcd | html %]" />
108
                                    <input type="hidden" name="barcode" />
111
                                    <input type="hidden" name="barcode" />
109
                                    [% FOREACH trsfitemloo IN trsfitemloop %]
112
                                    [% FOREACH trsfitemloo IN trsfitemloop %]
Lines 169-174 Link Here
169
172
170
<div id="branchtransfers">
173
<div id="branchtransfers">
171
    <form method="post" name="mainform" id="mainform" action="/cgi-bin/koha/circ/branchtransfers.pl">
174
    <form method="post" name="mainform" id="mainform" action="/cgi-bin/koha/circ/branchtransfers.pl">
175
        [% INCLUDE 'csrf-token.inc' %]
172
        <fieldset class="brief">
176
        <fieldset class="brief">
173
            <legend>Transfer</legend>
177
            <legend>Transfer</legend>
174
            <ol>
178
            <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/checkout-notes.tt (+1 lines)
Lines 56-61 Link Here
56
56
57
            [% IF ( notes.count ) %]
57
            [% IF ( notes.count ) %]
58
                <form id="mark_selected" method="post" action="/cgi-bin/koha/circ/checkout-notes.pl">
58
                <form id="mark_selected" method="post" action="/cgi-bin/koha/circ/checkout-notes.pl">
59
                    [% INCLUDE 'csrf-token.inc' %]
59
                    <div id="toolbar" class="btn-toolbar">
60
                    <div id="toolbar" class="btn-toolbar">
60
                        <button type="submit" class="btn btn-default markseen" name="mark_selected-seen" value="seen" disabled="disabled"><i class="fa-solid fa-eye"></i> Mark seen</button>
61
                        <button type="submit" class="btn btn-default markseen" name="mark_selected-seen" value="seen" disabled="disabled"><i class="fa-solid fa-eye"></i> Mark seen</button>
61
                        <button type="submit" class="btn btn-default markseen" name="mark_selected-notseen" value="notseen" disabled="disabled"><i class="fa-solid fa-eye-slash"></i> Mark not seen</button>
62
                        <button type="submit" class="btn btn-default markseen" name="mark_selected-notseen" value="notseen" disabled="disabled"><i class="fa-solid fa-eye-slash"></i> Mark not seen</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt (+4 lines)
Lines 242-247 Link Here
242
242
243
                            [% IF CAN_user_circulate_force_checkout or HIGHHOLDS %]
243
                            [% IF CAN_user_circulate_force_checkout or HIGHHOLDS %]
244
                                <form method="post" action="/cgi-bin/koha/circ/circulation.pl" autocomplete="off">
244
                                <form method="post" action="/cgi-bin/koha/circ/circulation.pl" autocomplete="off">
245
                                    [% INCLUDE 'csrf-token.inc' %]
245
                                    <input type="hidden" name="restoreduedatespec" />
246
                                    <input type="hidden" name="restoreduedatespec" />
246
247
247
                                    [% IF (forceallow) %]<input type="hidden" name="forceallow" value="1">[% END %]
248
                                    [% IF (forceallow) %]<input type="hidden" name="forceallow" value="1">[% END %]
Lines 334-339 Link Here
334
335
335
                            [% IF ADDITIONAL_MATERIALS && !CAN_user_circulate_force_checkout %]
336
                            [% IF ADDITIONAL_MATERIALS && !CAN_user_circulate_force_checkout %]
336
                                <form method="post" action="/cgi-bin/koha/circ/circulation.pl" autocomplete="off">
337
                                <form method="post" action="/cgi-bin/koha/circ/circulation.pl" autocomplete="off">
338
                                    [% INCLUDE 'csrf-token.inc' %]
337
                                    <input type="hidden" name="restoreduedatespec" />
339
                                    <input type="hidden" name="restoreduedatespec" />
338
340
339
                                    [% IF (forceallow) %]<input type="hidden" name="forceallow" value="1">[% END %]
341
                                    [% IF (forceallow) %]<input type="hidden" name="forceallow" value="1">[% END %]
Lines 572-577 Link Here
572
                                                            [% END %]
574
                                                            [% END %]
573
                                                            <td>
575
                                                            <td>
574
                                                                <form method="post" action="/cgi-bin/koha/circ/circulation.pl" autocomplete="off">
576
                                                                <form method="post" action="/cgi-bin/koha/circ/circulation.pl" autocomplete="off">
577
                                                                    [% INCLUDE 'csrf-token.inc' %]
575
                                                                    [% IF (forceallow) %]
578
                                                                    [% IF (forceallow) %]
576
                                                                        <input type="hidden" name="forceallow" value="1">
579
                                                                        <input type="hidden" name="forceallow" value="1">
577
                                                                    [% END %]
580
                                                                    [% END %]
Lines 631-636 Link Here
631
                            [% IF ( !noissues ) || ( Koha.Preference('OnSiteCheckouts') && Koha.Preference('OnSiteCheckoutsForce') )%]
634
                            [% IF ( !noissues ) || ( Koha.Preference('OnSiteCheckouts') && Koha.Preference('OnSiteCheckoutsForce') )%]
632
                                <div class="col-sm-6">
635
                                <div class="col-sm-6">
633
                                    <form method="post" action="/cgi-bin/koha/circ/circulation.pl" id="mainform" name="mainform" autocomplete="off">
636
                                    <form method="post" action="/cgi-bin/koha/circ/circulation.pl" id="mainform" name="mainform" autocomplete="off">
637
                                        [% INCLUDE 'csrf-token.inc' %]
634
                                        <input type="hidden" name="restoreduedatespec" />
638
                                        <input type="hidden" name="restoreduedatespec" />
635
                                        [% IF ( issue ) %]
639
                                        [% IF ( issue ) %]
636
                                            <fieldset id="circ_circulation_issue" class="lastchecked">
640
                                            <fieldset id="circ_circulation_issue" class="lastchecked">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation_batch_checkouts.tt (+2 lines)
Lines 82-87 Link Here
82
  </div>
82
  </div>
83
[% ELSIF patron and not checkout_infos %]
83
[% ELSIF patron and not checkout_infos %]
84
  <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/circ/circulation.pl">
84
  <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/circ/circulation.pl">
85
      [% INCLUDE 'csrf-token.inc' %]
85
    <fieldset id="circ_circulation_issue">
86
    <fieldset id="circ_circulation_issue">
86
      <label for="barcode">Checking out to [% INCLUDE 'patron-title.inc' %]</label>
87
      <label for="barcode">Checking out to [% INCLUDE 'patron-title.inc' %]</label>
87
      <fieldset class="rows">
88
      <fieldset class="rows">
Lines 120-125 Link Here
120
  [% IF confirmation_needed && CAN_user_circulate_force_checkout %]
121
  [% IF confirmation_needed && CAN_user_circulate_force_checkout %]
121
    <h3>Batch checkout confirmation [% IF patron %] for [% INCLUDE 'patron-title.inc' invert_name = 1 %] [% END %]</h3>
122
    <h3>Batch checkout confirmation [% IF patron %] for [% INCLUDE 'patron-title.inc' invert_name = 1 %] [% END %]</h3>
122
    <form method="post" action="/cgi-bin/koha/circ/circulation.pl" id="mainform" name="mainform" autocomplete="off">
123
    <form method="post" action="/cgi-bin/koha/circ/circulation.pl" id="mainform" name="mainform" autocomplete="off">
124
        [% INCLUDE 'csrf-token.inc' %]
123
  [% ELSE %]
125
  [% ELSE %]
124
    <h3>Batch checkout information [% IF patron.borrowernumber %] for [% INCLUDE 'patron-title.inc' invert_name = 1 %] |[% batch | html %]|[% END %]</h3>
126
    <h3>Batch checkout information [% IF patron.borrowernumber %] for [% INCLUDE 'patron-title.inc' invert_name = 1 %] |[% batch | html %]|[% END %]</h3>
125
  [% END %]
127
  [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/curbside_pickups.tt (+10 lines)
Lines 121-126 Link Here
121
                [% END %]
121
                [% END %]
122
122
123
                <form method="post" class="refresh-form">
123
                <form method="post" class="refresh-form">
124
                    [% INCLUDE 'csrf-token.inc' %]
124
                    <p>
125
                    <p>
125
                        <input type="hidden" name="tab" id="current-tab" value="[% tab | html %]" />
126
                        <input type="hidden" name="tab" id="current-tab" value="[% tab | html %]" />
126
                        <button type="submit" class="btn btn-default"><i class="fa-solid fa-rotate" aria-hidden="true"></i> Refresh</button>
127
                        <button type="submit" class="btn btn-default"><i class="fa-solid fa-rotate" aria-hidden="true"></i> Refresh</button>
Lines 210-215 Link Here
210
                                                    </td>
211
                                                    </td>
211
                                                    <td>
212
                                                    <td>
212
                                                        <form method="post" class="form">
213
                                                        <form method="post" class="form">
214
                                                            [% INCLUDE 'csrf-token.inc' %]
213
                                                            <input type="hidden" name="op" value="mark-as-staged"/>
215
                                                            <input type="hidden" name="op" value="mark-as-staged"/>
214
                                                            <input type="hidden" name="tab" value="to-be-staged"/>
216
                                                            <input type="hidden" name="tab" value="to-be-staged"/>
215
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
217
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 219-224 Link Here
219
                                                        </form>
221
                                                        </form>
220
222
221
                                                        <form method="post" class="form">
223
                                                        <form method="post" class="form">
224
                                                            [% INCLUDE 'csrf-token.inc' %]
222
                                                            <input type="hidden" name="op" value="cancel"/>
225
                                                            <input type="hidden" name="op" value="cancel"/>
223
                                                            <input type="hidden" name="tab" value="to-be-staged"/>
226
                                                            <input type="hidden" name="tab" value="to-be-staged"/>
224
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
227
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 269-274 Link Here
269
                                                    </td>
272
                                                    </td>
270
                                                    <td>
273
                                                    <td>
271
                                                        <form method="post" class="form">
274
                                                        <form method="post" class="form">
275
                                                            [% INCLUDE 'csrf-token.inc' %]
272
                                                            <input type="hidden" name="op" value="mark-patron-has-arrived"/>
276
                                                            <input type="hidden" name="op" value="mark-patron-has-arrived"/>
273
                                                            <input type="hidden" name="tab" value="staged-and-ready"/>
277
                                                            <input type="hidden" name="tab" value="staged-and-ready"/>
274
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
278
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 278-283 Link Here
278
                                                        </form>
282
                                                        </form>
279
283
280
                                                        <form method="post" class="form">
284
                                                        <form method="post" class="form">
285
                                                            [% INCLUDE 'csrf-token.inc' %]
281
                                                            <input type="hidden" name="op" value="mark-as-delivered"/>
286
                                                            <input type="hidden" name="op" value="mark-as-delivered"/>
282
                                                            <input type="hidden" name="tab" value="staged-and-ready"/>
287
                                                            <input type="hidden" name="tab" value="staged-and-ready"/>
283
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
288
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 287-292 Link Here
287
                                                        </form>
292
                                                        </form>
288
293
289
                                                        <form method="post" class="form">
294
                                                        <form method="post" class="form">
295
                                                            [% INCLUDE 'csrf-token.inc' %]
290
                                                            <input type="hidden" name="op" value="mark-as-unstaged"/>
296
                                                            <input type="hidden" name="op" value="mark-as-unstaged"/>
291
                                                            <input type="hidden" name="tab" value="staged-and-ready"/>
297
                                                            <input type="hidden" name="tab" value="staged-and-ready"/>
292
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
298
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 337-342 Link Here
337
                                                    </td>
343
                                                    </td>
338
                                                    <td>
344
                                                    <td>
339
                                                        <form method="post" class="form">
345
                                                        <form method="post" class="form">
346
                                                            [% INCLUDE 'csrf-token.inc' %]
340
                                                            <input type="hidden" name="op" value="mark-as-delivered"/>
347
                                                            <input type="hidden" name="op" value="mark-as-delivered"/>
341
                                                            <input type="hidden" name="tab" value="patron-is-outside"/>
348
                                                            <input type="hidden" name="tab" value="patron-is-outside"/>
342
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
349
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 346-351 Link Here
346
                                                        </form>
353
                                                        </form>
347
354
348
                                                        <form method="post" class="form">
355
                                                        <form method="post" class="form">
356
                                                            [% INCLUDE 'csrf-token.inc' %]
349
                                                            <input type="hidden" name="op" value="mark-as-staged"/>
357
                                                            <input type="hidden" name="op" value="mark-as-staged"/>
350
                                                            <input type="hidden" name="tab" value="patron-is-outside"/>
358
                                                            <input type="hidden" name="tab" value="patron-is-outside"/>
351
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
359
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 355-360 Link Here
355
                                                        </form>
363
                                                        </form>
356
364
357
                                                        <form method="post" class="form">
365
                                                        <form method="post" class="form">
366
                                                            [% INCLUDE 'csrf-token.inc' %]
358
                                                            <input type="hidden" name="op" value="mark-as-unstaged"/>
367
                                                            <input type="hidden" name="op" value="mark-as-unstaged"/>
359
                                                            <input type="hidden" name="tab" value="patron-is-outside"/>
368
                                                            <input type="hidden" name="tab" value="patron-is-outside"/>
360
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
369
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 434-439 Link Here
434
                            [% SET waiting_holds = patron.holds.search( found => 'W', branchcode => Branches.GetLoggedInBranchcode ) %]
443
                            [% SET waiting_holds = patron.holds.search( found => 'W', branchcode => Branches.GetLoggedInBranchcode ) %]
435
                            [% IF !policy.enable_waiting_holds_only || waiting_holds.count > 0 %]
444
                            [% IF !policy.enable_waiting_holds_only || waiting_holds.count > 0 %]
436
                                <form id="create-pickup" method="post">
445
                                <form id="create-pickup" method="post">
446
                                    [% INCLUDE 'csrf-token.inc' %]
437
                                    <fieldset class="rows" style="float: none;">
447
                                    <fieldset class="rows" style="float: none;">
438
                                        <input type="hidden" name="borrowernumber" value="[% patron.id | html %]"/>
448
                                        <input type="hidden" name="borrowernumber" value="[% patron.id | html %]"/>
439
                                        <input type="hidden" name="op" value="create-pickup"/>
449
                                        <input type="hidden" name="op" value="create-pickup"/>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/overdue.tt (+1 lines)
Lines 157-162 Link Here
157
            <aside>
157
            <aside>
158
158
159
<form method="post" action="/cgi-bin/koha/circ/overdue.pl">
159
<form method="post" action="/cgi-bin/koha/circ/overdue.pl">
160
    [% INCLUDE 'csrf-token.inc' %]
160
  <fieldset class="brief">
161
  <fieldset class="brief">
161
<h4>Filter on:</h4>
162
<h4>Filter on:</h4>
162
    <fieldset><legend>Date due:</legend>
163
    <fieldset><legend>Date due:</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/pendingreserves.tt (+3 lines)
Lines 200-205 Link Here
200
        </td>
200
        </td>
201
        <td>
201
        <td>
202
            <form name="cancelReserve" action="/cgi-bin/koha/circ/pendingreserves.pl" method="post">
202
            <form name="cancelReserve" action="/cgi-bin/koha/circ/pendingreserves.pl" method="post">
203
                [% INCLUDE 'csrf-token.inc' %]
203
                <input type="hidden" name="op" value="cancel_reserve" />
204
                <input type="hidden" name="op" value="cancel_reserve" />
204
                <input type="hidden" name="reserve_id" value="[% hold.reserve_id | html %]" />
205
                <input type="hidden" name="reserve_id" value="[% hold.reserve_id | html %]" />
205
206
Lines 226-231 Link Here
226
        [% IF Koha.Preference('CanMarkHoldsToPullAsLost') != 'do_not_allow' %]
227
        [% IF Koha.Preference('CanMarkHoldsToPullAsLost') != 'do_not_allow' %]
227
            [% IF hold.itemnumber %]
228
            [% IF hold.itemnumber %]
228
                <form name="cancelReserve" action="/cgi-bin/koha/circ/pendingreserves.pl" method="post">
229
                <form name="cancelReserve" action="/cgi-bin/koha/circ/pendingreserves.pl" method="post">
230
                    [% INCLUDE 'csrf-token.inc' %]
229
                    <input type="hidden" name="reserve_id" value="[% hold.reserve_id | html %]" />
231
                    <input type="hidden" name="reserve_id" value="[% hold.reserve_id | html %]" />
230
                    [% IF Koha.Preference('CanMarkHoldsToPullAsLost') == 'allow' %]
232
                    [% IF Koha.Preference('CanMarkHoldsToPullAsLost') == 'allow' %]
231
                        <input type="hidden" name="op" value="mark_as_lost" />
233
                        <input type="hidden" name="op" value="mark_as_lost" />
Lines 280-285 Link Here
280
<div id="filters">
282
<div id="filters">
281
283
282
<form action="/cgi-bin/koha/circ/pendingreserves.pl" method="post" >
284
<form action="/cgi-bin/koha/circ/pendingreserves.pl" method="post" >
285
    [% INCLUDE 'csrf-token.inc' %]
283
<fieldset class="brief">
286
<fieldset class="brief">
284
<h4>Refine results</h4>
287
<h4>Refine results</h4>
285
<ol>
288
<ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/renew.tt (+9 lines)
Lines 56-61 Link Here
56
56
57
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
57
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
58
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
58
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
59
                                        [% INCLUDE 'csrf-token.inc' %]
59
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
60
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
60
                                        <input type="hidden" name="override_limit" value="1" />
61
                                        <input type="hidden" name="override_limit" value="1" />
61
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override limit and renew</button>
62
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override limit and renew</button>
Lines 68-73 Link Here
68
69
69
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
70
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
70
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
71
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
72
                                        [% INCLUDE 'csrf-token.inc' %]
71
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
73
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
72
                                        <input type="hidden" name="override_limit" value="1" />
74
                                        <input type="hidden" name="override_limit" value="1" />
73
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override limit and renew</button>
75
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override limit and renew</button>
Lines 80-85 Link Here
80
82
81
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
83
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
82
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
84
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
85
                                        [% INCLUDE 'csrf-token.inc' %]
83
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
86
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
84
                                        <input type="hidden" name="override_limit" value="1" />
87
                                        <input type="hidden" name="override_limit" value="1" />
85
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override and renew</button>
88
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override and renew</button>
Lines 92-97 Link Here
92
95
93
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
96
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
94
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
97
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
98
                                        [% INCLUDE 'csrf-token.inc' %]
95
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
99
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
96
                                        <input type="hidden" name="override_limit" value="1" />
100
                                        <input type="hidden" name="override_limit" value="1" />
97
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override and renew</button>
101
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override and renew</button>
Lines 104-109 Link Here
104
108
105
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
109
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
106
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
110
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
111
                                        [% INCLUDE 'csrf-token.inc' %]
107
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
112
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
108
                                        <input type="hidden" name="override_limit" value="1" />
113
                                        <input type="hidden" name="override_limit" value="1" />
109
                                        <input type="submit" class="approve" value="Override and renew" />
114
                                        <input type="submit" class="approve" value="Override and renew" />
Lines 116-121 Link Here
116
121
117
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
122
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
118
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
123
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
124
                                        [% INCLUDE 'csrf-token.inc' %]
119
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
125
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
120
                                        <input type="hidden" name="override_limit" value="1" />
126
                                        <input type="hidden" name="override_limit" value="1" />
121
                                        <input type="submit" class="approve" value="Override and renew" />
127
                                        <input type="submit" class="approve" value="Override and renew" />
Lines 128-133 Link Here
128
134
129
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
135
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
130
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
136
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
137
                                        [% INCLUDE 'csrf-token.inc' %]
131
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
138
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
132
                                        <input type="hidden" name="override_limit" value="1" />
139
                                        <input type="hidden" name="override_limit" value="1" />
133
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override limit and renew</button>
140
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override limit and renew</button>
Lines 139-144 Link Here
139
                                <p>[% INCLUDE 'biblio-title.inc' biblio=item.biblio link = 1 %] ( [% item.barcode | html %] ): This item is on hold for another patron.</p>
146
                                <p>[% INCLUDE 'biblio-title.inc' biblio=item.biblio link = 1 %] ( [% item.barcode | html %] ): This item is on hold for another patron.</p>
140
147
141
                                <form method="post" action="/cgi-bin/koha/circ/renew.pl">
148
                                <form method="post" action="/cgi-bin/koha/circ/renew.pl">
149
                                    [% INCLUDE 'csrf-token.inc' %]
142
                                    <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
150
                                    <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
143
                                    <input type="hidden" name="override_limit" value="1" />
151
                                    <input type="hidden" name="override_limit" value="1" />
144
                                    <input type="hidden" name="override_holds" value="1" />
152
                                    <input type="hidden" name="override_holds" value="1" />
Lines 191-196 Link Here
191
199
192
            [% UNLESS error %]
200
            [% UNLESS error %]
193
                <form method="post" action="/cgi-bin/koha/circ/renew.pl" autocomplete="off" >
201
                <form method="post" action="/cgi-bin/koha/circ/renew.pl" autocomplete="off" >
202
                    [% INCLUDE 'csrf-token.inc' %]
194
203
195
                    <fieldset>
204
                    <fieldset>
196
                        <h1>Renew</h1>
205
                        <h1>Renew</h1>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/request-article.tt (+1 lines)
Lines 112-117 Link Here
112
                                </div>
112
                                </div>
113
                            [% END %]
113
                            [% END %]
114
                            <form id="place-article-request" method="post" action="/cgi-bin/koha/circ/request-article.pl">
114
                            <form id="place-article-request" method="post" action="/cgi-bin/koha/circ/request-article.pl">
115
                                [% INCLUDE 'csrf-token.inc' %]
115
                                <input type="hidden" name="action" value="create" />
116
                                <input type="hidden" name="action" value="create" />
116
                                <input type="hidden" name="biblionumber" id="biblionumber" value="[% biblio.biblionumber | html %]" />
117
                                <input type="hidden" name="biblionumber" id="biblionumber" value="[% biblio.biblionumber | html %]" />
117
                                <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.id | html %]" />
118
                                <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.id | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/reserveratios.tt (+1 lines)
Lines 132-137 Link Here
132
            <aside>
132
            <aside>
133
133
134
<form action="/cgi-bin/koha/circ/reserveratios.pl" method="post" >
134
<form action="/cgi-bin/koha/circ/reserveratios.pl" method="post" >
135
    [% INCLUDE 'csrf-token.inc' %]
135
<fieldset class="brief">
136
<fieldset class="brief">
136
<h4>Refine results:</h4>
137
<h4>Refine results:</h4>
137
<ol>
138
<ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/returns.tt (+10 lines)
Lines 412-417 Link Here
412
                                        </div>
412
                                        </div>
413
                                        <div class="modal-footer">
413
                                        <div class="modal-footer">
414
                                            <form method="post" action="/cgi-bin/koha/circ/returns.pl" autocomplete="off">
414
                                            <form method="post" action="/cgi-bin/koha/circ/returns.pl" autocomplete="off">
415
                                                [% INCLUDE 'csrf-token.inc' %]
415
                                                <input type="hidden" name="barcode" value="[% item.barcode | html %]" />
416
                                                <input type="hidden" name="barcode" value="[% item.barcode | html %]" />
416
                                                <input type="hidden" name="return_date_override" value="[% return_date_override | html %]" />
417
                                                <input type="hidden" name="return_date_override" value="[% return_date_override | html %]" />
417
                                                <input type="hidden" name="return_date_override_remember" value="[% return_date_override_remember | html %]" />
418
                                                <input type="hidden" name="return_date_override_remember" value="[% return_date_override_remember | html %]" />
Lines 436-441 Link Here
436
                            <div class="modal-dialog modal-wide">
437
                            <div class="modal-dialog modal-wide">
437
                                <div class="modal-content">
438
                                <div class="modal-content">
438
                                    <form method="post">
439
                                    <form method="post">
440
                                        [% INCLUDE 'csrf-token.inc' %]
439
                                        <div class="modal-header">
441
                                        <div class="modal-header">
440
                                            <h3>Please confirm bundle contents for [% item.barcode | html %]</h3>
442
                                            <h3>Please confirm bundle contents for [% item.barcode | html %]</h3>
441
                                        </div>
443
                                        </div>
Lines 522-527 Link Here
522
                                <div class="modal-dialog">
524
                                <div class="modal-dialog">
523
                                    <div class="modal-content">
525
                                    <div class="modal-content">
524
                                        <form method="post" action="returns.pl" name="mainform" id="mainform">
526
                                        <form method="post" action="returns.pl" name="mainform" id="mainform">
527
                                            [% INCLUDE 'csrf-token.inc' %]
525
                                            <div class="modal-header">
528
                                            <div class="modal-header">
526
                                                <h3>
529
                                                <h3>
527
                                                    Cannot check in
530
                                                    Cannot check in
Lines 566-571 Link Here
566
                                    <div class="modal-dialog">
569
                                    <div class="modal-dialog">
567
                                        <div class="modal-content">
570
                                        <div class="modal-content">
568
                                            <form method="post" action="returns.pl" name="wrongtransferform" id="wrongtransferform">
571
                                            <form method="post" action="returns.pl" name="wrongtransferform" id="wrongtransferform">
572
                                                [% INCLUDE 'csrf-token.inc' %]
569
                                                <input type="hidden" name="return_date_override" value="[% return_date_override | html %]" />
573
                                                <input type="hidden" name="return_date_override" value="[% return_date_override | html %]" />
570
                                                <input type="hidden" name="return_date_override_remember" value="[% return_date_override_remember | html %]" />
574
                                                <input type="hidden" name="return_date_override_remember" value="[% return_date_override_remember | html %]" />
571
                                                <input type="hidden" name="itemnumber" value="[% itemnumber | html %]" />
575
                                                <input type="hidden" name="itemnumber" value="[% itemnumber | html %]" />
Lines 611-616 Link Here
611
                                    <div class="modal-dialog">
615
                                    <div class="modal-dialog">
612
                                        <div class="modal-content">
616
                                        <div class="modal-content">
613
                                            <form method="post" action="returns.pl" class="confirm">
617
                                            <form method="post" action="returns.pl" class="confirm">
618
                                                [% INCLUDE 'csrf-token.inc' %]
614
                                                <div class="modal-header">
619
                                                <div class="modal-header">
615
                                                    <h3>
620
                                                    <h3>
616
                                                        Hold found (item is already waiting):
621
                                                        Hold found (item is already waiting):
Lines 712-717 Link Here
712
                                    <div class="modal-dialog">
717
                                    <div class="modal-dialog">
713
                                        <div class="modal-content">
718
                                        <div class="modal-content">
714
                                            <form method="post" action="returns.pl" name="mainform" id="mainform">
719
                                            <form method="post" action="returns.pl" name="mainform" id="mainform">
720
                                                [% INCLUDE 'csrf-token.inc' %]
715
721
716
                                                <input type="hidden" name="print_slip" value="0" />
722
                                                <input type="hidden" name="print_slip" value="0" />
717
723
Lines 770-775 Link Here
770
                                    <div class="modal-dialog">
776
                                    <div class="modal-dialog">
771
                                        <div class="modal-content">
777
                                        <div class="modal-content">
772
                                            <form method="post" action="returns.pl" class="confirm">
778
                                            <form method="post" action="returns.pl" class="confirm">
779
                                                [% INCLUDE 'csrf-token.inc' %]
773
780
774
                                                <input type="hidden" name="print_slip" value="0" />
781
                                                <input type="hidden" name="print_slip" value="0" />
775
782
Lines 886-891 Link Here
886
                                    <div class="modal-dialog">
893
                                    <div class="modal-dialog">
887
                                        <div class="modal-content">
894
                                        <div class="modal-content">
888
                                            <form method="post" action="/cgi-bin/koha/circ/returns.pl" class="confirm">
895
                                            <form method="post" action="/cgi-bin/koha/circ/returns.pl" class="confirm">
896
                                                [% INCLUDE 'csrf-token.inc' %]
889
897
890
                                                <div class="modal-header">
898
                                                <div class="modal-header">
891
                                                    <h3>
899
                                                    <h3>
Lines 987-992 Link Here
987
                                    <div class="modal-dialog">
995
                                    <div class="modal-dialog">
988
                                        <div class="modal-content">
996
                                        <div class="modal-content">
989
                                            <form method="post" action="/cgi-bin/koha/circ/returns.pl" class="confirm">
997
                                            <form method="post" action="/cgi-bin/koha/circ/returns.pl" class="confirm">
998
                                                [% INCLUDE 'csrf-token.inc' %]
990
999
991
                                                <div class="modal-header">
1000
                                                <div class="modal-header">
992
                                                    <h3>
1001
                                                    <h3>
Lines 1079-1084 Link Here
1079
                        </div>
1088
                        </div>
1080
1089
1081
                        <form id="checkin-form" method="post" action="/cgi-bin/koha/circ/returns.pl" autocomplete="off" >
1090
                        <form id="checkin-form" method="post" action="/cgi-bin/koha/circ/returns.pl" autocomplete="off" >
1091
                            [% INCLUDE 'csrf-token.inc' %]
1082
                            <fieldset id="circ_returns_checkin">
1092
                            <fieldset id="circ_returns_checkin">
1083
                                <div class="show_checkin_dialog" style="float:right;display:none"><button type="button" class="btn btn-default btn-sm" data-toggle="tooltip" title="Show the last checkin message"><i class="fa fa-info"></i></button></div>
1093
                                <div class="show_checkin_dialog" style="float:right;display:none"><button type="button" class="btn btn-default btn-sm" data-toggle="tooltip" title="Show the last checkin message"><i class="fa fa-info"></i></button></div>
1084
                                <h1>Check in</h1>
1094
                                <h1>Check in</h1>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt (+2 lines)
Lines 68-73 Updated:<ul> Link Here
68
    [% END %]
68
    [% END %]
69
    </ul>
69
    </ul>
70
<form method="post" action="[% referer or "/cgi-bin/koha/circ/circulation.pl" %]">
70
<form method="post" action="[% referer or "/cgi-bin/koha/circ/circulation.pl" %]">
71
    [% INCLUDE 'csrf-token.inc' %]
71
    <div class="noshow">
72
    <div class="noshow">
72
        [% FOREACH recycle_loo IN recycle_loop %]
73
        [% FOREACH recycle_loo IN recycle_loop %]
73
        <input type="text" name="[% recycle_loo.param | html %]" value="[% recycle_loo.value | html %]" />
74
        <input type="text" name="[% recycle_loo.param | html %]" value="[% recycle_loo.value | html %]" />
Lines 79-84 Updated:<ul> Link Here
79
[% ELSE %]
80
[% ELSE %]
80
81
81
<form method="post" action="set-library.pl">
82
<form method="post" action="set-library.pl">
83
    [% INCLUDE 'csrf-token.inc' %]
82
[% IF ( CAN_user_superlibrarian || CAN_user_loggedinlibrary ) %]
84
[% IF ( CAN_user_superlibrarian || CAN_user_loggedinlibrary ) %]
83
<fieldset class="rows">
85
<fieldset class="rows">
84
    <legend>Set library</legend>
86
    <legend>Set library</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/waitingreserves.tt (+3 lines)
Lines 65-70 Link Here
65
                                        Please retain this item and check it in to process the hold.
65
                                        Please retain this item and check it in to process the hold.
66
                                        </p>
66
                                        </p>
67
                                        <form name="cancelReservewithtransfert" action="waitingreserves.pl#[% tab | html %]" method="post">
67
                                        <form name="cancelReservewithtransfert" action="waitingreserves.pl#[% tab | html %]" method="post">
68
                                            [% INCLUDE 'csrf-token.inc' %]
68
                                            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
69
                                            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
69
                                        </form>
70
                                        </form>
70
                                    </div>
71
                                    </div>
Lines 76-81 Link Here
76
                                        Please retain this item and check it in to process the hold.
77
                                        Please retain this item and check it in to process the hold.
77
                                        </p>
78
                                        </p>
78
                                        <form name="cancelReservewithwaiting" action="waitingreserves.pl#[% tab | html %]" method="post">
79
                                        <form name="cancelReservewithwaiting" action="waitingreserves.pl#[% tab | html %]" method="post">
80
                                            [% INCLUDE 'csrf-token.inc' %]
79
                                            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
81
                                            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
80
                                        </form>
82
                                        </form>
81
                                    </div>
83
                                    </div>
Lines 122-127 Link Here
122
                                            <span id="holdsover-cancel-all">
124
                                            <span id="holdsover-cancel-all">
123
                                                <button class="cancel_selected_holds" data-bulk="true"></button>
125
                                                <button class="cancel_selected_holds" data-bulk="true"></button>
124
                                                <form name="cancelAllReserve" action="waitingreserves.pl" method="post">
126
                                                <form name="cancelAllReserve" action="waitingreserves.pl" method="post">
127
                                                    [% INCLUDE 'csrf-token.inc' %]
125
                                                    <input type="hidden" name="cancelall" value="1" />
128
                                                    <input type="hidden" name="cancelall" value="1" />
126
                                                    <input type="hidden" name="allbranches" value="[% allbranches | html %]" />
129
                                                    <input type="hidden" name="allbranches" value="[% allbranches | html %]" />
127
                                                    <input type="hidden" name="tab" value="holdsover">
130
                                                    <input type="hidden" name="tab" value="holdsover">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/clubs/clubs-add-modify.tt (+1 lines)
Lines 43-48 Link Here
43
        <div class="col-md-8 col-md-offset-2">
43
        <div class="col-md-8 col-md-offset-2">
44
44
45
            <form method="post" class="validated">
45
            <form method="post" class="validated">
46
                [% INCLUDE 'csrf-token.inc' %]
46
                <input type="hidden" name="id" value="[% club.id | html %]" />
47
                <input type="hidden" name="id" value="[% club.id | html %]" />
47
                <input type="hidden" name="club_template_id" value="[% club_template.id | html %]" />
48
                <input type="hidden" name="club_template_id" value="[% club_template.id | html %]" />
48
49
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/clubs/templates-add-modify.tt (+1 lines)
Lines 48-53 Link Here
48
        <div class="col-md-8 col-md-offset-2">
48
        <div class="col-md-8 col-md-offset-2">
49
49
50
            <form method="post" class="validated">
50
            <form method="post" class="validated">
51
                [% INCLUDE 'csrf-token.inc' %]
51
                <input type="hidden" name="id" value="[% club_template.id | html %]" />
52
                <input type="hidden" name="id" value="[% club_template.id | html %]" />
52
53
53
                <h1>
54
                <h1>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/course_reserves/add_items-step1.tt (+1 lines)
Lines 40-45 Link Here
40
        [% END %]
40
        [% END %]
41
41
42
        <form method="post" action="/cgi-bin/koha/course_reserves/add_items.pl">
42
        <form method="post" action="/cgi-bin/koha/course_reserves/add_items.pl">
43
            [% INCLUDE 'csrf-token.inc' %]
43
            <input type="hidden" name="course_id" value="[% course.course_id | html %]" />
44
            <input type="hidden" name="course_id" value="[% course.course_id | html %]" />
44
            <input type="hidden" name="action" value="lookup" />
45
            <input type="hidden" name="action" value="lookup" />
45
46
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/course_reserves/add_items-step2.tt (+1 lines)
Lines 50-55 Link Here
50
        [% END %]
50
        [% END %]
51
51
52
        <form method="post" action="/cgi-bin/koha/course_reserves/add_items.pl">
52
        <form method="post" action="/cgi-bin/koha/course_reserves/add_items.pl">
53
            [% INCLUDE 'csrf-token.inc' %]
53
            <input type="hidden" name="course_id" value="[% course.course_id | html %]" />
54
            <input type="hidden" name="course_id" value="[% course.course_id | html %]" />
54
            <input type="hidden" name="return" value="[% return | html %]" />
55
            <input type="hidden" name="return" value="[% return | html %]" />
55
            <input type="hidden" name="action" value="add" />
56
            <input type="hidden" name="action" value="add" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/course_reserves/batch_add_items.tt (+1 lines)
Lines 39-44 Link Here
39
39
40
        [% IF action == 'display_form' %]
40
        [% IF action == 'display_form' %]
41
            <form method="post" action="/cgi-bin/koha/course_reserves/batch_add_items.pl">
41
            <form method="post" action="/cgi-bin/koha/course_reserves/batch_add_items.pl">
42
                [% INCLUDE 'csrf-token.inc' %]
42
                <input type="hidden" name="course_id" value="[% course.course_id | html %]" />
43
                <input type="hidden" name="course_id" value="[% course.course_id | html %]" />
43
                <input type="hidden" name="action" value="add" />
44
                <input type="hidden" name="action" value="add" />
44
45
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/course_reserves/batch_rm_items.tt (+1 lines)
Lines 28-33 Link Here
28
            <h1>Batch remove reserves</h1>
28
            <h1>Batch remove reserves</h1>
29
        [% IF action == 'display_form' %]
29
        [% IF action == 'display_form' %]
30
            <form method="post" action="/cgi-bin/koha/course_reserves/batch_rm_items.pl">
30
            <form method="post" action="/cgi-bin/koha/course_reserves/batch_rm_items.pl">
31
                [% INCLUDE 'csrf-token.inc' %]
31
                <input type="hidden" name="action" value="batch_rm" />
32
                <input type="hidden" name="action" value="batch_rm" />
32
                <fieldset class="rows">
33
                <fieldset class="rows">
33
                    <legend>Remove items: scan barcodes</legend>
34
                    <legend>Remove items: scan barcodes</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/course_reserves/course.tt (+1 lines)
Lines 50-55 Link Here
50
                </h1>
50
                </h1>
51
51
52
            <form method="post" action="/cgi-bin/koha/course_reserves/mod_course.pl" class="validated">
52
            <form method="post" action="/cgi-bin/koha/course_reserves/mod_course.pl" class="validated">
53
                [% INCLUDE 'csrf-token.inc' %]
53
                [% IF course_id %]<input type="hidden" name="course_id" value="[% course_id | html %]" />[% END %]
54
                [% IF course_id %]<input type="hidden" name="course_id" value="[% course_id | html %]" />[% END %]
54
                <fieldset class="rows">
55
                <fieldset class="rows">
55
                    <legend>[% IF course_id %]Edit course[% ELSE %]Create course[% END %]</legend>
56
                    <legend>[% IF course_id %]Edit course[% ELSE %]Create course[% END %]</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt (+6 lines)
Lines 168-173 Link Here
168
                        [% END %]
168
                        [% END %]
169
                        [% IF request.biblio_id && request.biblio_id.length > 0  && !whole.value.check_out_errors.error.STATS %]
169
                        [% IF request.biblio_id && request.biblio_id.length > 0  && !whole.value.check_out_errors.error.STATS %]
170
                            <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
170
                            <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
171
                                [% INCLUDE 'csrf-token.inc' %]
171
                                <fieldset class="rows">
172
                                <fieldset class="rows">
172
                                    <legend>Check out details</legend>
173
                                    <legend>Check out details</legend>
173
                                    [% items = whole.value.biblio.items.unblessed %]
174
                                    [% items = whole.value.biblio.items.unblessed %]
Lines 308-313 Link Here
308
                    [% IF whole.value.partners %]
309
                    [% IF whole.value.partners %]
309
                       [% ill_url = "/cgi-bin/koha/ill/ill-requests.pl?method=illview&illrequest_id=" _ request.illrequest_id %]
310
                       [% ill_url = "/cgi-bin/koha/ill/ill-requests.pl?method=illview&illrequest_id=" _ request.illrequest_id %]
310
                        <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
311
                        <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
312
                            [% INCLUDE 'csrf-token.inc' %]
311
                            <fieldset class="rows">
313
                            <fieldset class="rows">
312
                                <legend>Interlibrary loan request details</legend>
314
                                <legend>Interlibrary loan request details</legend>
313
                                <ol>
315
                                <ol>
Lines 386-391 Link Here
386
388
387
                [% ELSIF query_type == 'edit_action' %]
389
                [% ELSIF query_type == 'edit_action' %]
388
                    <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
390
                    <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
391
                        [% INCLUDE 'csrf-token.inc' %]
389
                        <fieldset class="rows">
392
                        <fieldset class="rows">
390
                            <legend>Request details</legend>
393
                            <legend>Request details</legend>
391
                            <ol>
394
                            <ol>
Lines 471-476 Link Here
471
                    <div class="dialog alert">
474
                    <div class="dialog alert">
472
                        <h3>Are you sure you wish to delete this request?</h3>
475
                        <h3>Are you sure you wish to delete this request?</h3>
473
                        <form action="/cgi-bin/koha/ill/ill-requests.pl" method="post">
476
                        <form action="/cgi-bin/koha/ill/ill-requests.pl" method="post">
477
                            [% INCLUDE 'csrf-token.inc' %]
474
                            <input type="hidden" name="method" value="delete" />
478
                            <input type="hidden" name="method" value="delete" />
475
                            <input type="hidden" name="confirmed" value="1" />
479
                            <input type="hidden" name="confirmed" value="1" />
476
                            <input type="hidden" name="illrequest_id" value="[% request.id | html %]" />
480
                            <input type="hidden" name="illrequest_id" value="[% request.id | html %]" />
Lines 747-752 Link Here
747
                                <h3><a id="toggle_addcomment" href="#">Add comment</a></h3>
751
                                <h3><a id="toggle_addcomment" href="#">Add comment</a></h3>
748
                                <div id="addcomment" class="content_hidden">
752
                                <div id="addcomment" class="content_hidden">
749
                                    <form class="validated" method="post" action="/cgi-bin/koha/ill/ill-requests.pl">
753
                                    <form class="validated" method="post" action="/cgi-bin/koha/ill/ill-requests.pl">
754
                                        [% INCLUDE 'csrf-token.inc' %]
750
                                        <input type="hidden" value="save_comment" name="method">
755
                                        <input type="hidden" value="save_comment" name="method">
751
                                        [% INCLUDE csrf-token.inc %]
756
                                        [% INCLUDE csrf-token.inc %]
752
                                        <input type="hidden" value="[% request.illrequest_id | html %]" name="illrequest_id">
757
                                        <input type="hidden" value="[% request.illrequest_id | html %]" name="illrequest_id">
Lines 780-785 Link Here
780
                    <div id="results" class="page-section">
785
                    <div id="results" class="page-section">
781
                        <h3>Displaying availability results</h3>
786
                        <h3>Displaying availability results</h3>
782
                        <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
787
                        <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
788
                            [% INCLUDE 'csrf-token.inc' %]
783
                            [% FOREACH key IN whole.keys %]
789
                            [% FOREACH key IN whole.keys %]
784
                                [% value = whole.$key %]
790
                                [% value = whole.$key %]
785
                                [% IF key != 'method' && key != 'custom_key' && key != 'custom_value' %]
791
                                [% IF key != 'method' && key != 'custom_key' && key != 'custom_value' %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/installer/auth.tt (+1 lines)
Lines 39-44 Link Here
39
                    <p>Before we begin, please verify you have the correct credentials to continue. Please log in with the username and password given to you by your systems administrator and located in your <code>koha-conf.xml</code> configuration file.</p>
39
                    <p>Before we begin, please verify you have the correct credentials to continue. Please log in with the username and password given to you by your systems administrator and located in your <code>koha-conf.xml</code> configuration file.</p>
40
40
41
                    <form action="[% url | html %]" method="post" id="mainform">
41
                    <form action="[% url | html %]" method="post" id="mainform">
42
                        [% INCLUDE 'csrf-token.inc' %]
42
                        [% FOREACH INPUT IN INPUTS %]
43
                        [% FOREACH INPUT IN INPUTS %]
43
                            <input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />
44
                            <input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />
44
                        [% END %]
45
                        [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/installer/step1.tt (+1 lines)
Lines 41-46 Link Here
41
                    <p>Please pick your language from the following list. If your language is not listed, please inform your system administrator.</p>
41
                    <p>Please pick your language from the following list. If your language is not listed, please inform your system administrator.</p>
42
42
43
                    <form name="language" method="post" action="install.pl">
43
                    <form name="language" method="post" action="install.pl">
44
                        [% INCLUDE 'csrf-token.inc' %]
44
                        <div class="form-group">
45
                        <div class="form-group">
45
                            <label for="language">Select a language: </label>
46
                            <label for="language">Select a language: </label>
46
                            <select id="language" name="language">
47
                            <select id="language" name="language">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/installer/step2.tt (+2 lines)
Lines 34-39 Link Here
34
34
35
                [% IF ( dbconnection ) %]
35
                [% IF ( dbconnection ) %]
36
                    <form name="checkdbparameters" method="post" action="install.pl">
36
                    <form name="checkdbparameters" method="post" action="install.pl">
37
                        [% INCLUDE 'csrf-token.inc' %]
37
                        [% IF ( checkdatabaseaccess ) %]
38
                        [% IF ( checkdatabaseaccess ) %]
38
                            <div class="alert alert-success" role="alert"><p>Connection established.</p></div>
39
                            <div class="alert alert-success" role="alert"><p>Connection established.</p></div>
39
                            [% IF ( checkdatabasecreated ) %]
40
                            [% IF ( checkdatabasecreated ) %]
Lines 80-85 Link Here
80
                    </form>
81
                    </form>
81
                [% ELSE %]
82
                [% ELSE %]
82
                    <form name="checkinformation" method="post" action="install.pl">
83
                    <form name="checkinformation" method="post" action="install.pl">
84
                        [% INCLUDE 'csrf-token.inc' %]
83
                        <input type="hidden" name="step" value="2" />
85
                        <input type="hidden" name="step" value="2" />
84
                        <input type="hidden" name="checkdb" value="1" />
86
                        <input type="hidden" name="checkdb" value="1" />
85
                        <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /> </p>
87
                        <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /> </p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/installer/step3.tt (+6 lines)
Lines 78-83 Link Here
78
                    </div>
78
                    </div>
79
79
80
                    <form name="frameworkselection" method="post" action="install.pl">
80
                    <form name="frameworkselection" method="post" action="install.pl">
81
                        [% INCLUDE 'csrf-token.inc' %]
81
                        <input type="hidden" name="step" value="3" />
82
                        <input type="hidden" name="step" value="3" />
82
                        <input type="hidden" name="op" value="selectframeworks" />
83
                        <input type="hidden" name="op" value="selectframeworks" />
83
84
Lines 117-122 Link Here
117
                    </div>
118
                    </div>
118
119
119
                    <form name="frameworkselection" method="post" action="install.pl">
120
                    <form name="frameworkselection" method="post" action="install.pl">
121
                        [% INCLUDE 'csrf-token.inc' %]
120
                        <input type="hidden" name="step" value="3" />
122
                        <input type="hidden" name="step" value="3" />
121
                        <input type="hidden" name="op" value="addframeworks" />
123
                        <input type="hidden" name="op" value="addframeworks" />
122
                        [% IF ( frameworksloop ) %]
124
                        [% IF ( frameworksloop ) %]
Lines 246-251 Link Here
246
                    <p>In the next steps you will be guided through some basic requirements like defining Koha user with all administrative privileges (superlibrarian).</p>
248
                    <p>In the next steps you will be guided through some basic requirements like defining Koha user with all administrative privileges (superlibrarian).</p>
247
249
248
                    <form action="/cgi-bin/koha/installer/install.pl" method="post" name="finish">
250
                    <form action="/cgi-bin/koha/installer/install.pl" method="post" name="finish">
251
                        [% INCLUDE 'csrf-token.inc' %]
249
                        <h4>
252
                        <h4>
250
                            You can help the Koha community by sharing your statistics with us.
253
                            You can help the Koha community by sharing your statistics with us.
251
                        </h4>
254
                        </h4>
Lines 283-288 Link Here
283
                        </div>
286
                        </div>
284
287
285
                        <form action="install.pl" method="post">
288
                        <form action="install.pl" method="post">
289
                            [% INCLUDE 'csrf-token.inc' %]
286
                            <input type="hidden" name="step" value="3" />
290
                            <input type="hidden" name="step" value="3" />
287
                            <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /></p>
291
                            <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /></p>
288
                        </form>
292
                        </form>
Lines 305-310 Link Here
305
309
306
                    <p>Now we're ready to create the database tables and fill them with some default data.</p>
310
                    <p>Now we're ready to create the database tables and fill them with some default data.</p>
307
                    <form action="install.pl" method="post">
311
                    <form action="install.pl" method="post">
312
                        [% INCLUDE 'csrf-token.inc' %]
308
                        <input type="hidden" name="step" value="3" />
313
                        <input type="hidden" name="step" value="3" />
309
                        <input type="hidden" name="op" value="importdatastructure" />
314
                        <input type="hidden" name="op" value="importdatastructure" />
310
                        <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /></p>
315
                        <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /></p>
Lines 332-337 Link Here
332
337
333
                        <p>We are ready to do some basic configuration.</p>
338
                        <p>We are ready to do some basic configuration.</p>
334
                        <form action="install.pl" method="post">
339
                        <form action="install.pl" method="post">
340
                            [% INCLUDE 'csrf-token.inc' %]
335
                            <input type="hidden" name="step" value="3" />
341
                            <input type="hidden" name="step" value="3" />
336
                            <input type="hidden" name="op" value="choosemarc" />
342
                            <input type="hidden" name="op" value="choosemarc" />
337
                            <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /></p>
343
                            <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /></p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/barcode-print.tt (+1 lines)
Lines 62-67 Link Here
62
                <h2>Barcode image generator</h2>
62
                <h2>Barcode image generator</h2>
63
63
64
                <form action="/cgi-bin/koha/svc/barcode" method="post" id="barcodegen">
64
                <form action="/cgi-bin/koha/svc/barcode" method="post" id="barcodegen">
65
                    [% INCLUDE 'csrf-token.inc' %]
65
                    <fieldset class="brief">
66
                    <fieldset class="brief">
66
                        <div class="row">
67
                        <div class="row">
67
                            <div class="col-sm-6">
68
                            <div class="col-sm-6">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/label-bib-search.tt (+1 lines)
Lines 6-11 Link Here
6
<h1>Search</h1>
6
<h1>Search</h1>
7
7
8
<form name="f" method="post">
8
<form name="f" method="post">
9
    [% INCLUDE 'csrf-token.inc' %]
9
	<input type="hidden" name="op" value="do_search" />
10
	<input type="hidden" name="op" value="do_search" />
10
	<input type="hidden" name="type" value="intranet" />
11
	<input type="hidden" name="type" value="intranet" />
11
	<div class="details">
12
	<div class="details">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/label-edit-batch.tt (+1 lines)
Lines 78-83 Link Here
78
78
79
                        <div id="manage-label-batches">
79
                        <div id="manage-label-batches">
80
                            <form name="add_by_number" action="/cgi-bin/koha/labels/label-edit-batch.pl" method="post">
80
                            <form name="add_by_number" action="/cgi-bin/koha/labels/label-edit-batch.pl" method="post">
81
                                [% INCLUDE 'csrf-token.inc' %]
81
                                <div>
82
                                <div>
82
                                    <fieldset class="rows" style="border-bottom: 0px; border: 0px;">
83
                                    <fieldset class="rows" style="border-bottom: 0px; border: 0px;">
83
                                    <ol><li id="description">
84
                                    <ol><li id="description">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/label-edit-range.tt (+1 lines)
Lines 31-36 Link Here
31
                    [% INCLUDE 'labels-toolbar.inc' %]
31
                    [% INCLUDE 'labels-toolbar.inc' %]
32
                    <h1>Print barcode range</h1>
32
                    <h1>Print barcode range</h1>
33
                    <form name="add_by_number" action="/cgi-bin/koha/labels/label-edit-batch.pl" method="post">
33
                    <form name="add_by_number" action="/cgi-bin/koha/labels/label-edit-batch.pl" method="post">
34
                        [% INCLUDE 'csrf-token.inc' %]
34
                        <input type="hidden" name="op" value="add" />
35
                        <input type="hidden" name="op" value="add" />
35
                        <fieldset class="rows">
36
                        <fieldset class="rows">
36
                            <ol>
37
                            <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/label-print.tt (+1 lines)
Lines 66-71 Link Here
66
                [% END %]
66
                [% END %]
67
            </h3>
67
            </h3>
68
            <form name="exporting" method="post" action="/cgi-bin/koha/labels/label-print.pl">
68
            <form name="exporting" method="post" action="/cgi-bin/koha/labels/label-print.pl">
69
                [% INCLUDE 'csrf-token.inc' %]
69
                <input type="hidden" name="op" value="export" />
70
                <input type="hidden" name="op" value="export" />
70
                <input type="hidden" name="referer" value="[% referer | html %]" />
71
                <input type="hidden" name="referer" value="[% referer | html %]" />
71
                [% FOREACH batch_id IN batch_ids %]
72
                [% FOREACH batch_id IN batch_ids %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/search.tt (+1 lines)
Lines 14-19 to add to Batch [% batch_id | html %] Link Here
14
</h1>
14
</h1>
15
15
16
<form name="f" method="post" action="/cgi-bin/koha/labels/label-item-search.pl">
16
<form name="f" method="post" action="/cgi-bin/koha/labels/label-item-search.pl">
17
    [% INCLUDE 'csrf-token.inc' %]
17
	<input type="hidden" name="op" value="do_search" />
18
	<input type="hidden" name="op" value="do_search" />
18
	<input type="hidden" name="batch_id" value="[% batch_id | html %]" />
19
	<input type="hidden" name="batch_id" value="[% batch_id | html %]" />
19
	<input type="hidden" name="type" value="[% type | html %]" />
20
	<input type="hidden" name="type" value="[% type | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/spinelabel-home.tt (+1 lines)
Lines 28-33 Link Here
28
28
29
<h1>Quick spine label creator</h1>
29
<h1>Quick spine label creator</h1>
30
                <form action="/cgi-bin/koha/labels/spinelabel-print.pl" method="post" id="spinelabelprint">
30
                <form action="/cgi-bin/koha/labels/spinelabel-print.pl" method="post" id="spinelabelprint">
31
                    [% INCLUDE 'csrf-token.inc' %]
31
				<fieldset class="brief">
32
				<fieldset class="brief">
32
				<ol>
33
				<ol>
33
					<li><label for="barcode">Barcode: </label>
34
					<li><label for="barcode">Barcode: </label>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/apikeys.tt (+3 lines)
Lines 56-61 Link Here
56
            [% END %]
56
            [% END %]
57
57
58
                <form id="add-api-key" action="/cgi-bin/koha/members/apikeys.pl" method="post" style="display:none">
58
                <form id="add-api-key" action="/cgi-bin/koha/members/apikeys.pl" method="post" style="display:none">
59
                    [% INCLUDE 'csrf-token.inc' %]
59
                    <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
60
                    <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
60
                    [% INCLUDE csrf-token.inc %]
61
                    [% INCLUDE csrf-token.inc %]
61
                    <input type="hidden" name="op" value="generate" />
62
                    <input type="hidden" name="op" value="generate" />
Lines 94-99 Link Here
94
                                        <td>[% IF key.active %]Yes[% ELSE %]No[% END %]</td>
95
                                        <td>[% IF key.active %]Yes[% ELSE %]No[% END %]</td>
95
                                        <td>
96
                                        <td>
96
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
97
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
98
                                                [% INCLUDE 'csrf-token.inc' %]
97
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
99
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
98
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
100
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
99
                                                [% INCLUDE csrf-token.inc %]
101
                                                [% INCLUDE csrf-token.inc %]
Lines 101-106 Link Here
101
                                                <button class="btn btn-default btn-xs delete" type="submit"><i class="fa fa-trash-can"></i> Delete</button>
103
                                                <button class="btn btn-default btn-xs delete" type="submit"><i class="fa fa-trash-can"></i> Delete</button>
102
                                            </form>
104
                                            </form>
103
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
105
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
106
                                                [% INCLUDE 'csrf-token.inc' %]
104
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
107
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
105
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
108
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
106
                                                [% INCLUDE csrf-token.inc %]
109
                                                [% INCLUDE csrf-token.inc %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt (+1 lines)
Lines 154-159 Link Here
154
        [% END %]
154
        [% END %]
155
        [% IF account.is_debit && account.amount == account.amountoutstanding && account.status != 'CANCELLED' && !(account.debit_type_code == 'PAYOUT') %]
155
        [% IF account.is_debit && account.amount == account.amountoutstanding && account.status != 'CANCELLED' && !(account.debit_type_code == 'PAYOUT') %]
156
          <form method="post" action="/cgi-bin/koha/members/cancel-charge.pl">
156
          <form method="post" action="/cgi-bin/koha/members/cancel-charge.pl">
157
              [% INCLUDE 'csrf-token.inc' %]
157
            [% INCLUDE 'csrf-token.inc' %]
158
            [% INCLUDE 'csrf-token.inc' %]
158
            <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]">
159
            <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]">
159
            <input type="hidden" name="accountlines_id" value="[% account.accountlines_id | html %]">
160
            <input type="hidden" name="accountlines_id" value="[% account.accountlines_id | html %]">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/discharge.tt (+1 lines)
Lines 51-56 Link Here
51
    [% END %]
51
    [% END %]
52
    <div class="btn-toolbar">
52
    <div class="btn-toolbar">
53
        <form method="post">
53
        <form method="post">
54
            [% INCLUDE 'csrf-token.inc' %]
54
            <input type="submit" name="discharge" class="btn btn-primary" value="Generate discharge" />
55
            <input type="submit" name="discharge" class="btn btn-primary" value="Generate discharge" />
55
            <input type="hidden" value="[% patron.borrowernumber | html %]" name="borrowernumber" />
56
            <input type="hidden" value="[% patron.borrowernumber | html %]" name="borrowernumber" />
56
        </form>
57
        </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/files.tt (+1 lines)
Lines 77-82 Link Here
77
                [% END %]
77
                [% END %]
78
78
79
                <form method="post" action="/cgi-bin/koha/members/files.pl" enctype="multipart/form-data">
79
                <form method="post" action="/cgi-bin/koha/members/files.pl" enctype="multipart/form-data">
80
                    [% INCLUDE 'csrf-token.inc' %]
80
                    <fieldset class="rows">
81
                    <fieldset class="rows">
81
                        <legend>Upload new file</legend>
82
                        <legend>Upload new file</legend>
82
                        <ol>
83
                        <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/housebound.tt (+2 lines)
Lines 107-112 Link Here
107
            <!-- Create or edit housebound_profile -->
107
            <!-- Create or edit housebound_profile -->
108
            [% IF ( method == 'update_or_create' ) %]
108
            [% IF ( method == 'update_or_create' ) %]
109
              <form id="editform" method="post" name="editform"
109
              <form id="editform" method="post" name="editform"
110
                  [% INCLUDE 'csrf-token.inc' %]
110
                    action="/cgi-bin/koha/members/housebound.pl">
111
                    action="/cgi-bin/koha/members/housebound.pl">
111
                <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
112
                <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
112
                [% IF ( housebound_profile ) %]
113
                [% IF ( housebound_profile ) %]
Lines 244-249 Link Here
244
            [% ELSIF ( method == 'visit_update_or_create' ) %]
245
            [% ELSIF ( method == 'visit_update_or_create' ) %]
245
              <h4>Manage housebound deliveries</h4>
246
              <h4>Manage housebound deliveries</h4>
246
              <form name="form" id="instance_form" method="post"
247
              <form name="form" id="instance_form" method="post"
248
                  [% INCLUDE 'csrf-token.inc' %]
247
                    action="/cgi-bin/koha/members/housebound.pl">
249
                    action="/cgi-bin/koha/members/housebound.pl">
248
                [% IF ( visit ) %]
250
                [% IF ( visit ) %]
249
                  <input type="hidden" name="method" value="editvisitconfirm" />
251
                  <input type="hidden" name="method" value="editvisitconfirm" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/mancredit.tt (+1 lines)
Lines 62-67 Link Here
62
                <div class="tab-content">
62
                <div class="tab-content">
63
                    <div role="tabpanel" class="tab-pane active">
63
                    <div role="tabpanel" class="tab-pane active">
64
                        <form action="/cgi-bin/koha/members/mancredit.pl" method="post" id="mancredit">
64
                        <form action="/cgi-bin/koha/members/mancredit.pl" method="post" id="mancredit">
65
                            [% INCLUDE 'csrf-token.inc' %]
65
                            <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
66
                            <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
66
                            [% INCLUDE csrf-token.inc %]
67
                            [% INCLUDE csrf-token.inc %]
67
68
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/maninvoice.tt (+1 lines)
Lines 71-76 Link Here
71
                    </div>
71
                    </div>
72
                [% END %]
72
                [% END %]
73
                <form action="/cgi-bin/koha/members/maninvoice.pl" method="post" id="maninvoice">
73
                <form action="/cgi-bin/koha/members/maninvoice.pl" method="post" id="maninvoice">
74
                    [% INCLUDE 'csrf-token.inc' %]
74
                    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
75
                    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
75
                    [% INCLUDE csrf-token.inc %]
76
                    [% INCLUDE csrf-token.inc %]
76
                    <fieldset class="rows">
77
                    <fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/member-flags.tt (+1 lines)
Lines 37-42 Link Here
37
[% INCLUDE 'members-toolbar.inc' %]
37
[% INCLUDE 'members-toolbar.inc' %]
38
38
39
<form id="flag_form" method="post" action="/cgi-bin/koha/members/member-flags.pl">
39
<form id="flag_form" method="post" action="/cgi-bin/koha/members/member-flags.pl">
40
    [% INCLUDE 'csrf-token.inc' %]
40
    [% INCLUDE csrf-token.inc %]
41
    [% INCLUDE csrf-token.inc %]
41
    <input type="hidden" name="member" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
42
    <input type="hidden" name="member" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
42
    <input type="hidden" name="newflags" value="1" />
43
    <input type="hidden" name="newflags" value="1" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/member-password.tt (+1 lines)
Lines 46-51 Link Here
46
[% ELSE %]
46
[% ELSE %]
47
47
48
<form method="post" id="changepasswordf" action="/cgi-bin/koha/members/member-password.pl">
48
<form method="post" id="changepasswordf" action="/cgi-bin/koha/members/member-password.pl">
49
    [% INCLUDE 'csrf-token.inc' %]
49
<input type="hidden" name="destination" value="[% destination | html %]" />
50
<input type="hidden" name="destination" value="[% destination | html %]" />
50
<input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
51
<input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
51
	[% IF ( errormsg ) %]
52
	[% IF ( errormsg ) %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/member.tt (+1 lines)
Lines 105-110 Link Here
105
          </div>
105
          </div>
106
        [% IF CAN_user_tools_edit_patrons %]
106
        [% IF CAN_user_tools_edit_patrons %]
107
            <form id="patron_batchmod_form" method="post" action="/cgi-bin/koha/tools/modborrowers.pl">
107
            <form id="patron_batchmod_form" method="post" action="/cgi-bin/koha/tools/modborrowers.pl">
108
                [% INCLUDE 'csrf-token.inc' %]
108
                <input type="hidden" name="op" value="show" />
109
                <input type="hidden" name="op" value="show" />
109
                <textarea style="display:none" id="borrowernumberlist" name="borrowernumberlist"></textarea>
110
                <textarea style="display:none" id="borrowernumberlist" name="borrowernumberlist"></textarea>
110
            </form>
111
            </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/memberentrygen.tt (+1 lines)
Lines 227-232 legend:hover { Link Here
227
                        [% END %]
227
                        [% END %]
228
228
229
                        <form name="form" id="entryform" action="/cgi-bin/koha/members/memberentry.pl" method="post" autocomplete="off" class="toggler">
229
                        <form name="form" id="entryform" action="/cgi-bin/koha/members/memberentry.pl" method="post" autocomplete="off" class="toggler">
230
                            [% INCLUDE 'csrf-token.inc' %]
230
                            [% UNLESS ( check_member ) %]
231
                            [% UNLESS ( check_member ) %]
231
                                <input type="hidden" name="nodouble"  value="[% nodouble | html %]" />
232
                                <input type="hidden" name="nodouble"  value="[% nodouble | html %]" />
232
                            [% END %]
233
                            [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/members-update.tt (+1 lines)
Lines 109-114 Link Here
109
            <h1>Update patron records</h1>
109
            <h1>Update patron records</h1>
110
            [% IF PendingModifications %]
110
            [% IF PendingModifications %]
111
                <form method="post" action="members-update-do.pl">
111
                <form method="post" action="members-update-do.pl">
112
                    [% INCLUDE 'csrf-token.inc' %]
112
                    <div id="pending_updates" class="panel-group" role="tablist" aria-multiselectable="true">
113
                    <div id="pending_updates" class="panel-group" role="tablist" aria-multiselectable="true">
113
                        [% FOREACH pm IN PendingModifications %]
114
                        [% FOREACH pm IN PendingModifications %]
114
                            [% SET borrowernumber = pm.borrowernumber %]
115
                            [% SET borrowernumber = pm.borrowernumber %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/notices.tt (+1 lines)
Lines 78-83 Link Here
78
                                                [% IF ( QUEUED_MESSAGE.status != 'pending' ) %]
78
                                                [% IF ( QUEUED_MESSAGE.status != 'pending' ) %]
79
                                                    <div class="notice">
79
                                                    <div class="notice">
80
                                                        <form id="resend_notice[% QUEUED_MESSAGE.message_id | html %]" action="/cgi-bin/koha/members/notices.pl?borrowernumber=[% borrowernumber | html %]" method="POST">
80
                                                        <form id="resend_notice[% QUEUED_MESSAGE.message_id | html %]" action="/cgi-bin/koha/members/notices.pl?borrowernumber=[% borrowernumber | html %]" method="POST">
81
                                                            [% INCLUDE 'csrf-token.inc' %]
81
                                                            <input type="hidden" name="op" value="resend_notice" />
82
                                                            <input type="hidden" name="op" value="resend_notice" />
82
                                                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
83
                                                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
83
                                                            <input type="hidden" name="message_id" value="[% QUEUED_MESSAGE.message_id | html %]" />
84
                                                            <input type="hidden" name="message_id" value="[% QUEUED_MESSAGE.message_id | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/pay.tt (+1 lines)
Lines 69-74 Link Here
69
[% INCLUDE 'renew_results.inc' renew_results=renew_results %]
69
[% INCLUDE 'renew_results.inc' renew_results=renew_results %]
70
[% IF ( accounts ) %]
70
[% IF ( accounts ) %]
71
    <form action="/cgi-bin/koha/members/pay.pl" method="post" id="pay-fines-form">
71
    <form action="/cgi-bin/koha/members/pay.pl" method="post" id="pay-fines-form">
72
        [% INCLUDE 'csrf-token.inc' %]
72
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
73
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
73
    [% INCLUDE 'csrf-token.inc' %]
74
    [% INCLUDE 'csrf-token.inc' %]
74
<p><span class="checkall"><a id="CheckAll" href="#"><i class="fa fa-check"></i> Select all</a></span> | <span class="clearall"><a id="CheckNone" href="#"><i class="fa fa-times"></i> Clear all</a></span></p>
75
<p><span class="checkall"><a id="CheckAll" href="#"><i class="fa fa-check"></i> Select all</a></span> | <span class="clearall"><a id="CheckNone" href="#"><i class="fa fa-times"></i> Clear all</a></span></p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/paycollect.tt (+3 lines)
Lines 132-137 Link Here
132
    </ul>
132
    </ul>
133
133
134
    <form name="payindivfine" id="payindivfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
134
    <form name="payindivfine" id="payindivfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
135
        [% INCLUDE 'csrf-token.inc' %]
135
    [% INCLUDE csrf-token.inc %]
136
    [% INCLUDE csrf-token.inc %]
136
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
137
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
137
    <input type="hidden" name="pay_individual" id="pay_individual" value="[% pay_individual | html %]" />
138
    <input type="hidden" name="pay_individual" id="pay_individual" value="[% pay_individual | html %]" />
Lines 228-233 Link Here
228
    </ul>
229
    </ul>
229
230
230
    <form name="woindivfine" id="woindivfine" action="/cgi-bin/koha/members/pay.pl" method="post" >
231
    <form name="woindivfine" id="woindivfine" action="/cgi-bin/koha/members/pay.pl" method="post" >
232
        [% INCLUDE 'csrf-token.inc' %]
231
    [% INCLUDE csrf-token.inc %]
233
    [% INCLUDE csrf-token.inc %]
232
    <fieldset class="rows">
234
    <fieldset class="rows">
233
    <legend>Write off an individual charge</legend>
235
    <legend>Write off an individual charge</legend>
Lines 295-300 Link Here
295
    [% END %]
297
    [% END %]
296
298
297
    <form name="payfine" id="payfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
299
    <form name="payfine" id="payfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
300
        [% INCLUDE 'csrf-token.inc' %]
298
    [% INCLUDE csrf-token.inc %]
301
    [% INCLUDE csrf-token.inc %]
299
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
302
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
300
    <input type="hidden" name="selected_accts" id="selected_accts" value="[% selected_accts | html %]" />
303
    <input type="hidden" name="selected_accts" id="selected_accts" value="[% selected_accts | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/two_factor_auth.tt (+1 lines)
Lines 53-58 Link Here
53
                            <div class="two-factor-status">Status: Enabled</div>
53
                            <div class="two-factor-status">Status: Enabled</div>
54
54
55
                            <form id="two-factor-auth" action="/cgi-bin/koha/members/two_factor_auth.pl" method="post">
55
                            <form id="two-factor-auth" action="/cgi-bin/koha/members/two_factor_auth.pl" method="post">
56
                                [% INCLUDE 'csrf-token.inc' %]
56
                                [% INCLUDE csrf-token.inc %]
57
                                [% INCLUDE csrf-token.inc %]
57
                                <input type="hidden" name="op" value="disable-2FA" />
58
                                <input type="hidden" name="op" value="disable-2FA" />
58
                                <input type="submit" value="Disable two-factor authentication" />
59
                                <input type="submit" value="Disable two-factor authentication" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/update-child.tt (+1 lines)
Lines 15-20 Link Here
15
15
16
    [% IF patron_categories %]
16
    [% IF patron_categories %]
17
        <form method="post" action="update-child.pl">
17
        <form method="post" action="update-child.pl">
18
            [% INCLUDE 'csrf-token.inc' %]
18
            <fieldset>
19
            <fieldset>
19
                <table id="catst">
20
                <table id="catst">
20
                    <thead>
21
                    <thead>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/offline_circ/process_koc.tt (+3 lines)
Lines 65-70 Link Here
65
65
66
   <div id="fileuploadform">
66
   <div id="fileuploadform">
67
     <form method="post" action="/cgi-bin/koha/offline_circ/process_koc.pl" enctype="multipart/form-data" class="validated">
67
     <form method="post" action="/cgi-bin/koha/offline_circ/process_koc.pl" enctype="multipart/form-data" class="validated">
68
         [% INCLUDE 'csrf-token.inc' %]
68
		<fieldset class="brief">
69
		<fieldset class="brief">
69
       <ol><li><label for="fileToUpload">Choose .koc file: </label>
70
       <ol><li><label for="fileToUpload">Choose .koc file: </label>
70
            <input class="required" required="required" type="file" id="fileToUpload" size="50" name="fileToUpload" />
71
            <input class="required" required="required" type="file" id="fileToUpload" size="50" name="fileToUpload" />
Lines 80-91 Link Here
80
   </div>
81
   </div>
81
82
82
   <form action="enqueue_koc.pl" id="processfile" method="post" enctype="multipart/form-data">
83
   <form action="enqueue_koc.pl" id="processfile" method="post" enctype="multipart/form-data">
84
       [% INCLUDE 'csrf-token.inc' %]
83
     <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
85
     <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
84
     <input type="hidden" name="action" value="add_to_queue" />
86
     <input type="hidden" name="action" value="add_to_queue" />
85
     <input type="submit" value="Add to offline circulation queue" id="queueformsubmit" />
87
     <input type="submit" value="Add to offline circulation queue" id="queueformsubmit" />
86
   </form>
88
   </form>
87
89
88
   <form action="process_koc.pl" id="enqueuefile" method="post" enctype="multipart/form-data">
90
   <form action="process_koc.pl" id="enqueuefile" method="post" enctype="multipart/form-data">
91
       [% INCLUDE 'csrf-token.inc' %]
89
     <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
92
     <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
90
     <!-- <input type="submit" value="Apply directly" id="mainformsubmit" /> -->
93
     <!-- <input type="submit" value="Apply directly" id="mainformsubmit" /> -->
91
   </form>
94
   </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/onboarding/onboardingstep1.tt (+1 lines)
Lines 29-34 Link Here
29
                </div>
29
                </div>
30
30
31
                <form name="LibraryCreation" method="post" action="onboarding.pl">
31
                <form name="LibraryCreation" method="post" action="onboarding.pl">
32
                    [% INCLUDE 'csrf-token.inc' %]
32
                    <fieldset class="rows" >
33
                    <fieldset class="rows" >
33
                        <input type="hidden" name="step" value="1"/>
34
                        <input type="hidden" name="step" value="1"/>
34
                        <input type="hidden" name="op" value="add_validate_library"/>
35
                        <input type="hidden" name="op" value="add_validate_library"/>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/onboarding/onboardingstep2.tt (+1 lines)
Lines 41-46 Link Here
41
                <p> The patron category you create will be used by the <span class="bg-info">administrator account</span>.</p>
41
                <p> The patron category you create will be used by the <span class="bg-info">administrator account</span>.</p>
42
42
43
                <form id="category_form" method="post" action="onboarding.pl">
43
                <form id="category_form" method="post" action="onboarding.pl">
44
                    [% INCLUDE 'csrf-token.inc' %]
44
                    <fieldset class="rows">
45
                    <fieldset class="rows">
45
                        <input type="hidden" name="step" value="2" />
46
                        <input type="hidden" name="step" value="2" />
46
                        <input type="hidden" name="op" value="add_validate_category" />
47
                        <input type="hidden" name="op" value="add_validate_category" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/onboarding/onboardingstep3.tt (+1 lines)
Lines 34-39 Link Here
34
                Now we will create a patron with superlibrarian permissions. Log in with this to access Koha as a staff member with all permissions.
34
                Now we will create a patron with superlibrarian permissions. Log in with this to access Koha as a staff member with all permissions.
35
                </p>
35
                </p>
36
                <form name="createpatron" id="createpatron" method="post" action="onboarding.pl">
36
                <form name="createpatron" id="createpatron" method="post" action="onboarding.pl">
37
                    [% INCLUDE 'csrf-token.inc' %]
37
                    <fieldset class="rows">
38
                    <fieldset class="rows">
38
                        <input type="hidden" name="step" value="3" />
39
                        <input type="hidden" name="step" value="3" />
39
                        <input type="hidden" name="op" value="add_validate_patron" />
40
                        <input type="hidden" name="op" value="add_validate_patron" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/onboarding/onboardingstep4.tt (+1 lines)
Lines 34-39 Link Here
34
                    <p> Important: Item types are what you apply circulation rules to. Circulation rules govern how your institution will lend its items: Checkout length, renewal policy, hold policy, etc. For example a circulation rule applied to the DVD item type may enforce a payment of $1.00 for checking out any DVD.</p>
34
                    <p> Important: Item types are what you apply circulation rules to. Circulation rules govern how your institution will lend its items: Checkout length, renewal policy, hold policy, etc. For example a circulation rule applied to the DVD item type may enforce a payment of $1.00 for checking out any DVD.</p>
35
35
36
                    <form id="createitemform" method="post" action="onboarding.pl">
36
                    <form id="createitemform" method="post" action="onboarding.pl">
37
                        [% INCLUDE 'csrf-token.inc' %]
37
                    <fieldset class="rows">
38
                    <fieldset class="rows">
38
                        <input type="hidden" name="step" value="4" />
39
                        <input type="hidden" name="step" value="4" />
39
                        <input type="hidden" name="op" value="add_validate_itemtype" />
40
                        <input type="hidden" name="op" value="add_validate_itemtype" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/onboarding/onboardingstep5.tt (+1 lines)
Lines 52-57 Link Here
52
                    </div>
52
                    </div>
53
53
54
                    <form name="createcirculationrule" method="post" action="onboarding.pl">
54
                    <form name="createcirculationrule" method="post" action="onboarding.pl">
55
                        [% INCLUDE 'csrf-token.inc' %]
55
                        <fieldset class="rows">
56
                        <fieldset class="rows">
56
                            <input type="hidden" name="step" value="5"/>
57
                            <input type="hidden" name="step" value="5"/>
57
                            <input type="hidden" name="op" value="add_validate_circ_rule" />
58
                            <input type="hidden" name="op" value="add_validate_circ_rule" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patron_lists/add-modify.tt (+1 lines)
Lines 47-52 Link Here
47
        </h1>
47
        </h1>
48
48
49
        <form method="post" action="/cgi-bin/koha/patron_lists/add-modify.pl" class="validated">
49
        <form method="post" action="/cgi-bin/koha/patron_lists/add-modify.pl" class="validated">
50
            [% INCLUDE 'csrf-token.inc' %]
50
            <fieldset class="rows">
51
            <fieldset class="rows">
51
52
52
                <legend>
53
                <legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patron_lists/list.tt (+2 lines)
Lines 98-103 Link Here
98
        [% END %]
98
        [% END %]
99
99
100
        <form action="list.pl" id="add_patrons" method="post" class="clearfix">
100
        <form action="list.pl" id="add_patrons" method="post" class="clearfix">
101
            [% INCLUDE 'csrf-token.inc' %]
101
            <fieldset class="rows">
102
            <fieldset class="rows">
102
                <legend>Add patrons</legend>
103
                <legend>Add patrons</legend>
103
                <ol>
104
                <ol>
Lines 149-154 Link Here
149
        </form>
150
        </form>
150
151
151
        <form action="list.pl" id="remove_patrons" method="post">
152
        <form action="list.pl" id="remove_patrons" method="post">
153
            [% INCLUDE 'csrf-token.inc' %]
152
154
153
            <div class="searchheader" id="searchheader">
155
            <div class="searchheader" id="searchheader">
154
                <span class="checkall"><a id="CheckAll" href="#"><i class="fa fa-check"></i> Select all</a></span> |
156
                <span class="checkall"><a id="CheckAll" href="#"><i class="fa fa-check"></i> Select all</a></span> |
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/edit-batch.tt (+1 lines)
Lines 55-60 Link Here
55
                    [% INCLUDE 'patroncards-errors.inc' %]
55
                    [% INCLUDE 'patroncards-errors.inc' %]
56
                    <div id="manage-patroncard-batches">
56
                    <div id="manage-patroncard-batches">
57
                            <form name="add_by_bor_num" action="/cgi-bin/koha/patroncards/edit-batch.pl" method="post">
57
                            <form name="add_by_bor_num" action="/cgi-bin/koha/patroncards/edit-batch.pl" method="post">
58
                                [% INCLUDE 'csrf-token.inc' %]
58
                                <div>
59
                                <div>
59
                                    <fieldset class="rows" style="border-bottom: 0px; border: 0px;">
60
                                    <fieldset class="rows" style="border-bottom: 0px; border: 0px;">
60
                                    <ol><li id="description">
61
                                    <ol><li id="description">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/edit-layout.tt (+1 lines)
Lines 44-49 Link Here
44
44
45
                <!-- NOTE: The order of the elements on this form is crictical to correct processing. You've been warned...  -->
45
                <!-- NOTE: The order of the elements on this form is crictical to correct processing. You've been warned...  -->
46
                <form name="input" action="/cgi-bin/koha/patroncards/edit-layout.pl" method="post">
46
                <form name="input" action="/cgi-bin/koha/patroncards/edit-layout.pl" method="post">
47
                    [% INCLUDE 'csrf-token.inc' %]
47
                <div class="row">
48
                <div class="row">
48
                <div class="col-sm-6">
49
                <div class="col-sm-6">
49
                        <fieldset class="rows">
50
                        <fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/edit-profile.tt (+1 lines)
Lines 47-52 Link Here
47
                                [% IF (profile_id) %] ([% profile_id | html %])[% END %]
47
                                [% IF (profile_id) %] ([% profile_id | html %])[% END %]
48
                            </h1>
48
                            </h1>
49
                                    <form name="input" action="/cgi-bin/koha/patroncards/edit-profile.pl" method="post">
49
                                    <form name="input" action="/cgi-bin/koha/patroncards/edit-profile.pl" method="post">
50
                                        [% INCLUDE 'csrf-token.inc' %]
50
                                    <fieldset class="rows"><legend>Profile settings</legend>
51
                                    <fieldset class="rows"><legend>Profile settings</legend>
51
                                        <ol>
52
                                        <ol>
52
                                            <li>
53
                                            <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/edit-template.tt (+1 lines)
Lines 47-52 Link Here
47
                        [% IF (template_id) %] ([% template_id | html %])[% END %]
47
                        [% IF (template_id) %] ([% template_id | html %])[% END %]
48
                    </h1>
48
                    </h1>
49
                    <form name="input" action="/cgi-bin/koha/patroncards/edit-template.pl" method="post">
49
                    <form name="input" action="/cgi-bin/koha/patroncards/edit-template.pl" method="post">
50
                        [% INCLUDE 'csrf-token.inc' %]
50
                        <div class="row">
51
                        <div class="row">
51
                        <div class="col-sm-6">
52
                        <div class="col-sm-6">
52
                            <fieldset class="rows">
53
                            <fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/image-manage.tt (+2 lines)
Lines 38-43 Link Here
38
                        <h2>Upload additional images for patron cards</h2>
38
                        <h2>Upload additional images for patron cards</h2>
39
                        <p>Manage additional images to use as logo, decoration or background on a patron card layout.</p>
39
                        <p>Manage additional images to use as logo, decoration or background on a patron card layout.</p>
40
                        <form name="upload_images" method="post" action="/cgi-bin/koha/patroncards/image-manage.pl" enctype="multipart/form-data">
40
                        <form name="upload_images" method="post" action="/cgi-bin/koha/patroncards/image-manage.pl" enctype="multipart/form-data">
41
                            [% INCLUDE 'csrf-token.inc' %]
41
                            <fieldset class="brief">
42
                            <fieldset class="brief">
42
                                <div class="hint">Only PNG, GIF, JPEG, XPM formats are supported. Maximum image size is 2MB.</div>
43
                                <div class="hint">Only PNG, GIF, JPEG, XPM formats are supported. Maximum image size is 2MB.</div>
43
                                <ol>
44
                                <ol>
Lines 76-81 Link Here
76
                    <h2>Delete images</h2>
77
                    <h2>Delete images</h2>
77
                        [% IF ( TABLE ) %]
78
                        [% IF ( TABLE ) %]
78
                        <form name="delete_images" method="post" action="/cgi-bin/koha/patroncards/image-manage.pl" enctype="multipart/form-data">
79
                        <form name="delete_images" method="post" action="/cgi-bin/koha/patroncards/image-manage.pl" enctype="multipart/form-data">
80
                            [% INCLUDE 'csrf-token.inc' %]
79
                            <fieldset class="brief">
81
                            <fieldset class="brief">
80
                                <div class="hint">
82
                                <div class="hint">
81
                                    Select one or more images to delete.
83
                                    Select one or more images to delete.
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/print.tt (+1 lines)
Lines 55-60 Link Here
55
                    [% END %]
55
                    [% END %]
56
            </h3>
56
            </h3>
57
            <form id="exportingf" name="exporting" method="post" action="/cgi-bin/koha/patroncards/print.pl">
57
            <form id="exportingf" name="exporting" method="post" action="/cgi-bin/koha/patroncards/print.pl">
58
                [% INCLUDE 'csrf-token.inc' %]
58
                <input type="hidden" name="op" value="export" />
59
                <input type="hidden" name="op" value="export" />
59
                <input type="hidden" name="referer" value="[% referer | html %]" />
60
                <input type="hidden" name="referer" value="[% referer | html %]" />
60
                [% FOREACH batch_id IN batch_ids %]
61
                [% FOREACH batch_id IN batch_ids %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/plugins/plugins-upload.tt (+1 lines)
Lines 39-44 Link Here
39
                </div>
39
                </div>
40
                [% END %]
40
                [% END %]
41
                <form method="post" action="/cgi-bin/koha/plugins/plugins-upload.pl" enctype="multipart/form-data">
41
                <form method="post" action="/cgi-bin/koha/plugins/plugins-upload.pl" enctype="multipart/form-data">
42
                    [% INCLUDE 'csrf-token.inc' %]
42
                    <fieldset class="brief">
43
                    <fieldset class="brief">
43
                         <div class="hint"><strong>NOTE:</strong> Only KPZ file format is supported.</div>
44
                         <div class="hint"><strong>NOTE:</strong> Only KPZ file format is supported.</div>
44
                        <ol>
45
                        <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/pos/pay.tt (+2 lines)
Lines 38-43 Link Here
38
                </p>
38
                </p>
39
                [% IF ( CAN_user_parameters_manage_cash_registers ) %]
39
                [% IF ( CAN_user_parameters_manage_cash_registers ) %]
40
                    <form action="/cgi-bin/koha/admin/cash_registers.pl" method="post">
40
                    <form action="/cgi-bin/koha/admin/cash_registers.pl" method="post">
41
                        [% INCLUDE 'csrf-token.inc' %]
41
                        <input type="hidden" name="op" value="add_form" />
42
                        <input type="hidden" name="op" value="add_form" />
42
                        <button class="new" type="submit"><i class="fa fa-plus"></i> Create a new cash register</button>
43
                        <button class="new" type="submit"><i class="fa fa-plus"></i> Create a new cash register</button>
43
                    </form>
44
                    </form>
Lines 52-57 Link Here
52
        [% END %]
53
        [% END %]
53
54
54
        <form name="payForm" id="payForm" method="post" action="/cgi-bin/koha/pos/pay.pl">
55
        <form name="payForm" id="payForm" method="post" action="/cgi-bin/koha/pos/pay.pl">
56
            [% INCLUDE 'csrf-token.inc' %]
55
            <div class="row">
57
            <div class="row">
56
58
57
                <div class="col-md-6">
59
                <div class="col-md-6">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/pos/register.tt (+2 lines)
Lines 39-44 Link Here
39
                    </p>
39
                    </p>
40
                    [% IF ( CAN_user_parameters_manage_cash_registers ) %]
40
                    [% IF ( CAN_user_parameters_manage_cash_registers ) %]
41
                        <form action="/cgi-bin/koha/admin/cash_registers.pl" method="post">
41
                        <form action="/cgi-bin/koha/admin/cash_registers.pl" method="post">
42
                            [% INCLUDE 'csrf-token.inc' %]
42
                            <input type="hidden" name="op" value="add_form" />
43
                            <input type="hidden" name="op" value="add_form" />
43
                            <button class="new" type="submit"><i class="fa fa-plus"></i> Create a new cash register</button>
44
                            <button class="new" type="submit"><i class="fa fa-plus"></i> Create a new cash register</button>
44
                        </form>
45
                        </form>
Lines 307-312 Link Here
307
    <!-- Issue refund modal -->
308
    <!-- Issue refund modal -->
308
    <div class="modal" id="issueRefundModal" tabindex="-1" role="dialog" aria-labelledby="issueRefundLabel">
309
    <div class="modal" id="issueRefundModal" tabindex="-1" role="dialog" aria-labelledby="issueRefundLabel">
309
        <form id="refund_form" method="post" enctype="multipart/form-data" class="validated">
310
        <form id="refund_form" method="post" enctype="multipart/form-data" class="validated">
311
            [% INCLUDE 'csrf-token.inc' %]
310
            <input type="hidden" name="accountline" value="" id="refundline">
312
            <input type="hidden" name="accountline" value="" id="refundline">
311
            <div class="modal-dialog" role="document">
313
            <div class="modal-dialog" role="document">
312
                <div class="modal-content">
314
                <div class="modal-content">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/pos/registers.tt (+1 lines)
Lines 36-41 Link Here
36
                            </p>
36
                            </p>
37
                            [% IF ( CAN_user_parameters_manage_cash_registers ) %]
37
                            [% IF ( CAN_user_parameters_manage_cash_registers ) %]
38
                                <form action="/cgi-bin/koha/admin/cash_registers.pl" method="post">
38
                                <form action="/cgi-bin/koha/admin/cash_registers.pl" method="post">
39
                                    [% INCLUDE 'csrf-token.inc' %]
39
                                    <input type="hidden" name="op" value="add_form" />
40
                                    <input type="hidden" name="op" value="add_form" />
40
                                    <button class="new" type="submit"><i class="fa fa-plus"></i> Create a new cash register</button>
41
                                    <button class="new" type="submit"><i class="fa fa-plus"></i> Create a new cash register</button>
41
                                </form>
42
                                </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/recalls/recalls_overdue.tt (+1 lines)
Lines 37-42 Link Here
37
            [% IF recalls.count %]
37
            [% IF recalls.count %]
38
                <div class="page-section">
38
                <div class="page-section">
39
                    <form method="post" action="/cgi-bin/koha/recalls/recalls_overdue.pl">
39
                    <form method="post" action="/cgi-bin/koha/recalls/recalls_overdue.pl">
40
                        [% INCLUDE 'csrf-token.inc' %]
40
                        <input type="hidden" name="op" value="cancel_multiple_recalls">
41
                        <input type="hidden" name="op" value="cancel_multiple_recalls">
41
                        <input type="checkbox" id="select_all"> <span id="select_all_text">Select all</span>
42
                        <input type="checkbox" id="select_all"> <span id="select_all_text">Select all</span>
42
                        [% INCLUDE 'recalls.inc' %]
43
                        [% INCLUDE 'recalls.inc' %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/recalls/recalls_queue.tt (+1 lines)
Lines 37-42 Link Here
37
            [% IF recalls.count %]
37
            [% IF recalls.count %]
38
                <div class="page-section">
38
                <div class="page-section">
39
                    <form method="post" action="/cgi-bin/koha/recalls/recalls_queue.pl">
39
                    <form method="post" action="/cgi-bin/koha/recalls/recalls_queue.pl">
40
                        [% INCLUDE 'csrf-token.inc' %]
40
                        <input type="hidden" name="op" value="cancel_multiple_recalls">
41
                        <input type="hidden" name="op" value="cancel_multiple_recalls">
41
                        <input type="checkbox" id="select_all"> <span id="select_all_text">Select all</span>
42
                        <input type="checkbox" id="select_all"> <span id="select_all_text">Select all</span>
42
                        [% INCLUDE 'recalls.inc' %]
43
                        [% INCLUDE 'recalls.inc' %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/recalls/recalls_to_pull.tt (+1 lines)
Lines 119-124 Link Here
119
                                </td>
119
                                </td>
120
                                <td class="recall-action">
120
                                <td class="recall-action">
121
                                    <form action="/cgi-bin/koha/recalls/recalls_to_pull.pl" method="post">
121
                                    <form action="/cgi-bin/koha/recalls/recalls_to_pull.pl" method="post">
122
                                        [% INCLUDE 'csrf-token.inc' %]
122
                                        <input type="hidden" name="recall_id" value="[% recall.first_recall.id | html %]">
123
                                        <input type="hidden" name="recall_id" value="[% recall.first_recall.id | html %]">
123
                                        <input type="hidden" name="op" value="cancel">
124
                                        <input type="hidden" name="op" value="cancel">
124
                                        [% IF recall.first_recall.in_transit %]
125
                                        [% IF recall.first_recall.in_transit %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/recalls/recalls_waiting.tt (+2 lines)
Lines 73-78 Link Here
73
                                                <td class="recall-library">[% recall.library.branchname | html %]</td>
73
                                                <td class="recall-library">[% recall.library.branchname | html %]</td>
74
                                                <td class="recall-action actions">
74
                                                <td class="recall-action actions">
75
                                                    <form action="/cgi-bin/koha/recalls/recalls_waiting.pl" method="post">
75
                                                    <form action="/cgi-bin/koha/recalls/recalls_waiting.pl" method="post">
76
                                                        [% INCLUDE 'csrf-token.inc' %]
76
                                                        <input type="hidden" name="recall_id" value="[% recall.id | html %]">
77
                                                        <input type="hidden" name="recall_id" value="[% recall.id | html %]">
77
                                                        <input type="hidden" name="op" value="modify">
78
                                                        <input type="hidden" name="op" value="modify">
78
                                                        <fieldset class="action">
79
                                                        <fieldset class="action">
Lines 117-122 Link Here
117
                                                    <td class="recall-library">[% recall.library.branchname | html %]</td>
118
                                                    <td class="recall-library">[% recall.library.branchname | html %]</td>
118
                                                    <td class="recall-action actions">
119
                                                    <td class="recall-action actions">
119
                                                        <form action="/cgi-bin/koha/recalls/recalls_waiting.pl" method="post">
120
                                                        <form action="/cgi-bin/koha/recalls/recalls_waiting.pl" method="post">
121
                                                            [% INCLUDE 'csrf-token.inc' %]
120
                                                            <input type="hidden" name="recall_id" value="[% recall.id | html %]">
122
                                                            <input type="hidden" name="recall_id" value="[% recall.id | html %]">
121
                                                            <input type="hidden" name="op" value="modify">
123
                                                            <input type="hidden" name="op" value="modify">
122
                                                            <fieldset class="action">
124
                                                            <fieldset class="action">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/recalls/request.tt (+1 lines)
Lines 37-42 Link Here
37
        [% IF recalls.count %]
37
        [% IF recalls.count %]
38
            <div class="page-section">
38
            <div class="page-section">
39
                <form method="post" action="/cgi-bin/koha/recalls/request.pl">
39
                <form method="post" action="/cgi-bin/koha/recalls/request.pl">
40
                    [% INCLUDE 'csrf-token.inc' %]
40
                    <input type="hidden" name="op" value="cancel_multiple_recalls">
41
                    <input type="hidden" name="op" value="cancel_multiple_recalls">
41
                    <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]">
42
                    <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]">
42
                    <input type="checkbox" id="select_all"> <span id="select_all_text">Select all</span>
43
                    <input type="checkbox" id="select_all"> <span id="select_all_text">Select all</span>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/acquisitions_stats.tt (+1 lines)
Lines 98-103 Link Here
98
	[% END %]
98
	[% END %]
99
[% ELSE %]
99
[% ELSE %]
100
	<form method="post" action="/cgi-bin/koha/reports/acquisitions_stats.pl">
100
	<form method="post" action="/cgi-bin/koha/reports/acquisitions_stats.pl">
101
	    [% INCLUDE 'csrf-token.inc' %]
101
	<fieldset class="rows">
102
	<fieldset class="rows">
102
	<legend>Acquisitions statistics</legend>
103
	<legend>Acquisitions statistics</legend>
103
	<table>
104
	<table>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/bor_issues_top.tt (+1 lines)
Lines 111-116 Link Here
111
[% ELSE %]
111
[% ELSE %]
112
    <h1>Patrons with the most checkouts</h1>
112
    <h1>Patrons with the most checkouts</h1>
113
	<form method="post" action="/cgi-bin/koha/reports/bor_issues_top.pl">
113
	<form method="post" action="/cgi-bin/koha/reports/bor_issues_top.pl">
114
	    [% INCLUDE 'csrf-token.inc' %]
114
	<fieldset class="rows">
115
	<fieldset class="rows">
115
        <ol>
116
        <ol>
116
            <li>
117
            <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/borrowers_out.tt (+1 lines)
Lines 66-71 Link Here
66
[% ELSE %]
66
[% ELSE %]
67
    <h1>Patrons with no checkouts</h1>
67
    <h1>Patrons with no checkouts</h1>
68
    <form method="post" action="/cgi-bin/koha/reports/borrowers_out.pl">
68
    <form method="post" action="/cgi-bin/koha/reports/borrowers_out.pl">
69
        [% INCLUDE 'csrf-token.inc' %]
69
    <fieldset class="rows">
70
    <fieldset class="rows">
70
		<ol>
71
		<ol>
71
            <li><label for="patroncategory">Patron category: </label> <select name="Filter" id="patroncategory"><option value="" > Any category code</option>
72
            <li><label for="patroncategory">Patron category: </label> <select name="Filter" id="patroncategory"><option value="" > Any category code</option>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/borrowers_stats.tt (+1 lines)
Lines 86-91 Link Here
86
[% ELSE %]
86
[% ELSE %]
87
87
88
	<form method="post" action="/cgi-bin/koha/reports/borrowers_stats.pl">
88
	<form method="post" action="/cgi-bin/koha/reports/borrowers_stats.pl">
89
	    [% INCLUDE 'csrf-token.inc' %]
89
	<fieldset class="rows"><legend>Patrons statistics</legend>
90
	<fieldset class="rows"><legend>Patrons statistics</legend>
90
	<table>
91
	<table>
91
		<thead>
92
		<thead>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/cash_register_stats.tt (+1 lines)
Lines 55-60 Link Here
55
55
56
    <h1>Cash register statistics</h1>
56
    <h1>Cash register statistics</h1>
57
    <form method="post" action="/cgi-bin/koha/reports/cash_register_stats.pl" id="frmCashRegister">
57
    <form method="post" action="/cgi-bin/koha/reports/cash_register_stats.pl" id="frmCashRegister">
58
        [% INCLUDE 'csrf-token.inc' %]
58
        <fieldset class="rows">
59
        <fieldset class="rows">
59
            <legend>Cash register statistics [% beginDate | $KohaDates %] to [% endDate | $KohaDates %]</legend>
60
            <legend>Cash register statistics [% beginDate | $KohaDates %] to [% endDate | $KohaDates %]</legend>
60
            <ol>
61
            <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/cat_issues_top.tt (+1 lines)
Lines 82-87 Link Here
82
[% ELSE %]
82
[% ELSE %]
83
    <h1>Most-circulated items</h1>
83
    <h1>Most-circulated items</h1>
84
	<form method="post" action="/cgi-bin/koha/reports/cat_issues_top.pl">
84
	<form method="post" action="/cgi-bin/koha/reports/cat_issues_top.pl">
85
	    [% INCLUDE 'csrf-token.inc' %]
85
	<fieldset class="rows">
86
	<fieldset class="rows">
86
	<ol>
87
	<ol>
87
        <li>
88
        <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/catalogue_out.tt (+1 lines)
Lines 158-163 Link Here
158
                    <h1>Items with no checkouts</h1>
158
                    <h1>Items with no checkouts</h1>
159
159
160
                    <form method="post" action="/cgi-bin/koha/reports/catalogue_out.pl">
160
                    <form method="post" action="/cgi-bin/koha/reports/catalogue_out.pl">
161
                        [% INCLUDE 'csrf-token.inc' %]
161
                        <fieldset class="rows">
162
                        <fieldset class="rows">
162
                            <ol>
163
                            <ol>
163
                                <li>
164
                                <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/catalogue_stats.tt (+1 lines)
Lines 90-95 Link Here
90
[% ELSE %]
90
[% ELSE %]
91
91
92
	<form method="post" action="/cgi-bin/koha/reports/catalogue_stats.pl">
92
	<form method="post" action="/cgi-bin/koha/reports/catalogue_stats.pl">
93
	    [% INCLUDE 'csrf-token.inc' %]
93
	<fieldset class="rows">
94
	<fieldset class="rows">
94
	<legend>Catalog statistics</legend>
95
	<legend>Catalog statistics</legend>
95
	<table>
96
	<table>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/dictionary.tt (+6 lines)
Lines 81-86 Link Here
81
            <div class="page-section">
81
            <div class="page-section">
82
                <h2>Current terms</h2>
82
                <h2>Current terms</h2>
83
                <form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
83
                <form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
84
                    [% INCLUDE 'csrf-token.inc' %]
84
                    <input type="hidden" name="phase" value="View Dictionary" />
85
                    <input type="hidden" name="phase" value="View Dictionary" />
85
                    [% IF ( areas ) %]
86
                    [% IF ( areas ) %]
86
                        Filter by area
87
                        Filter by area
Lines 129-134 Link Here
129
[% IF ( new_dictionary ) %]
130
[% IF ( new_dictionary ) %]
130
<h3>Add new definition</h3>
131
<h3>Add new definition</h3>
131
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
132
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
133
    [% INCLUDE 'csrf-token.inc' %]
132
<fieldset class="rows"><legend>Step 1 of 5: Name the new definition</legend><ol>
134
<fieldset class="rows"><legend>Step 1 of 5: Name the new definition</legend><ol>
133
<li>
135
<li>
134
<label for="definition_name">Definition name:</label>
136
<label for="definition_name">Definition name:</label>
Lines 148-153 Link Here
148
[%- IF ( step_2 ) -%]
150
[%- IF ( step_2 ) -%]
149
<h3>Add new definition</h3>
151
<h3>Add new definition</h3>
150
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
152
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
153
    [% INCLUDE 'csrf-token.inc' %]
151
  <fieldset class="rows">
154
  <fieldset class="rows">
152
    <legend>Step 2 of 5: Choose the area</legend>
155
    <legend>Step 2 of 5: Choose the area</legend>
153
    <ol>
156
    <ol>
Lines 170-175 Link Here
170
[% IF ( step_3 ) %]
173
[% IF ( step_3 ) %]
171
<h3>Add new definition</h3>
174
<h3>Add new definition</h3>
172
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">      
175
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">      
176
    [% INCLUDE 'csrf-token.inc' %]
173
<fieldset class="rows">
177
<fieldset class="rows">
174
<legend>Step 3 of 5: Choose a column</legend>
178
<legend>Step 3 of 5: Choose a column</legend>
175
<input type="hidden" name="area" value="[% area | html %]" />
179
<input type="hidden" name="area" value="[% area | html %]" />
Lines 206-211 Link Here
206
[% IF ( step_4 ) %]
210
[% IF ( step_4 ) %]
207
<h3>Add new definition</h3>
211
<h3>Add new definition</h3>
208
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
212
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
213
    [% INCLUDE 'csrf-token.inc' %]
209
<fieldset class="rows">
214
<fieldset class="rows">
210
<legend>Step 4 of 5: Specify a value</legend>
215
<legend>Step 4 of 5: Specify a value</legend>
211
<input type="hidden" name="area" value="[% area | html %]" />
216
<input type="hidden" name="area" value="[% area | html %]" />
Lines 255-260 Link Here
255
260
256
[% IF ( step_5 ) %]
261
[% IF ( step_5 ) %]
257
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
262
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
263
    [% INCLUDE 'csrf-token.inc' %]
258
<input type="hidden" name="area" value="[% area | html %]" />
264
<input type="hidden" name="area" value="[% area | html %]" />
259
<input type="hidden" name="definition_name" value="[% definition_name | html %]" />
265
<input type="hidden" name="definition_name" value="[% definition_name | html %]" />
260
<input type="hidden" name="definition_description" value="[% definition_description | html %]" />
266
<input type="hidden" name="definition_description" value="[% definition_description | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/guided_reports_start.tt (+16 lines)
Lines 250-255 Link Here
250
                                    [% END %]
250
                                    [% END %]
251
251
252
                                    <form action="/cgi-bin/koha/reports/guided_reports.pl" id="reports_form" method="post">
252
                                    <form action="/cgi-bin/koha/reports/guided_reports.pl" id="reports_form" method="post">
253
                                        [% INCLUDE 'csrf-token.inc' %]
253
                                        <input type="hidden" name="phase" value="Delete Multiple" />
254
                                        <input type="hidden" name="phase" value="Delete Multiple" />
254
                                        <table id="table_reports">
255
                                        <table id="table_reports">
255
                                            <thead>
256
                                            <thead>
Lines 498-503 Link Here
498
                [% IF ( build2 ) %]
499
                [% IF ( build2 ) %]
499
                    <h1>Build a report</h1>
500
                    <h1>Build a report</h1>
500
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
501
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
502
                        [% INCLUDE 'csrf-token.inc' %]
501
                        <input type="hidden" name="area" value="[% area | html %]" />
503
                        <input type="hidden" name="area" value="[% area | html %]" />
502
                        <input type="hidden" name="public" value="[% public | html %]" />
504
                        <input type="hidden" name="public" value="[% public | html %]" />
503
                        <input type="hidden" name="cache_expiry" value="[% cache_expiry | html %]" />
505
                        <input type="hidden" name="cache_expiry" value="[% cache_expiry | html %]" />
Lines 529-534 Link Here
529
                    <p>Note: Be careful selecting when selecting columns. If your choice is too broad it could result in a very large report that will either not complete, or slow your system down.</p>
531
                    <p>Note: Be careful selecting when selecting columns. If your choice is too broad it could result in a very large report that will either not complete, or slow your system down.</p>
530
532
531
                    <form id="column_submit" action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
533
                    <form id="column_submit" action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
534
                        [% INCLUDE 'csrf-token.inc' %]
532
                        <input type="hidden" name="area" value="[% area | html %]" />
535
                        <input type="hidden" name="area" value="[% area | html %]" />
533
                        <input type="hidden" name="type" value="[% type | html %]" />
536
                        <input type="hidden" name="type" value="[% type | html %]" />
534
                        <input type="hidden" name="public" value="[% public | html %]" />
537
                        <input type="hidden" name="public" value="[% public | html %]" />
Lines 581-586 Link Here
581
                [% IF ( build4 ) %]
584
                [% IF ( build4 ) %]
582
                    <h1>Build a report</h1>
585
                    <h1>Build a report</h1>
583
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" >
586
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" >
587
                        [% INCLUDE 'csrf-token.inc' %]
584
                        <input type="hidden" name="area" value="[% area | html %]" />
588
                        <input type="hidden" name="area" value="[% area | html %]" />
585
                        <input type="hidden" name="type" value="[% type | html %]" />
589
                        <input type="hidden" name="type" value="[% type | html %]" />
586
                        <input type="hidden" name="column" value="[% column | html %]" />
590
                        <input type="hidden" name="column" value="[% column | html %]" />
Lines 669-674 Link Here
669
                    <h1>Build a report</h1>
673
                    <h1>Build a report</h1>
670
                    <h3>Step 5 of 6: Pick which columns to total</h3>
674
                    <h3>Step 5 of 6: Pick which columns to total</h3>
671
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
675
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
676
                        [% INCLUDE 'csrf-token.inc' %]
672
                        <input type="hidden" name="area" value="[% area | html %]" />
677
                        <input type="hidden" name="area" value="[% area | html %]" />
673
                        <input type="hidden" name="type" value="[% type | html %]" />
678
                        <input type="hidden" name="type" value="[% type | html %]" />
674
                        <input type="hidden" name="column" value="[% column | html %]" />
679
                        <input type="hidden" name="column" value="[% column | html %]" />
Lines 707-712 Link Here
707
                    <h1>Build a report</h1>
712
                    <h1>Build a report</h1>
708
                    <h3>Step 6 of 6: Choose how you want the report ordered</h3>
713
                    <h3>Step 6 of 6: Choose how you want the report ordered</h3>
709
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
714
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
715
                        [% INCLUDE 'csrf-token.inc' %]
710
                        <input type="hidden" name="area" value="[% area | html %]" />
716
                        <input type="hidden" name="area" value="[% area | html %]" />
711
                        <input type="hidden" name="type" value="[% type | html %]" />
717
                        <input type="hidden" name="type" value="[% type | html %]" />
712
                        <input type="hidden" name="column" value="[% column | html %]" />
718
                        <input type="hidden" name="column" value="[% column | html %]" />
Lines 749-754 Link Here
749
                    </p>
755
                    </p>
750
756
751
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
757
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
758
                        [% INCLUDE 'csrf-token.inc' %]
752
                        <input type="hidden" name="sql" value="[% sql | html %]" />
759
                        <input type="hidden" name="sql" value="[% sql | html %]" />
753
                        <input type="hidden" name="type" value="[% type | html %]" />
760
                        <input type="hidden" name="type" value="[% type | html %]" />
754
                        <input type="hidden" name="public" value="[% public | html %]" />
761
                        <input type="hidden" name="public" value="[% public | html %]" />
Lines 762-767 Link Here
762
769
763
                [% IF ( save ) %]
770
                [% IF ( save ) %]
764
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" id="sql_report_form">
771
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" id="sql_report_form">
772
                        [% INCLUDE 'csrf-token.inc' %]
765
                        <input type="hidden" name="sql" value="[% sql | html %]" />
773
                        <input type="hidden" name="sql" value="[% sql | html %]" />
766
                        <input type="hidden" name="type" value="[% type | html %]" />
774
                        <input type="hidden" name="type" value="[% type | html %]" />
767
                        <input type="hidden" name="area" value="[% area | html %]" />
775
                        <input type="hidden" name="area" value="[% area | html %]" />
Lines 917-922 Link Here
917
                        [% IF ( execute ) %]
925
                        [% IF ( execute ) %]
918
                            [% UNLESS ( errors ) %]
926
                            [% UNLESS ( errors ) %]
919
                                <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batch_record_modification.pl" id="batch_record_modification" target="_blank">
927
                                <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batch_record_modification.pl" id="batch_record_modification" target="_blank">
928
                                    [% INCLUDE 'csrf-token.inc' %]
920
                                    <input type="hidden" name="recordtype" value="biblio" />
929
                                    <input type="hidden" name="recordtype" value="biblio" />
921
                                    <input type="hidden" name="op" value="list" />
930
                                    <input type="hidden" name="op" value="list" />
922
                                    [% # Preserve the whitespace of the following textarea in order to format the values correctly %]
931
                                    [% # Preserve the whitespace of the following textarea in order to format the values correctly %]
Lines 926-931 Link Here
926
                                </form>
935
                                </form>
927
936
928
                                <form method="POST" action="/cgi-bin/koha/tools/batch_delete_records.pl" id="batch_record_deletion" target="_blank">
937
                                <form method="POST" action="/cgi-bin/koha/tools/batch_delete_records.pl" id="batch_record_deletion" target="_blank">
938
                                    [% INCLUDE 'csrf-token.inc' %]
929
                                    <input type="hidden" name="recordtype" value="biblio" />
939
                                    <input type="hidden" name="recordtype" value="biblio" />
930
                                    <input type="hidden" name="op" value="list" />
940
                                    <input type="hidden" name="op" value="list" />
931
                                    [% # Preserve the whitespace of the following textarea in order to format the values correctly %]
941
                                    [% # Preserve the whitespace of the following textarea in order to format the values correctly %]
Lines 935-940 Link Here
935
                                </form>
945
                                </form>
936
946
937
                                <form method="POST" action="/cgi-bin/koha/tools/batchMod.pl" id="batch_item_modification" target="_blank">
947
                                <form method="POST" action="/cgi-bin/koha/tools/batchMod.pl" id="batch_item_modification" target="_blank">
948
                                    [% INCLUDE 'csrf-token.inc' %]
938
                                    <input type="hidden" name="op" value="show" />
949
                                    <input type="hidden" name="op" value="show" />
939
                                    [% FOREACH result IN results %]
950
                                    [% FOREACH result IN results %]
940
                                        [% FOREACH cells IN result.cells %]
951
                                        [% FOREACH cells IN result.cells %]
Lines 950-955 Link Here
950
                                </form>
961
                                </form>
951
962
952
                                <form method="POST" action="/cgi-bin/koha/tools/batchMod.pl" id="batch_item_deletion" target="_blank">
963
                                <form method="POST" action="/cgi-bin/koha/tools/batchMod.pl" id="batch_item_deletion" target="_blank">
964
                                    [% INCLUDE 'csrf-token.inc' %]
953
                                    <input type="hidden" name="op" value="show" />
965
                                    <input type="hidden" name="op" value="show" />
954
                                    <input type="hidden" name="del" value="1" />
966
                                    <input type="hidden" name="del" value="1" />
955
                                    [% FOREACH result IN results %]
967
                                    [% FOREACH result IN results %]
Lines 980-985 Link Here
980
                                </form>
992
                                </form>
981
993
982
                                <form method="POST" action="/cgi-bin/koha/tools/modborrowers.pl" id="batch_patron_modification" target="_blank">
994
                                <form method="POST" action="/cgi-bin/koha/tools/modborrowers.pl" id="batch_patron_modification" target="_blank">
995
                                    [% INCLUDE 'csrf-token.inc' %]
983
                                    <input type="hidden" name="op" value="show" />
996
                                    <input type="hidden" name="op" value="show" />
984
                                    [% # Preserve the whitespace of the following textarea in order to format the values correctly %]
997
                                    [% # Preserve the whitespace of the following textarea in order to format the values correctly %]
985
                                    <textarea style="display:none" name="cardnumberlist" id="cardnumberlist">
998
                                    <textarea style="display:none" name="cardnumberlist" id="cardnumberlist">
Lines 1185-1190 Link Here
1185
                [% IF ( create ) %]
1198
                [% IF ( create ) %]
1186
                    <h1>Create from SQL</h1>
1199
                    <h1>Create from SQL</h1>
1187
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" id="sql_report_form">
1200
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" id="sql_report_form">
1201
                        [% INCLUDE 'csrf-token.inc' %]
1188
                        <fieldset class="rows">
1202
                        <fieldset class="rows">
1189
                            <legend>Create report from SQL</legend>
1203
                            <legend>Create report from SQL</legend>
1190
                            <ol>
1204
                            <ol>
Lines 1303-1308 Link Here
1303
1317
1304
                [% IF ( editsql ) %]
1318
                [% IF ( editsql ) %]
1305
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" id="sql_report_form">
1319
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" id="sql_report_form">
1320
                        [% INCLUDE 'csrf-token.inc' %]
1306
                        <input type="hidden" name="id" value="[% id | html %]"/>
1321
                        <input type="hidden" name="id" value="[% id | html %]"/>
1307
                        <fieldset class="rows">
1322
                        <fieldset class="rows">
1308
                            <legend><h1>Edit SQL report</h1></legend>
1323
                            <legend><h1>Edit SQL report</h1></legend>
Lines 1369-1374 Link Here
1369
1384
1370
                [% IF ( errors ) %]
1385
                [% IF ( errors ) %]
1371
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
1386
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
1387
                        [% INCLUDE 'csrf-token.inc' %]
1372
                        <div class="dialog alert">
1388
                        <div class="dialog alert">
1373
                            <strong>The following error was encountered:</strong><br />
1389
                            <strong>The following error was encountered:</strong><br />
1374
                            [% FOREACH error IN errors %]
1390
                            [% FOREACH error IN errors %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/issues_avg_stats.tt (+1 lines)
Lines 82-87 Link Here
82
[% ELSE %]
82
[% ELSE %]
83
83
84
	<form method="post" action="/cgi-bin/koha/reports/issues_avg_stats.pl">
84
	<form method="post" action="/cgi-bin/koha/reports/issues_avg_stats.pl">
85
	    [% INCLUDE 'csrf-token.inc' %]
85
	<fieldset class="rows">
86
	<fieldset class="rows">
86
	<legend>Average checkout period statistics</legend>
87
	<legend>Average checkout period statistics</legend>
87
	<table>
88
	<table>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/issues_stats.tt (+1 lines)
Lines 105-110 Link Here
105
[% ELSE %]
105
[% ELSE %]
106
106
107
    <form method="post" action="/cgi-bin/koha/reports/issues_stats.pl">
107
    <form method="post" action="/cgi-bin/koha/reports/issues_stats.pl">
108
        [% INCLUDE 'csrf-token.inc' %]
108
    <fieldset class="rows">
109
    <fieldset class="rows">
109
	<legend>Circulation statistics</legend><table>
110
	<legend>Circulation statistics</legend><table>
110
        <thead>
111
        <thead>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/itemslost.tt (+1 lines)
Lines 137-142 Link Here
137
	[% ELSE %]
137
	[% ELSE %]
138
	
138
	
139
	<form name="f" action="/cgi-bin/koha/reports/itemslost.pl" method="post">
139
	<form name="f" action="/cgi-bin/koha/reports/itemslost.pl" method="post">
140
	    [% INCLUDE 'csrf-token.inc' %]
140
    <fieldset class="rows">
141
    <fieldset class="rows">
141
        <ol>
142
        <ol>
142
143
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/itemtypes.tt (+1 lines)
Lines 70-75 Link Here
70
[% ELSE %]
70
[% ELSE %]
71
        <h1>View a count of items held at your library grouped by item type</h1>
71
        <h1>View a count of items held at your library grouped by item type</h1>
72
        <form method="post" action="/cgi-bin/koha/reports/manager.pl?report_name=itemtypes">
72
        <form method="post" action="/cgi-bin/koha/reports/manager.pl?report_name=itemtypes">
73
            [% INCLUDE 'csrf-token.inc' %]
73
          <fieldset class="rows">
74
          <fieldset class="rows">
74
            <ol>
75
            <ol>
75
              <li>
76
              <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/orders_by_budget.tt (+1 lines)
Lines 95-100 Link Here
95
    [% END %]
95
    [% END %]
96
    [% ELSE %]
96
    [% ELSE %]
97
        <form name="f" action="/cgi-bin/koha/reports/orders_by_fund.pl" method="post">
97
        <form name="f" action="/cgi-bin/koha/reports/orders_by_fund.pl" method="post">
98
            [% INCLUDE 'csrf-token.inc' %]
98
        <fieldset class="rows">
99
        <fieldset class="rows">
99
        <legend>Filters</legend>
100
        <legend>Filters</legend>
100
        <ol><li><label for="budgetfilter">Fund: </label>
101
        <ol><li><label for="budgetfilter">Fund: </label>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/reserves_stats.tt (+1 lines)
Lines 91-96 Link Here
91
[% ELSE %]
91
[% ELSE %]
92
92
93
    <form method="post" action="/cgi-bin/koha/reports/reserves_stats.pl">
93
    <form method="post" action="/cgi-bin/koha/reports/reserves_stats.pl">
94
        [% INCLUDE 'csrf-token.inc' %]
94
    <fieldset class="rows">
95
    <fieldset class="rows">
95
	<legend>Holds statistics</legend><table>
96
	<legend>Holds statistics</legend><table>
96
        <thead>
97
        <thead>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/serials_stats.tt (+1 lines)
Lines 81-86 Link Here
81
81
82
[% ELSE %]
82
[% ELSE %]
83
	<form method="post" action="/cgi-bin/koha/reports/serials_stats.pl">
83
	<form method="post" action="/cgi-bin/koha/reports/serials_stats.pl">
84
	    [% INCLUDE 'csrf-token.inc' %]
84
85
85
	<fieldset class="rows">
86
	<fieldset class="rows">
86
		<ol>
87
		<ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reserve/request.tt (+5 lines)
Lines 167-172 Link Here
167
                    <p>Hold placed by : <strong> [% nextreservsurname | html %] [% nextreservfirstname | html %]</strong> at : <strong> [% branchname | html %] </strong>, Please transfer this item.
167
                    <p>Hold placed by : <strong> [% nextreservsurname | html %] [% nextreservfirstname | html %]</strong> at : <strong> [% branchname | html %] </strong>, Please transfer this item.
168
                    </p>
168
                    </p>
169
                    <form name="cancelReservewithtransfert" action="branchreserves.pl" method="post">
169
                    <form name="cancelReservewithtransfert" action="branchreserves.pl" method="post">
170
                        [% INCLUDE 'csrf-token.inc' %]
170
                        <input type="submit" class="button" />
171
                        <input type="submit" class="button" />
171
                    </form>
172
                    </form>
172
                </div>
173
                </div>
Lines 228-233 Link Here
228
                            [% IF clubcount %]
229
                            [% IF clubcount %]
229
                                [% WRAPPER tab_panel tabname="holds_clubsearch_pane" %]
230
                                [% WRAPPER tab_panel tabname="holds_clubsearch_pane" %]
230
                                    <form id="holds_clubsearch" action="request.pl" method="post">
231
                                    <form id="holds_clubsearch" action="request.pl" method="post">
232
                                        [% INCLUDE 'csrf-token.inc' %]
231
                                        <div class="hint">Enter club ID or partial name:</div>
233
                                        <div class="hint">Enter club ID or partial name:</div>
232
                                        <input type="text" size="40" id="club" class="focus" name="findclub" autocomplete="off" />
234
                                        <input type="text" size="40" id="club" class="focus" name="findclub" autocomplete="off" />
233
                                        <input type="submit" class="btn btn-primary" value="Search" />
235
                                        <input type="submit" class="btn btn-primary" value="Search" />
Lines 250-255 Link Here
250
                <fieldset class="rows">
252
                <fieldset class="rows">
251
                    <legend>Hold details</legend>
253
                    <legend>Hold details</legend>
252
                    <form action="/api/v1/clubs/[% club.id | html %]/holds" method="post" name="form" id="club-request-form">
254
                    <form action="/api/v1/clubs/[% club.id | html %]/holds" method="post" name="form" id="club-request-form">
255
                        [% INCLUDE 'csrf-token.inc' %]
253
256
254
                        [% IF ( multi_hold ) %]
257
                        [% IF ( multi_hold ) %]
255
                            <input type="hidden" name="request" value="any"/>
258
                            <input type="hidden" name="request" value="any"/>
Lines 495-500 Link Here
495
                <fieldset class="rows">
498
                <fieldset class="rows">
496
                    <legend>Hold details</legend>
499
                    <legend>Hold details</legend>
497
                    <form action="placerequest.pl" method="post" name="form" id="hold-request-form">
500
                    <form action="placerequest.pl" method="post" name="form" id="hold-request-form">
501
                        [% INCLUDE 'csrf-token.inc' %]
498
502
499
                        <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
503
                        <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
500
                        [% FOREACH biblionumber IN biblionumbers %]
504
                        [% FOREACH biblionumber IN biblionumbers %]
Lines 1050-1055 Link Here
1050
                [% END %]
1054
                [% END %]
1051
                [% IF ( reserveloop ) %]
1055
                [% IF ( reserveloop ) %]
1052
                    <form id="existing_holds" name="T[% time | html %]" action="modrequest.pl" method="post" style="display:block">
1056
                    <form id="existing_holds" name="T[% time | html %]" action="modrequest.pl" method="post" style="display:block">
1057
                        [% INCLUDE 'csrf-token.inc' %]
1053
                        [% IF ( multi_hold ) %]
1058
                        [% IF ( multi_hold ) %]
1054
                            [% FOREACH biblionumber IN biblionumbers %]
1059
                            [% FOREACH biblionumber IN biblionumbers %]
1055
                            <input type="hidden" name="biblionumber" value="[% biblionumber | html %]"/>
1060
                            <input type="hidden" name="biblionumber" value="[% biblionumber | html %]"/>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/rotating_collections/addItems.tt (+1 lines)
Lines 83-88 Link Here
83
83
84
              <div>
84
              <div>
85
                <form action="addItems.pl" method="post">
85
                <form action="addItems.pl" method="post">
86
                    [% INCLUDE 'csrf-token.inc' %]
86
                    <fieldset class="brief">
87
                    <fieldset class="brief">
87
                        <legend>Add or remove items</legend>
88
                        <legend>Add or remove items</legend>
88
                        <ol>
89
                        <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/rotating_collections/editCollections.tt (+1 lines)
Lines 116-121 Link Here
116
                    [% END %]
116
                    [% END %]
117
117
118
                    <form action="editCollections.pl" method="post" class="validated">
118
                    <form action="editCollections.pl" method="post" class="validated">
119
                        [% INCLUDE 'csrf-token.inc' %]
119
                        [% IF ( previousActionEdit ) %]
120
                        [% IF ( previousActionEdit ) %]
120
                            <input type="hidden" name="action" value="update" />
121
                            <input type="hidden" name="action" value="update" />
121
                            <input type="hidden" name="colId" value="[% editColId | html %]" />
122
                            <input type="hidden" name="colId" value="[% editColId | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/rotating_collections/transferCollection.tt (+1 lines)
Lines 64-69 Link Here
64
                [% ELSE %]
64
                [% ELSE %]
65
                    <div>
65
                    <div>
66
                        <form action="transferCollection.pl" method="post">
66
                        <form action="transferCollection.pl" method="post">
67
                            [% INCLUDE 'csrf-token.inc' %]
67
                            <input type="hidden" name="colId" value="[% colId | html %]" />
68
                            <input type="hidden" name="colId" value="[% colId | html %]" />
68
                            <fieldset class="rows">
69
                            <fieldset class="rows">
69
                                <ol>
70
                                <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/acqui-search.tt (+1 lines)
Lines 9-14 Link Here
9
9
10
<h1>Serial subscription: search for vendor </h1>
10
<h1>Serial subscription: search for vendor </h1>
11
    <form action="/cgi-bin/koha/serials/acqui-search-result.pl" method="post">
11
    <form action="/cgi-bin/koha/serials/acqui-search-result.pl" method="post">
12
        [% INCLUDE 'csrf-token.inc' %]
12
        <label for="text">Vendor name: </label>
13
        <label for="text">Vendor name: </label>
13
        <input id="text" type="text"  size="25" name="supplier" autofocus="autofocus" />
14
        <input id="text" type="text"  size="25" name="supplier" autofocus="autofocus" />
14
        <input type="submit" class="btn btn-primary" value="OK" />
15
        <input type="submit" class="btn btn-primary" value="OK" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/claims.tt (+2 lines)
Lines 77-82 Link Here
77
                [% END %]
77
                [% END %]
78
78
79
                <form id="claims" name="claims" action="claims.pl" method="post">
79
                <form id="claims" name="claims" action="claims.pl" method="post">
80
                    [% INCLUDE 'csrf-token.inc' %]
80
                    <fieldset>
81
                    <fieldset>
81
                        <label for="supplierid">Vendor: </label>
82
                        <label for="supplierid">Vendor: </label>
82
                        <select id="supplierid" name="supplierid">
83
                        <select id="supplierid" name="supplierid">
Lines 116-121 Link Here
116
117
117
                    <fieldset>
118
                    <fieldset>
118
                        <form action="claims.pl" method="post" id="claims_form">
119
                        <form action="claims.pl" method="post" id="claims_form">
120
                            [% INCLUDE 'csrf-token.inc' %]
119
                            <table id="claimst">
121
                            <table id="claimst">
120
                                <thead>
122
                                <thead>
121
                                    <tr>
123
                                    <tr>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/routing-preview.tt (+1 lines)
Lines 32-37 Link Here
32
<h1>Preview routing list for <em>[% title | html %]</em></h1>
32
<h1>Preview routing list for <em>[% title | html %]</em></h1>
33
33
34
<form method="post" action="routing-preview.pl">
34
<form method="post" action="routing-preview.pl">
35
    [% INCLUDE 'csrf-token.inc' %]
35
<input type="hidden" id="subscriptionid" name="subscriptionid" value="[% subscriptionid | html %]" />
36
<input type="hidden" id="subscriptionid" name="subscriptionid" value="[% subscriptionid | html %]" />
36
    <input type="hidden" id="issue_escaped" name="issue_escaped" value="[% issue_escaped | html %]" />
37
    <input type="hidden" id="issue_escaped" name="issue_escaped" value="[% issue_escaped | html %]" />
37
<fieldset class="rows">
38
<fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/routing.tt (+1 lines)
Lines 43-48 Link Here
43
43
44
[% INCLUDE 'blocking_errors.inc' %]
44
[% INCLUDE 'blocking_errors.inc' %]
45
<form method="post" action="routing.pl">
45
<form method="post" action="routing.pl">
46
    [% INCLUDE 'csrf-token.inc' %]
46
<input type="hidden" name="op" value="save" />
47
<input type="hidden" name="op" value="save" />
47
<input type="hidden" name="subscriptionid" value="[% subscriptionid | html %]" />
48
<input type="hidden" name="subscriptionid" value="[% subscriptionid | html %]" />
48
<fieldset class="rows">
49
<fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/serials-collection.tt (+1 lines)
Lines 143-148 Link Here
143
143
144
                [% IF ( years ) %]
144
                [% IF ( years ) %]
145
                    <form name="edition" action="/cgi-bin/koha/serials/serials-edit.pl" method="post">
145
                    <form name="edition" action="/cgi-bin/koha/serials/serials-edit.pl" method="post">
146
                        [% INCLUDE 'csrf-token.inc' %]
146
                        [% WRAPPER tabs id= "subscription_years" %]
147
                        [% WRAPPER tabs id= "subscription_years" %]
147
                            [% WRAPPER tabs_nav %]
148
                            [% WRAPPER tabs_nav %]
148
                                [% FOREACH year IN years %]
149
                                [% FOREACH year IN years %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/serials-edit.tt (+1 lines)
Lines 109-114 $(document).ready(function() { Link Here
109
109
110
[% IF internalnotes %]<p>Nonpublic note: [% internalnotes | html | html_line_break %]</p>[% END %]
110
[% IF internalnotes %]<p>Nonpublic note: [% internalnotes | html | html_line_break %]</p>[% END %]
111
<form method="post" name="f" class="noEnterSubmit" action="serials-edit.pl" id="serials_edit">
111
<form method="post" name="f" class="noEnterSubmit" action="serials-edit.pl" id="serials_edit">
112
    [% INCLUDE 'csrf-token.inc' %]
112
113
113
[% IF ( Errors ) %]
114
[% IF ( Errors ) %]
114
<div class="dialog alert">
115
<div class="dialog alert">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/serials-search.tt (+1 lines)
Lines 46-51 Link Here
46
46
47
    [% BLOCK subscriptions_table %]
47
    [% BLOCK subscriptions_table %]
48
        <form method="post">
48
        <form method="post">
49
            [% INCLUDE 'csrf-token.inc' %]
49
            [% IF closed %]
50
            [% IF closed %]
50
                [% SET tab = 'closed' %]
51
                [% SET tab = 'closed' %]
51
            [% ELSE %]
52
            [% ELSE %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-add.tt (+1 lines)
Lines 55-60 fieldset.rows table { clear: none; margin: 0; } Link Here
55
        </div>
55
        </div>
56
    </div>
56
    </div>
57
    <form method="post" id="subscription_add_form" name="f" action="/cgi-bin/koha/serials/subscription-add.pl" class="validated">
57
    <form method="post" id="subscription_add_form" name="f" action="/cgi-bin/koha/serials/subscription-add.pl" class="validated">
58
        [% INCLUDE 'csrf-token.inc' %]
58
                <div class="row" id="page_1">
59
                <div class="row" id="page_1">
59
                    <div class="col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2">
60
                    <div class="col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2">
60
                        [% IF ( modify ) %]
61
                        [% IF ( modify ) %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-batchedit.tt (+1 lines)
Lines 76-81 Link Here
76
                    </div>
76
                    </div>
77
77
78
                    <form method="post">
78
                    <form method="post">
79
                        [% INCLUDE 'csrf-token.inc' %]
79
                        [% FOREACH subscription IN subscriptions %]
80
                        [% FOREACH subscription IN subscriptions %]
80
                            <input type="hidden" name="subscriptionid" value="[% subscription.subscriptionid | html %]"/>
81
                            <input type="hidden" name="subscriptionid" value="[% subscription.subscriptionid | html %]"/>
81
                        [% END %]
82
                        [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-detail.tt (+1 lines)
Lines 61-66 Link Here
61
                        </ul>
61
                        </ul>
62
62
63
                        <form method="post" action="/cgi-bin/koha/serials/subscription-detail.pl">
63
                        <form method="post" action="/cgi-bin/koha/serials/subscription-detail.pl">
64
                            [% INCLUDE 'csrf-token.inc' %]
64
                            <input type="hidden" name="subscriptionid" value="[% subscriptionid | html %]" />
65
                            <input type="hidden" name="subscriptionid" value="[% subscriptionid | html %]" />
65
                            <input type="hidden" name="issueconfirmed" value="1" />
66
                            <input type="hidden" name="issueconfirmed" value="1" />
66
                            <input type="hidden" name="op" value="del" />
67
                            <input type="hidden" name="op" value="del" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-frequencies.tt (+1 lines)
Lines 42-47 Link Here
42
          <h1>Edit frequency: [% description | html %]</h1>
42
          <h1>Edit frequency: [% description | html %]</h1>
43
        [% END %]
43
        [% END %]
44
        <form action="/cgi-bin/koha/serials/subscription-frequencies.pl" id="add_frequency_form" method="post">
44
        <form action="/cgi-bin/koha/serials/subscription-frequencies.pl" id="add_frequency_form" method="post">
45
            [% INCLUDE 'csrf-token.inc' %]
45
          [% IF (modify) %]
46
          [% IF (modify) %]
46
            <input type="hidden" name="id" value="[% id | html %]" />
47
            <input type="hidden" name="id" value="[% id | html %]" />
47
            <input type="hidden" name="op" value="savemod" />
48
            <input type="hidden" name="op" value="savemod" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-history.tt (+1 lines)
Lines 34-39 Link Here
34
34
35
        <div id="subscription_form_history">
35
        <div id="subscription_form_history">
36
          <form method="post" action="/cgi-bin/koha/serials/subscription-history.pl">
36
          <form method="post" action="/cgi-bin/koha/serials/subscription-history.pl">
37
              [% INCLUDE 'csrf-token.inc' %]
37
            <input type="hidden" name="op" value="mod" />
38
            <input type="hidden" name="op" value="mod" />
38
            <input type="hidden" name="subscriptionid" value="[% subscriptionid | html %]" />
39
            <input type="hidden" name="subscriptionid" value="[% subscriptionid | html %]" />
39
            <p>Hint : you can update the serial history manually. This can be useful for an old subscription or to clean the existing history. Modify those fields with care, as future serial receive will continue to update them automatically.</p>
40
            <p>Hint : you can update the serial history manually. This can be useful for an old subscription or to clean the existing history. Modify those fields with care, as future serial receive will continue to update them automatically.</p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-numberpatterns.tt (+1 lines)
Lines 60-65 Link Here
60
          [% END %]
60
          [% END %]
61
61
62
          <form action="/cgi-bin/koha/serials/subscription-numberpatterns.pl" method="post">
62
          <form action="/cgi-bin/koha/serials/subscription-numberpatterns.pl" method="post">
63
              [% INCLUDE 'csrf-token.inc' %]
63
            [% IF (new) %]
64
            [% IF (new) %]
64
              <input type="hidden" name="op" value="savenew" />
65
              <input type="hidden" name="op" value="savenew" />
65
            [% ELSE %]
66
            [% ELSE %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-renew.tt (+1 lines)
Lines 30-35 Link Here
30
[% ELSE %]
30
[% ELSE %]
31
31
32
<form name="f" action="/cgi-bin/koha/serials/subscription-renew.pl" method="post">
32
<form name="f" action="/cgi-bin/koha/serials/subscription-renew.pl" method="post">
33
    [% INCLUDE 'csrf-token.inc' %]
33
		<input type="hidden" name="op" value="renew" />
34
		<input type="hidden" name="op" value="renew" />
34
		<input type="hidden" name="subscriptionid" value="[% subscription.subscriptionid | html %]" />
35
		<input type="hidden" name="subscriptionid" value="[% subscription.subscriptionid | html %]" />
35
		<fieldset class="rows"><legend>Subscription renewal for [% subscription.bibliotitle | html %]</legend>
36
		<fieldset class="rows"><legend>Subscription renewal for [% subscription.bibliotitle | html %]</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/suggestion/suggestion.tt (+2 lines)
Lines 339-344 Link Here
339
            [% END %]
339
            [% END %]
340
340
341
            <form id="add_edit" action="suggestion.pl" method="post" class="validated">
341
            <form id="add_edit" action="suggestion.pl" method="post" class="validated">
342
                [% INCLUDE 'csrf-token.inc' %]
342
                [% INCLUDE 'csrf-token.inc' %]
343
                [% INCLUDE 'csrf-token.inc' %]
343
                <input type="hidden" name="redirect" id="redirect" value="[% redirect | html %]" />
344
                <input type="hidden" name="redirect" id="redirect" value="[% redirect | html %]" />
344
                <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% borrowernumber | html %]" />
345
                <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% borrowernumber | html %]" />
Lines 712-717 Link Here
712
                    [% FOREACH suggestion IN suggestions %]
713
                    [% FOREACH suggestion IN suggestions %]
713
                        [% WRAPPER tab_panel tabname= suggestion.suggestiontype %]
714
                        [% WRAPPER tab_panel tabname= suggestion.suggestiontype %]
714
                            <form class="update_suggestions" name="f" method="post" action="/cgi-bin/koha/suggestion/suggestion.pl#[% suggestion.suggestiontype| uri %]">
715
                            <form class="update_suggestions" name="f" method="post" action="/cgi-bin/koha/suggestion/suggestion.pl#[% suggestion.suggestiontype| uri %]">
716
                                [% INCLUDE 'csrf-token.inc' %]
715
                            [% INCLUDE 'csrf-token.inc' %]
717
                            [% INCLUDE 'csrf-token.inc' %]
716
718
717
                                [% IF suggestion.suggestions.size %]
719
                                [% IF suggestion.suggestions.size %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tags/review.tt (+3 lines)
Lines 39-44 tr > td input,td input[type="submit"] { font-size: 85%; padding: 1px; } Link Here
39
<div class="col-sm-8 col-sm-push-2">
39
<div class="col-sm-8 col-sm-push-2">
40
<h1>Tags</h1>
40
<h1>Tags</h1>
41
<form method="post" action="/cgi-bin/koha/tags/review.pl">
41
<form method="post" action="/cgi-bin/koha/tags/review.pl">
42
    [% INCLUDE 'csrf-token.inc' %]
42
    <h4><span>Displaying</span>
43
    <h4><span>Displaying</span>
43
    [% IF ( filter_approved_all ) %]<span>all</span>[% END %]
44
    [% IF ( filter_approved_all ) %]<span>all</span>[% END %]
44
    [% IF ( filter_approved_ok ) %]<span>approved</span>[% END %]
45
    [% IF ( filter_approved_ok ) %]<span>approved</span>[% END %]
Lines 186-191 tr > td input,td input[type="submit"] { font-size: 85%; padding: 1px; } Link Here
186
   <h4>Check lists</h4>
187
   <h4>Check lists</h4>
187
   <div class="description">Enter a word or phrase to check against approved/rejected lists: </div>
188
   <div class="description">Enter a word or phrase to check against approved/rejected lists: </div>
188
   <form method="post" action="/cgi-bin/koha/tags/review.pl">
189
   <form method="post" action="/cgi-bin/koha/tags/review.pl">
190
       [% INCLUDE 'csrf-token.inc' %]
189
   <input type="text" size="14" name="test" id="test" />
191
   <input type="text" size="14" name="test" id="test" />
190
   <fieldset class="action"><button type="submit" value="Test" class="approval_btn btn btn-default btn-sm" id="test_button" name="op-test"><i class="fas fa-check-square" aria-hidden="true"></i> Test</button></fieldset>
192
   <fieldset class="action"><button type="submit" value="Test" class="approval_btn btn btn-default btn-sm" id="test_button" name="op-test"><i class="fas fa-check-square" aria-hidden="true"></i> Test</button></fieldset>
191
   <div id="verdict">
193
   <div id="verdict">
Lines 206-211 tr > td input,td input[type="submit"] { font-size: 85%; padding: 1px; } Link Here
206
<div class="col-sm-2 col-sm-pull-10">
208
<div class="col-sm-2 col-sm-pull-10">
207
    <aside>
209
    <aside>
208
<form method="post" action="/cgi-bin/koha/tags/review.pl">
210
<form method="post" action="/cgi-bin/koha/tags/review.pl">
211
    [% INCLUDE 'csrf-token.inc' %]
209
<fieldset class="brief">
212
<fieldset class="brief">
210
  <h4>Filters</h4>
213
  <h4>Filters</h4>
211
	<ol>
214
	<ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/additional-contents.tt (+3 lines)
Lines 201-206 Link Here
201
    </div>
201
    </div>
202
202
203
    <form id="add_additional_content" method="post" action="/cgi-bin/koha/tools/additional-contents.pl" class="validate">
203
    <form id="add_additional_content" method="post" action="/cgi-bin/koha/tools/additional-contents.pl" class="validate">
204
        [% INCLUDE 'csrf-token.inc' %]
204
        [% INCLUDE 'csrf-token.inc' %]
205
        [% INCLUDE 'csrf-token.inc' %]
205
        <input type="hidden" name="op" value="add_validate" />
206
        <input type="hidden" name="op" value="add_validate" />
206
        <input type="hidden" name="category" value="[% category | html %]" />
207
        <input type="hidden" name="category" value="[% category | html %]" />
Lines 342-347 Link Here
342
    [% IF additional_contents.count %]
343
    [% IF additional_contents.count %]
343
        <div class="page-section">
344
        <div class="page-section">
344
            <form id="del_form" method="post" action="/cgi-bin/koha/tools/additional-contents.pl">
345
            <form id="del_form" method="post" action="/cgi-bin/koha/tools/additional-contents.pl">
346
                [% INCLUDE 'csrf-token.inc' %]
345
                <table id="table_additional_contents">
347
                <table id="table_additional_contents">
346
                    <thead>
348
                    <thead>
347
                        <tr>
349
                        <tr>
Lines 455-460 Link Here
455
                <fieldset class="action"><input type="submit" class="btn btn-primary" value="Delete selected" /></fieldset>
457
                <fieldset class="action"><input type="submit" class="btn btn-primary" value="Delete selected" /></fieldset>
456
            </form>
458
            </form>
457
            <form action="/cgi-bin/koha/tools/additional-contents.pl" method="post" id="delete_single">
459
            <form action="/cgi-bin/koha/tools/additional-contents.pl" method="post" id="delete_single">
460
                [% INCLUDE 'csrf-token.inc' %]
458
                [% INCLUDE 'csrf-token.inc' %]
461
                [% INCLUDE 'csrf-token.inc' %]
459
                <input type="hidden" id="del_op" name="op" value="delete_confirmed" />
462
                <input type="hidden" id="del_op" name="op" value="delete_confirmed" />
460
                <input type="hidden" id="del_category" name="category" value="[% category | html %]" />
463
                <input type="hidden" id="del_category" name="category" value="[% category | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/automatic_item_modification_by_age.tt (+1 lines)
Lines 39-44 Link Here
39
39
40
        [% IF ( op == 'edit_form' ) %]
40
        [% IF ( op == 'edit_form' ) %]
41
          <form method="post" id="rules_form" action="/cgi-bin/koha/tools/automatic_item_modification_by_age.pl">
41
          <form method="post" id="rules_form" action="/cgi-bin/koha/tools/automatic_item_modification_by_age.pl">
42
              [% INCLUDE 'csrf-token.inc' %]
42
            <h1>Rules for automatic item modifications by age</h1>
43
            <h1>Rules for automatic item modifications by age</h1>
43
            <div id="toolbar" class="btn-toolbar">
44
            <div id="toolbar" class="btn-toolbar">
44
                <div class="btn-group">
45
                <div class="btn-group">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batchMod-del.tt (+1 lines)
Lines 105-110 Link Here
105
105
106
106
107
<form name="f" action="batchMod.pl" method="post">
107
<form name="f" action="batchMod.pl" method="post">
108
    [% INCLUDE 'csrf-token.inc' %]
108
     <input type="hidden" name="biblionumber" id="biblionumber" value="[% biblionumber | html %]" />
109
     <input type="hidden" name="biblionumber" id="biblionumber" value="[% biblionumber | html %]" />
109
     <input type="hidden" name="op" value="[% op | html %]" />
110
     <input type="hidden" name="op" value="[% op | html %]" />
110
     <input type="hidden" name="searchid" value="[% searchid | html %]" />
111
     <input type="hidden" name="searchid" value="[% searchid | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batchMod-edit.tt (+1 lines)
Lines 128-133 Link Here
128
128
129
129
130
        <form name="f" action="batchMod.pl" method="post">
130
        <form name="f" action="batchMod.pl" method="post">
131
            [% INCLUDE 'csrf-token.inc' %]
131
            <input type="hidden" name="op" value="[% op | html %]" />
132
            <input type="hidden" name="op" value="[% op | html %]" />
132
            <input type="hidden" name="searchid" value="[% searchid | html %]" />
133
            <input type="hidden" name="searchid" value="[% searchid | html %]" />
133
            <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
134
            <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batchMod.tt (+1 lines)
Lines 35-40 Link Here
35
35
36
                <h1>Batch item [% IF ( del ) %]deletion[% ELSE %]modification[% END %]</h1>
36
                <h1>Batch item [% IF ( del ) %]deletion[% ELSE %]modification[% END %]</h1>
37
                        <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batchMod.pl">
37
                        <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batchMod.pl">
38
                            [% INCLUDE 'csrf-token.inc' %]
38
                            <fieldset class="rows">
39
                            <fieldset class="rows">
39
                                <legend>Use a file</legend>
40
                                <legend>Use a file</legend>
40
                                  <ol>
41
                                  <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batch_delete_records.tt (+2 lines)
Lines 56-61 Link Here
56
  [% END %]
56
  [% END %]
57
  [% IF op == 'form' %]
57
  [% IF op == 'form' %]
58
    <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batch_delete_records.pl" id="record_ids_selection">
58
    <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batch_delete_records.pl" id="record_ids_selection">
59
        [% INCLUDE 'csrf-token.inc' %]
59
      <fieldset class="rows">
60
      <fieldset class="rows">
60
        <legend>Record type</legend>
61
        <legend>Record type</legend>
61
        <ol>
62
        <ol>
Lines 165-170 Link Here
165
          | <a id="clearlinkedtobiblio" href="#">Clear used authorities</a>
166
          | <a id="clearlinkedtobiblio" href="#">Clear used authorities</a>
166
        </div>
167
        </div>
167
        <form action="/cgi-bin/koha/tools/batch_delete_records.pl" method="post" id="selectauths">
168
        <form action="/cgi-bin/koha/tools/batch_delete_records.pl" method="post" id="selectauths">
169
            [% INCLUDE 'csrf-token.inc' %]
168
          <table id="authorities" class="records">
170
          <table id="authorities" class="records">
169
            <thead>
171
            <thead>
170
              <tr>
172
              <tr>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batch_extend_due_dates.tt (+2 lines)
Lines 58-63 Link Here
58
58
59
                    [% IF view == 'form' %]
59
                    [% IF view == 'form' %]
60
                        <form method="post" action="/cgi-bin/koha/tools/batch_extend_due_dates.pl" id="extend_due_dates_form">
60
                        <form method="post" action="/cgi-bin/koha/tools/batch_extend_due_dates.pl" id="extend_due_dates_form">
61
                            [% INCLUDE 'csrf-token.inc' %]
61
                            <fieldset class="rows">
62
                            <fieldset class="rows">
62
                                <legend>Checkout criteria:</legend>
63
                                <legend>Checkout criteria:</legend>
63
                                <ol>
64
                                <ol>
Lines 122-127 Link Here
122
                    [% ELSIF view == 'list' %]
123
                    [% ELSIF view == 'list' %]
123
                        [% IF checkouts.count %]
124
                        [% IF checkouts.count %]
124
                            <form action="/cgi-bin/koha/tools/batch_extend_due_dates.pl" method="post" id="process">
125
                            <form action="/cgi-bin/koha/tools/batch_extend_due_dates.pl" method="post" id="process">
126
                                [% INCLUDE 'csrf-token.inc' %]
125
                                <div class="page-section">
127
                                <div class="page-section">
126
                                    <div class="btn-toolbar selections-toolbar">
128
                                    <div class="btn-toolbar selections-toolbar">
127
                                        <a id="selectall" href="#"><i class="fa fa-check"></i> Select all</a>
129
                                        <a id="selectall" href="#"><i class="fa fa-check"></i> Select all</a>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batch_record_modification.tt (+2 lines)
Lines 71-76 Link Here
71
71
72
                    [% IF view == 'form' %]
72
                    [% IF view == 'form' %]
73
                        <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batch_record_modification.pl" id="record_ids_selection">
73
                        <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batch_record_modification.pl" id="record_ids_selection">
74
                            [% INCLUDE 'csrf-token.inc' %]
74
                            <fieldset class="rows">
75
                            <fieldset class="rows">
75
                                <legend>Record type</legend>
76
                                <legend>Record type</legend>
76
                                <ol class="radio">
77
                                <ol class="radio">
Lines 153-158 Link Here
153
                    [% ELSIF view == 'list' %]
154
                    [% ELSIF view == 'list' %]
154
                        [% IF records %]
155
                        [% IF records %]
155
                            <form action="/cgi-bin/koha/tools/batch_record_modification.pl" method="post">
156
                            <form action="/cgi-bin/koha/tools/batch_record_modification.pl" method="post">
157
                                [% INCLUDE 'csrf-token.inc' %]
156
                                <label for="marc_modification_template_id" class="required">Modify record using the following template: </label>
158
                                <label for="marc_modification_template_id" class="required">Modify record using the following template: </label>
157
                                <select name="marc_modification_template_id" id="marc_modification_template_id" required="required">
159
                                <select name="marc_modification_template_id" id="marc_modification_template_id" required="required">
158
                                    <option value="">Select a template</option>
160
                                    <option value="">Select a template</option>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/cleanborrowers.tt (+2 lines)
Lines 95-100 Link Here
95
</div>
95
</div>
96
<div id="step1">
96
<div id="step1">
97
    <form name="f1" id="delete_patrons_form" action="/cgi-bin/koha/tools/cleanborrowers.pl" method="post">
97
    <form name="f1" id="delete_patrons_form" action="/cgi-bin/koha/tools/cleanborrowers.pl" method="post">
98
        [% INCLUDE 'csrf-token.inc' %]
98
    <fieldset>
99
    <fieldset>
99
    <legend>Delete patrons</legend>
100
    <legend>Delete patrons</legend>
100
        <h3><input id="checkborrower" type="checkbox" name="checkbox" value="borrower" /><label for="checkborrower"> Verify you want to delete patrons</label></h3>
101
        <h3><input id="checkborrower" type="checkbox" name="checkbox" value="borrower" /><label for="checkborrower"> Verify you want to delete patrons</label></h3>
Lines 172-177 Link Here
172
<!-- STEP 2 START -->
173
<!-- STEP 2 START -->
173
<div id="step2">
174
<div id="step2">
174
        <form name="f2" action="/cgi-bin/koha/tools/cleanborrowers.pl" method="post">
175
        <form name="f2" action="/cgi-bin/koha/tools/cleanborrowers.pl" method="post">
176
            [% INCLUDE 'csrf-token.inc' %]
175
177
176
        <div class="dialog alert">
178
        <div class="dialog alert">
177
            <h3>Warning</h3>
179
            <h3>Warning</h3>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/csv-profiles.tt (+2 lines)
Lines 137-142 Link Here
137
    [% END %]
137
    [% END %]
138
138
139
    <form action="/cgi-bin/koha/tools/csv-profiles.pl" class="validated" method="post">
139
    <form action="/cgi-bin/koha/tools/csv-profiles.pl" class="validated" method="post">
140
        [% INCLUDE 'csrf-token.inc' %]
140
        <input type="hidden" name="op" value="add_validate" />
141
        <input type="hidden" name="op" value="add_validate" />
141
        <input type="hidden" name="export_format_id" value="[% csv_profile.export_format_id | html %]" />
142
        <input type="hidden" name="export_format_id" value="[% csv_profile.export_format_id | html %]" />
142
        <fieldset class="rows">
143
        <fieldset class="rows">
Lines 265-270 Link Here
265
        [% IF csv_profile %]
266
        [% IF csv_profile %]
266
            <h1>Delete CSV Profile "[% csv_profile.profile | html %]?"</h1>
267
            <h1>Delete CSV Profile "[% csv_profile.profile | html %]?"</h1>
267
            <form action="/cgi-bin/koha/tools/csv-profiles.pl" method="post">
268
            <form action="/cgi-bin/koha/tools/csv-profiles.pl" method="post">
269
                [% INCLUDE 'csrf-token.inc' %]
268
                <input type="hidden" name="op" value="delete_confirmed" />
270
                <input type="hidden" name="op" value="delete_confirmed" />
269
                <input type="hidden" name="export_format_id" value="[% csv_profile.export_format_id | html %]" />
271
                <input type="hidden" name="export_format_id" value="[% csv_profile.export_format_id | html %]" />
270
                <input type="submit" class="approve" value="Yes, delete" />
272
                <input type="submit" class="approve" value="Yes, delete" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/export.tt (+4 lines)
Lines 63-68 Link Here
63
            </p>
63
            </p>
64
64
65
            <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/export.pl">
65
            <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/export.pl">
66
                [% INCLUDE 'csrf-token.inc' %]
66
                <fieldset class="rows">
67
                <fieldset class="rows">
67
                    <legend> Select records to export </legend>
68
                    <legend> Select records to export </legend>
68
                    <ol>
69
                    <ol>
Lines 193-198 Link Here
193
194
194
        [% WRAPPER tab_panel tabname="auths" %]
195
        [% WRAPPER tab_panel tabname="auths" %]
195
            <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/export.pl">
196
            <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/export.pl">
197
                [% INCLUDE 'csrf-token.inc' %]
196
                <fieldset class="rows">
198
                <fieldset class="rows">
197
                    <legend> Select records to export </legend>
199
                    <legend> Select records to export </legend>
198
                    <ol>
200
                    <ol>
Lines 268-273 Link Here
268
        [% IF ( allow_db_export ) %]
270
        [% IF ( allow_db_export ) %]
269
            [% WRAPPER tab_panel tabname="db" %]
271
            [% WRAPPER tab_panel tabname="db" %]
270
                <form method="post" class="clearfix" action="/cgi-bin/koha/tools/export.pl">
272
                <form method="post" class="clearfix" action="/cgi-bin/koha/tools/export.pl">
273
                    [% INCLUDE 'csrf-token.inc' %]
271
                    <p><strong>Note : This export file will be very large, and is generated nightly.</strong></p>
274
                    <p><strong>Note : This export file will be very large, and is generated nightly.</strong></p>
272
                    <fieldset class="rows">
275
                    <fieldset class="rows">
273
                        <legend> Choose a file </legend>
276
                        <legend> Choose a file </legend>
Lines 294-299 Link Here
294
        [% IF ( allow_conf_export ) %]
297
        [% IF ( allow_conf_export ) %]
295
            [% WRAPPER tab_panel tabname="conf" %]
298
            [% WRAPPER tab_panel tabname="conf" %]
296
                <form method="post" class="clearfix" action="/cgi-bin/koha/tools/export.pl">
299
                <form method="post" class="clearfix" action="/cgi-bin/koha/tools/export.pl">
300
                    [% INCLUDE 'csrf-token.inc' %]
297
                    <p><strong>Note : This export file will be very large, and is generated nightly.</strong></p>
301
                    <p><strong>Note : This export file will be very large, and is generated nightly.</strong></p>
298
                    <fieldset class="rows">
302
                    <fieldset class="rows">
299
                        <legend> Choose a file </legend>
303
                        <legend> Choose a file </legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/holidays.tt (+3 lines)
Lines 41-46 Link Here
41
41
42
                            <div class="panel" id="showHoliday">
42
                            <div class="panel" id="showHoliday">
43
                                <form action="/cgi-bin/koha/tools/exceptionHolidays.pl" method="post">
43
                                <form action="/cgi-bin/koha/tools/exceptionHolidays.pl" method="post">
44
                                    [% INCLUDE 'csrf-token.inc' %]
44
                                    <input type="hidden" id="showHolidayType" name="showHolidayType" value="" />
45
                                    <input type="hidden" id="showHolidayType" name="showHolidayType" value="" />
45
                                    <fieldset class="brief">
46
                                    <fieldset class="brief">
46
                                        <h3>Edit this holiday</h3>
47
                                        <h3>Edit this holiday</h3>
Lines 137-142 Link Here
137
                            <!-- Panel to deal with new holidays -->
138
                            <!-- Panel to deal with new holidays -->
138
                            <div class="panel" id="newHoliday">
139
                            <div class="panel" id="newHoliday">
139
                                <form action="/cgi-bin/koha/tools/newHolidays.pl" method="post">
140
                                <form action="/cgi-bin/koha/tools/newHolidays.pl" method="post">
141
                                    [% INCLUDE 'csrf-token.inc' %]
140
                                    <fieldset class="brief">
142
                                    <fieldset class="brief">
141
                                        <h3>Add new holiday</h3>
143
                                        <h3>Add new holiday</h3>
142
                                        <ol>
144
                                        <ol>
Lines 228-233 Link Here
228
                            </div>
230
                            </div>
229
                            <div style="margin-top: 2em;">
231
                            <div style="margin-top: 2em;">
230
                                <form action="copy-holidays.pl" method="post">
232
                                <form action="copy-holidays.pl" method="post">
233
                                    [% INCLUDE 'csrf-token.inc' %]
231
                                    <input type="hidden" name="from_branchcode" value="[% branch | html %]" />
234
                                    <input type="hidden" name="from_branchcode" value="[% branch | html %]" />
232
                                    <label for="branchcode">Copy holidays to:</label>
235
                                    <label for="branchcode">Copy holidays to:</label>
233
                                    <select id="branchcode" name="branchcode">
236
                                    <select id="branchcode" name="branchcode">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/import_borrowers.tt (+1 lines)
Lines 200-205 Link Here
200
    </ul>
200
    </ul>
201
201
202
    <form method="post" action="[% SCRIPT_NAME | html %]" enctype="multipart/form-data">
202
    <form method="post" action="[% SCRIPT_NAME | html %]" enctype="multipart/form-data">
203
        [% INCLUDE 'csrf-token.inc' %]
203
        <fieldset class="rows">
204
        <fieldset class="rows">
204
            <legend>Import into the borrowers table</legend>
205
            <legend>Import into the borrowers table</legend>
205
206
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/inventory.tt (+2 lines)
Lines 60-65 Link Here
60
       [% UNLESS op %]
60
       [% UNLESS op %]
61
61
62
    <form method="post" id="inventory_form" action="/cgi-bin/koha/tools/inventory.pl" enctype="multipart/form-data">
62
    <form method="post" id="inventory_form" action="/cgi-bin/koha/tools/inventory.pl" enctype="multipart/form-data">
63
        [% INCLUDE 'csrf-token.inc' %]
63
        <fieldset class="rows">
64
        <fieldset class="rows">
64
          <legend>Use a barcode file</legend>
65
          <legend>Use a barcode file</legend>
65
          <ol>
66
          <ol>
Lines 235-240 Link Here
235
    [% END %]
236
    [% END %]
236
    [% IF (op) %]
237
    [% IF (op) %]
237
    <form method="post" action="/cgi-bin/koha/tools/inventory.pl">
238
    <form method="post" action="/cgi-bin/koha/tools/inventory.pl">
239
        [% INCLUDE 'csrf-token.inc' %]
238
    <input type="hidden" name="minlocation" value="[% minlocation | html %]" />
240
    <input type="hidden" name="minlocation" value="[% minlocation | html %]" />
239
    <input type="hidden" name="maxlocation" value="[% maxlocation | html %]" />
241
    <input type="hidden" name="maxlocation" value="[% maxlocation | html %]" />
240
    <input type="hidden" name="location" value="[% location | html %]" />
242
    <input type="hidden" name="location" value="[% location | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/letter.tt (+5 lines)
Lines 224-229 Link Here
224
                                            <td class="actions">
224
                                            <td class="actions">
225
                                                [% IF !independant_branch || !lette.branchcode %]
225
                                                [% IF !independant_branch || !lette.branchcode %]
226
                                                    <form method="post" action="/cgi-bin/koha/tools/letter.pl">
226
                                                    <form method="post" action="/cgi-bin/koha/tools/letter.pl">
227
                                                        [% INCLUDE 'csrf-token.inc' %]
227
                                                        <input type="hidden" name="op" value="copy_form" />
228
                                                        <input type="hidden" name="op" value="copy_form" />
228
                                                        <input type="hidden" name="oldbranchcode" value="[% lette.branchcode | html %]" />
229
                                                        <input type="hidden" name="oldbranchcode" value="[% lette.branchcode | html %]" />
229
                                                        <input type="hidden" name="module" value="[% lette.module | html %]" />
230
                                                        <input type="hidden" name="module" value="[% lette.module | html %]" />
Lines 284-289 Link Here
284
                    </div> <!-- /#toolbar -->
285
                    </div> <!-- /#toolbar -->
285
286
286
                    <form id="add_notice" name="Aform" method="post" enctype="multipart/form-data" class="validate">
287
                    <form id="add_notice" name="Aform" method="post" enctype="multipart/form-data" class="validate">
288
                        [% INCLUDE 'csrf-token.inc' %]
287
                        [% IF add_form %]
289
                        [% IF add_form %]
288
                            <input type="hidden" name="op" id="op" value="add_validate" />
290
                            <input type="hidden" name="op" id="op" value="add_validate" />
289
                        [% ELSE %]
291
                        [% ELSE %]
Lines 468-473 Link Here
468
                [% IF ( add_validate or copy_validate) %]
470
                [% IF ( add_validate or copy_validate) %]
469
                    Data recorded
471
                    Data recorded
470
                    <form action="[% action | html %]" method="post">
472
                    <form action="[% action | html %]" method="post">
473
                        [% INCLUDE 'csrf-token.inc' %]
471
                        <input type="submit" class="btn btn-primary" value="OK" />
474
                        <input type="submit" class="btn btn-primary" value="OK" />
472
                    </form>
475
                    </form>
473
                [% END %]
476
                [% END %]
Lines 492-497 Link Here
492
                            </tr>
495
                            </tr>
493
                        </table>
496
                        </table>
494
                        <form action="[% action | html %]" method="post">
497
                        <form action="[% action | html %]" method="post">
498
                            [% INCLUDE 'csrf-token.inc' %]
495
                            <input type="hidden" name="op" value="delete_confirmed">
499
                            <input type="hidden" name="op" value="delete_confirmed">
496
                            <input type="hidden" name="branchcode" value="[% letter.branchcode | html %]" />
500
                            <input type="hidden" name="branchcode" value="[% letter.branchcode | html %]" />
497
                            <input type="hidden" name="code" value="[% letter.code | html %]" />
501
                            <input type="hidden" name="code" value="[% letter.code | html %]" />
Lines 508-513 Link Here
508
                [% IF ( delete_confirmed ) %]
512
                [% IF ( delete_confirmed ) %]
509
                    <span>Data deleted</span>
513
                    <span>Data deleted</span>
510
                    <form action="[% action | html %]" method="post">
514
                    <form action="[% action | html %]" method="post">
515
                        [% INCLUDE 'csrf-token.inc' %]
511
                    <input type="submit" class="btn btn-primary" value="OK" />
516
                    <input type="submit" class="btn btn-primary" value="OK" />
512
                    </form>
517
                    </form>
513
                [% END %]
518
                [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/manage-marc-import.tt (+5 lines)
Lines 107-112 Link Here
107
                    [% IF ( batch_info ) %]
107
                    [% IF ( batch_info ) %]
108
                        [% IF ( can_commit ) %]
108
                        [% IF ( can_commit ) %]
109
                            <form method="post">
109
                            <form method="post">
110
                                [% INCLUDE 'csrf-token.inc' %]
110
                                <input type="hidden" name="op" value="redo-matching" />
111
                                <input type="hidden" name="op" value="redo-matching" />
111
                                <input type="hidden" name="import_batch_id" value="[% import_batch_id | html %]" />
112
                                <input type="hidden" name="import_batch_id" value="[% import_batch_id | html %]" />
112
                                <input type="hidden" name="current_matcher_id" value="[% current_matcher_id | html %]" />
113
                                <input type="hidden" name="current_matcher_id" value="[% current_matcher_id | html %]" />
Lines 255-260 Link Here
255
                        <div>
256
                        <div>
256
                            [% IF ( can_commit ) %]
257
                            [% IF ( can_commit ) %]
257
                                <form method="post" id="import_batch_form">
258
                                <form method="post" id="import_batch_form">
259
                                    [% INCLUDE 'csrf-token.inc' %]
258
                                    <input type="hidden" name="op" value="commit-batch" />
260
                                    <input type="hidden" name="op" value="commit-batch" />
259
                                    <input type="hidden" name="import_batch_id" value="[% import_batch_id | html %]" />
261
                                    <input type="hidden" name="import_batch_id" value="[% import_batch_id | html %]" />
260
                                    [% IF ( record_type != 'auth' ) %]
262
                                    [% IF ( record_type != 'auth' ) %]
Lines 291-296 Link Here
291
                            [% END # /IF can_commit %]
293
                            [% END # /IF can_commit %]
292
                            [% IF ( can_revert ) %]
294
                            [% IF ( can_revert ) %]
293
                                <form method="post" id="revert_batch_form">
295
                                <form method="post" id="revert_batch_form">
296
                                    [% INCLUDE 'csrf-token.inc' %]
294
                                    <input type="hidden" name="op" value="revert-batch" />
297
                                    <input type="hidden" name="op" value="revert-batch" />
295
                                    <input type="hidden" name="import_batch_id" value="[% import_batch_id | html %]" />
298
                                    <input type="hidden" name="import_batch_id" value="[% import_batch_id | html %]" />
296
                                    <fieldset class="action"><input type="submit" class="button" name="mainformsubmit" value="Undo import into catalog" /></fieldset>
299
                                    <fieldset class="action"><input type="submit" class="button" name="mainformsubmit" value="Undo import into catalog" /></fieldset>
Lines 358-369 Link Here
358
                                            <td class="actions">
361
                                            <td class="actions">
359
                                                [% IF ( batch_lis.can_clean ) %]
362
                                                [% IF ( batch_lis.can_clean ) %]
360
                                                    <form method="post" name="clean_batch_[% batch_lis.import_batch_id | html %]" id="clean_batch_[% batch_lis.import_batch_id | html %]" class="batch_form batch_clean">
363
                                                    <form method="post" name="clean_batch_[% batch_lis.import_batch_id | html %]" id="clean_batch_[% batch_lis.import_batch_id | html %]" class="batch_form batch_clean">
364
                                                        [% INCLUDE 'csrf-token.inc' %]
361
                                                        <input type="hidden" name="import_batch_id" value="[% batch_lis.import_batch_id | html %]" />
365
                                                        <input type="hidden" name="import_batch_id" value="[% batch_lis.import_batch_id | html %]" />
362
                                                        <input type="hidden" name="op" value="clean-batch" />
366
                                                        <input type="hidden" name="op" value="clean-batch" />
363
                                                        <button type="submit" class="btn btn-default btn-xs"><i class="fa fa-eraser"></i> Clean</button>
367
                                                        <button type="submit" class="btn btn-default btn-xs"><i class="fa fa-eraser"></i> Clean</button>
364
                                                    </form>
368
                                                    </form>
365
                                                [% ELSIF ( batch_lis.import_status == 'cleaned' ) %]
369
                                                [% ELSIF ( batch_lis.import_status == 'cleaned' ) %]
366
                                                    <form method="post" action="/cgi-bin/koha/tools/manage-marc-import.pl" name="delete_batch_[% batch_lis.import_batch_id | html %]" id="delete_batch_[% batch_lis.import_batch_id | html %]" class="batch_form batch_delete">
370
                                                    <form method="post" action="/cgi-bin/koha/tools/manage-marc-import.pl" name="delete_batch_[% batch_lis.import_batch_id | html %]" id="delete_batch_[% batch_lis.import_batch_id | html %]" class="batch_form batch_delete">
371
                                                        [% INCLUDE 'csrf-token.inc' %]
367
                                                        <input type="hidden" name="import_batch_id" value="[% batch_lis.import_batch_id | html %]" />
372
                                                        <input type="hidden" name="import_batch_id" value="[% batch_lis.import_batch_id | html %]" />
368
                                                        <input type="hidden" name="op" value="delete-batch" />
373
                                                        <input type="hidden" name="op" value="delete-batch" />
369
                                                        <button type="submit" class="btn btn-default btn-xs"><i class="fa fa-trash-can"></i> Delete</button>
374
                                                        <button type="submit" class="btn btn-default btn-xs"><i class="fa fa-trash-can"></i> Delete</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/marc_modification_templates.tt (+2 lines)
Lines 206-211 Link Here
206
                    [% END # /IF ActionsLoop %]
206
                    [% END # /IF ActionsLoop %]
207
207
208
                    <form method="post" action="/cgi-bin/koha/tools/marc_modification_templates.pl" id="add_action" >
208
                    <form method="post" action="/cgi-bin/koha/tools/marc_modification_templates.pl" id="add_action" >
209
                        [% INCLUDE 'csrf-token.inc' %]
209
                        <a name="modaction"></a>
210
                        <a name="modaction"></a>
210
                        <fieldset>
211
                        <fieldset>
211
                            <legend id="modaction_legend">Add a new action</legend>
212
                            <legend id="modaction_legend">Add a new action</legend>
Lines 316-321 Link Here
316
                    <h2 id="LabelcreateTemplate">Create a new template</h2>
317
                    <h2 id="LabelcreateTemplate">Create a new template</h2>
317
                </div>
318
                </div>
318
                <form method="post" action="/cgi-bin/koha/tools/marc_modification_templates.pl" id="add_template" class="validated">
319
                <form method="post" action="/cgi-bin/koha/tools/marc_modification_templates.pl" id="add_template" class="validated">
320
                    [% INCLUDE 'csrf-token.inc' %]
319
                    <div class="modal-body">
321
                    <div class="modal-body">
320
                        <fieldset>
322
                        <fieldset>
321
                            <p>
323
                            <p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/modborrowers.tt (+2 lines)
Lines 35-40 Link Here
35
                [% IF ( op == 'show_form' ) %]
35
                [% IF ( op == 'show_form' ) %]
36
                    <h1>Batch patron modification</h1>
36
                    <h1>Batch patron modification</h1>
37
                    <form id="patron_batchmod_form" method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/modborrowers.pl">
37
                    <form id="patron_batchmod_form" method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/modborrowers.pl">
38
                        [% INCLUDE 'csrf-token.inc' %]
38
                        <input type="hidden" name="op" value="show" />
39
                        <input type="hidden" name="op" value="show" />
39
40
40
                        [% WRAPPER tabs id= "batch_patron_options" %]
41
                        [% WRAPPER tabs id= "batch_patron_options" %]
Lines 194-199 Link Here
194
195
195
                    [% IF ( op == 'show' ) %]
196
                    [% IF ( op == 'show' ) %]
196
                    <form name="f" action="modborrowers.pl" method="post">
197
                    <form name="f" action="modborrowers.pl" method="post">
198
                        [% INCLUDE 'csrf-token.inc' %]
197
                        <input type="hidden" name="op" value="do" />
199
                        <input type="hidden" name="op" value="do" />
198
                        [% IF ( borrowers ) %]
200
                        [% IF ( borrowers ) %]
199
                            <div class="btn-toolbar selections-toolbar"><a id="selectallbutton" href="#"><i class="fa fa-check"></i> Select all</a> | <a id="clearallbutton" href="#"><i class="fa fa-times"></i> Clear all</a></div>
201
                            <div class="btn-toolbar selections-toolbar"><a id="selectallbutton" href="#"><i class="fa fa-check"></i> Select all</a> | <a id="clearallbutton" href="#"><i class="fa fa-times"></i> Clear all</a></div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/overduerules.tt (+2 lines)
Lines 37-42 Link Here
37
            <p>Columns must be filled left to right: if the first column is blank, other columns will be ignored. </p>
37
            <p>Columns must be filled left to right: if the first column is blank, other columns will be ignored. </p>
38
        </div>
38
        </div>
39
            <form method="post" action="/cgi-bin/koha/tools/overduerules.pl" id="selectlibrary">
39
            <form method="post" action="/cgi-bin/koha/tools/overduerules.pl" id="selectlibrary">
40
                [% INCLUDE 'csrf-token.inc' %]
40
            <label for="branch">Select a library:</label>
41
            <label for="branch">Select a library:</label>
41
                <select id="branch" name="branch">
42
                <select id="branch" name="branch">
42
                    <option value="">Default</option>
43
                    <option value="">Default</option>
Lines 63-68 Link Here
63
            [% END %]
64
            [% END %]
64
            [% IF ( table ) %]
65
            [% IF ( table ) %]
65
                <form method="post" action="/cgi-bin/koha/tools/overduerules.pl">
66
                <form method="post" action="/cgi-bin/koha/tools/overduerules.pl">
67
                    [% INCLUDE 'csrf-token.inc' %]
66
                    <input type="hidden" name="op" value="save" />
68
                    <input type="hidden" name="op" value="save" />
67
                    <input type="hidden" name="branch" value="[% branch | html %]" />
69
                    <input type="hidden" name="branch" value="[% branch | html %]" />
68
                    <h3>Rules for overdue actions: [% IF ( branch ) %][% Branches.GetName( branch ) | html %][% ELSE %] default library [% END %]</h3>
70
                    <h3>Rules for overdue actions: [% IF ( branch ) %][% Branches.GetName( branch ) | html %][% ELSE %] default library [% END %]</h3>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/picture-upload.tt (+1 lines)
Lines 122-127 Link Here
122
                </div>
122
                </div>
123
                [% END %]
123
                [% END %]
124
            <form method="post" action="/cgi-bin/koha/tools/picture-upload.pl" enctype="multipart/form-data" id="upload_form">
124
            <form method="post" action="/cgi-bin/koha/tools/picture-upload.pl" enctype="multipart/form-data" id="upload_form">
125
                [% INCLUDE 'csrf-token.inc' %]
125
                <fieldset class="rows">
126
                <fieldset class="rows">
126
                    <p><strong>NOTE:</strong> Only PNG, GIF, JPEG, XPM formats are supported. Maximum image size is 2MB.</p>
127
                    <p><strong>NOTE:</strong> Only PNG, GIF, JPEG, XPM formats are supported. Maximum image size is 2MB.</p>
127
                        <ol class="radio">
128
                        <ol class="radio">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/problem-reports.tt (+1 lines)
Lines 50-55 Link Here
50
50
51
            [% IF ( problem_reports.count ) %]
51
            [% IF ( problem_reports.count ) %]
52
                <form id="mark_selected" method="post" action="/cgi-bin/koha/tools/problem-reports.pl">
52
                <form id="mark_selected" method="post" action="/cgi-bin/koha/tools/problem-reports.pl">
53
                    [% INCLUDE 'csrf-token.inc' %]
53
                    <div id="toolbar" class="btn-toolbar">
54
                    <div id="toolbar" class="btn-toolbar">
54
                        <button type="submit" class="btn btn-default markviewed" name="mark_selected-viewed" value="viewed" disabled="disabled"><i class="fa-solid fa-eye"></i> Mark viewed</button>
55
                        <button type="submit" class="btn btn-default markviewed" name="mark_selected-viewed" value="viewed" disabled="disabled"><i class="fa-solid fa-eye"></i> Mark viewed</button>
55
                        <button type="submit" class="btn btn-default markclosed" name="mark_selected-closed" value="closed" disabled="disabled"><i class="fa fa-times-circle"></i> Mark closed</button>
56
                        <button type="submit" class="btn btn-default markclosed" name="mark_selected-closed" value="closed" disabled="disabled"><i class="fa fa-times-circle"></i> Mark closed</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/quotes.tt (+2 lines)
Lines 58-63 Link Here
58
[% IF op == 'add_form' %]
58
[% IF op == 'add_form' %]
59
    <h1>[% IF quote %]Modify quote[% ELSE %]New quote[% END %]</h1>
59
    <h1>[% IF quote %]Modify quote[% ELSE %]New quote[% END %]</h1>
60
    <form action="/cgi-bin/koha/tools/quotes.pl" id="Aform" name="Aform" class="validated" method="post">
60
    <form action="/cgi-bin/koha/tools/quotes.pl" id="Aform" name="Aform" class="validated" method="post">
61
        [% INCLUDE 'csrf-token.inc' %]
61
        <fieldset class="rows">
62
        <fieldset class="rows">
62
            <input type="hidden" name="op" value="add_validate" />
63
            <input type="hidden" name="op" value="add_validate" />
63
            <ol>
64
            <ol>
Lines 84-89 Link Here
84
[% IF op == 'delete_confirm' %]
85
[% IF op == 'delete_confirm' %]
85
    <div class="dialog alert">
86
    <div class="dialog alert">
86
        <form action="/cgi-bin/koha/tools/quotes.pl" method="post">
87
        <form action="/cgi-bin/koha/tools/quotes.pl" method="post">
88
            [% INCLUDE 'csrf-token.inc' %]
87
            <h1>Are you sure you want to delete the following quote?</h1>
89
            <h1>Are you sure you want to delete the following quote?</h1>
88
            [% quote.source | html %] - [% quote.text | html %]
90
            [% quote.source | html %] - [% quote.text | html %]
89
            <input type="hidden" name="op" value="delete_confirmed" />
91
            <input type="hidden" name="op" value="delete_confirmed" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/scheduler.tt (+2 lines)
Lines 34-39 Link Here
34
[% END %]
34
[% END %]
35
35
36
<form name="form1" action="scheduler.pl" method="post">
36
<form name="form1" action="scheduler.pl" method="post">
37
    [% INCLUDE 'csrf-token.inc' %]
37
<input type="hidden" name="mode" value="job_add" />
38
<input type="hidden" name="mode" value="job_add" />
38
39
39
<fieldset class="rows">
40
<fieldset class="rows">
Lines 83-88 Link Here
83
</tr>
84
</tr>
84
[% FOREACH JOB IN JOBS %]
85
[% FOREACH JOB IN JOBS %]
85
<form action="scheduler.pl" method="post">
86
<form action="scheduler.pl" method="post">
87
    [% INCLUDE 'csrf-token.inc' %]
86
<input type="hidden" name="mode" value="job_change" />
88
<input type="hidden" name="mode" value="job_change" />
87
89
88
<tr>
90
<tr>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/stage-marc-import.tt (+2 lines)
Lines 79-84 Link Here
79
    <li>You can enter a name for this import. It may be useful, when creating a record, to remember where the suggested MARC data comes from!</li>
79
    <li>You can enter a name for this import. It may be useful, when creating a record, to remember where the suggested MARC data comes from!</li>
80
</ul>
80
</ul>
81
<form method="post" id="uploadfile" enctype="multipart/form-data">
81
<form method="post" id="uploadfile" enctype="multipart/form-data">
82
    [% INCLUDE 'csrf-token.inc' %]
82
<fieldset class="rows" id="uploadform">
83
<fieldset class="rows" id="uploadform">
83
<legend>Upload a file to stage</legend>
84
<legend>Upload a file to stage</legend>
84
<ol>
85
<ol>
Lines 119-124 Link Here
119
</fieldset>
120
</fieldset>
120
121
121
    <form method="post" id="processfile" enctype="multipart/form-data">
122
    <form method="post" id="processfile" enctype="multipart/form-data">
123
        [% INCLUDE 'csrf-token.inc' %]
122
[% IF basketno && booksellerid %]
124
[% IF basketno && booksellerid %]
123
    <input type="hidden" name="basketno" id="basketno" value="[% basketno | html %]" />
125
    <input type="hidden" name="basketno" id="basketno" value="[% basketno | html %]" />
124
    <input type="hidden" name="booksellerid" id="booksellerid" value="[% booksellerid | html %]" />
126
    <input type="hidden" name="booksellerid" id="booksellerid" value="[% booksellerid | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/stockrotation.tt (+5 lines)
Lines 151-156 Link Here
151
                    [% END %]
151
                    [% END %]
152
152
153
                    <form id="rota_form" method="post" enctype="multipart/form-data" class="validated">
153
                    <form id="rota_form" method="post" enctype="multipart/form-data" class="validated">
154
                        [% INCLUDE 'csrf-token.inc' %]
154
                        <fieldset class="rows">
155
                        <fieldset class="rows">
155
                            <ol>
156
                            <ol>
156
                                <li>
157
                                <li>
Lines 212-217 Link Here
212
                    <!-- Add stage modal -->
213
                    <!-- Add stage modal -->
213
                    <div class="modal" id="addStageModal" tabindex="-1" role="dialog" aria-labelledby="addStageLabel">
214
                    <div class="modal" id="addStageModal" tabindex="-1" role="dialog" aria-labelledby="addStageLabel">
214
                        <form id="stage_form" method="post" enctype="multipart/form-data" class="validated">
215
                        <form id="stage_form" method="post" enctype="multipart/form-data" class="validated">
216
                            [% INCLUDE 'csrf-token.inc' %]
215
                            <div class="modal-dialog" role="document">
217
                            <div class="modal-dialog" role="document">
216
                                <div class="modal-content">
218
                                <div class="modal-content">
217
                                    <div class="modal-header">
219
                                    <div class="modal-header">
Lines 311-316 Link Here
311
                    [% END %]
313
                    [% END %]
312
314
313
                    <form id="stage_form" method="post" enctype="multipart/form-data" class="validated">
315
                    <form id="stage_form" method="post" enctype="multipart/form-data" class="validated">
316
                        [% INCLUDE 'csrf-token.inc' %]
314
                        <fieldset class="rows">
317
                        <fieldset class="rows">
315
                            <ol>
318
                            <ol>
316
                                <li>
319
                                <li>
Lines 402-407 Link Here
402
                    <!-- Add items modal -->
405
                    <!-- Add items modal -->
403
                    <div class="modal" id="addItemsModal" tabindex="-1" role="dialog" aria-labelledby="addItemsLabel">
406
                    <div class="modal" id="addItemsModal" tabindex="-1" role="dialog" aria-labelledby="addItemsLabel">
404
                        <form id="add_rota_item_form" method="post" enctype="multipart/form-data" class="validated">
407
                        <form id="add_rota_item_form" method="post" enctype="multipart/form-data" class="validated">
408
                            [% INCLUDE 'csrf-token.inc' %]
405
                            <div class="modal-dialog" role="document">
409
                            <div class="modal-dialog" role="document">
406
                                <div class="modal-content">
410
                                <div class="modal-content">
407
                                    <div class="modal-header">
411
                                    <div class="modal-header">
Lines 564-569 Link Here
564
568
565
                    [% IF barcode_status.on_other.size > 0 %]
569
                    [% IF barcode_status.on_other.size > 0 %]
566
                        <form id="add_rota_item_form" method="post" enctype="multipart/form-data">
570
                        <form id="add_rota_item_form" method="post" enctype="multipart/form-data">
571
                            [% INCLUDE 'csrf-token.inc' %]
567
                            <fieldset>
572
                            <fieldset>
568
                                <legend>Select items to move to this rota:</legend>
573
                                <legend>Select items to move to this rota:</legend>
569
                                [% FOREACH item_on_other IN barcode_status.on_other %]
574
                                [% FOREACH item_on_other IN barcode_status.on_other %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/upload-images.tt (+2 lines)
Lines 183-188 Link Here
183
                    [% END %]
183
                    [% END %]
184
184
185
                        <form method="post" action="/cgi-bin/koha/tools/upload-cover-image.pl" id="uploadfile" enctype="multipart/form-data">
185
                        <form method="post" action="/cgi-bin/koha/tools/upload-cover-image.pl" id="uploadfile" enctype="multipart/form-data">
186
                            [% INCLUDE 'csrf-token.inc' %]
186
                            <fieldset class="rows" >
187
                            <fieldset class="rows" >
187
                                <div id="fileuploadform">
188
                                <div id="fileuploadform">
188
                                    <label for="fileToUpload">Select the file to upload: </label>
189
                                    <label for="fileToUpload">Select the file to upload: </label>
Lines 206-211 Link Here
206
                        </form> <!-- /#uploadfile -->
207
                        </form> <!-- /#uploadfile -->
207
208
208
                        <form method="post" id="processfile" action="/cgi-bin/koha/tools/upload-cover-image.pl" enctype="multipart/form-data">
209
                        <form method="post" id="processfile" action="/cgi-bin/koha/tools/upload-cover-image.pl" enctype="multipart/form-data">
210
                            [% INCLUDE 'csrf-token.inc' %]
209
                            <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
211
                            <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
210
212
211
                            [% IF itemnumber %]
213
                            [% IF itemnumber %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/upload.tt (+4 lines)
Lines 23-28 Link Here
23
23
24
[% BLOCK form_new %]
24
[% BLOCK form_new %]
25
    <form method="post" action="/cgi-bin/koha/tools/upload.pl" id="uploadfile" enctype="multipart/form-data">
25
    <form method="post" action="/cgi-bin/koha/tools/upload.pl" id="uploadfile" enctype="multipart/form-data">
26
        [% INCLUDE 'csrf-token.inc' %]
26
        [% PROCESS plugin_pars %]
27
        [% PROCESS plugin_pars %]
27
        <fieldset class="rows" id="uploadform">
28
        <fieldset class="rows" id="uploadform">
28
        <legend>Upload new files</legend>
29
        <legend>Upload new files</legend>
Lines 91-96 Link Here
91
[% BLOCK form_browse %]
92
[% BLOCK form_browse %]
92
    [% IF uploadcategories %]
93
    [% IF uploadcategories %]
93
    <form method="post" id="browsefile" action="/cgi-bin/koha/tools/upload.pl">
94
    <form method="post" id="browsefile" action="/cgi-bin/koha/tools/upload.pl">
95
        [% INCLUDE 'csrf-token.inc' %]
94
        [% PROCESS plugin_pars %]
96
        [% PROCESS plugin_pars %]
95
        <input type="hidden" name="op" value="browse"/>
97
        <input type="hidden" name="op" value="browse"/>
96
        <fieldset class="brief">
98
        <fieldset class="brief">
Lines 120-125 Link Here
120
122
121
[% BLOCK form_search %]
123
[% BLOCK form_search %]
122
    <form method="post" id="searchfile" action="/cgi-bin/koha/tools/upload.pl">
124
    <form method="post" id="searchfile" action="/cgi-bin/koha/tools/upload.pl">
125
        [% INCLUDE 'csrf-token.inc' %]
123
        [% PROCESS plugin_pars %]
126
        [% PROCESS plugin_pars %]
124
        <input type="hidden" name="op" value="search"/>
127
        <input type="hidden" name="op" value="search"/>
125
        <fieldset class="brief">
128
        <fieldset class="brief">
Lines 139-144 Link Here
139
142
140
[% BLOCK submitter %]
143
[% BLOCK submitter %]
141
    <form id="submitter" style="display:none;" method="post">
144
    <form id="submitter" style="display:none;" method="post">
145
        [% INCLUDE 'csrf-token.inc' %]
142
        [% PROCESS plugin_pars %]
146
        [% PROCESS plugin_pars %]
143
        <input type="hidden" name="op" id="op" value=""/>
147
        <input type="hidden" name="op" id="op" value=""/>
144
        <input type="hidden" name="id" id="id" value="" />
148
        <input type="hidden" name="id" id="id" value="" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/viewlog.tt (+1 lines)
Lines 194-199 Link Here
194
194
195
				<h1>Browse system logs</h1>
195
				<h1>Browse system logs</h1>
196
				<form method="post" action="/cgi-bin/koha/tools/viewlog.pl">
196
				<form method="post" action="/cgi-bin/koha/tools/viewlog.pl">
197
				    [% INCLUDE 'csrf-token.inc' %]
197
					[% IF ( do_it ) %]
198
					[% IF ( do_it ) %]
198
						<input type="hidden" name="do_it" value="[% do_it | html %]" />
199
						<input type="hidden" name="do_it" value="[% do_it | html %]" />
199
					[% END %]
200
					[% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/addbybiblionumber.tt (+1 lines)
Lines 29-34 Link Here
29
                </ul>
29
                </ul>
30
30
31
        <form name="f1" action="/cgi-bin/koha/virtualshelves/addbybiblionumber.pl" method="post">
31
        <form name="f1" action="/cgi-bin/koha/virtualshelves/addbybiblionumber.pl" method="post">
32
            [% INCLUDE 'csrf-token.inc' %]
32
                        [% FOREACH biblio IN biblios %] <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]" />[% END %]
33
                        [% FOREACH biblio IN biblios %] <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]" />[% END %]
33
            <input type="hidden" name="confirmed" value="1" />
34
            <input type="hidden" name="confirmed" value="1" />
34
            [% IF ( shelfnumber ) %]<input type="hidden" name="shelfnumber" value="[% shelfnumber | html %]" />[% END %]
35
            [% IF ( shelfnumber ) %]<input type="hidden" name="shelfnumber" value="[% shelfnumber | html %]" />[% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/downloadshelf.tt (+1 lines)
Lines 24-29 Link Here
24
[% ELSE %]
24
[% ELSE %]
25
<div id="export" class="detailtagcell">    <form method="post" action="/cgi-bin/koha/virtualshelves/downloadshelf.pl">
25
<div id="export" class="detailtagcell">    <form method="post" action="/cgi-bin/koha/virtualshelves/downloadshelf.pl">
26
<form method="post" action="/cgi-bin/koha/virtualshelves/downloadshelf.pl">
26
<form method="post" action="/cgi-bin/koha/virtualshelves/downloadshelf.pl">
27
    [% INCLUDE 'csrf-token.inc' %]
27
	<fieldset class="rows">
28
	<fieldset class="rows">
28
        <legend><h1>Download list</h1></legend>
29
        <legend><h1>Download list</h1></legend>
29
	<ol><li>
30
	<ol><li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/sendshelfform.tt (+1 lines)
Lines 18-23 Link Here
18
[% ELSE %]
18
[% ELSE %]
19
19
20
<form action="/cgi-bin/koha/virtualshelves/sendshelf.pl" method="post">
20
<form action="/cgi-bin/koha/virtualshelves/sendshelf.pl" method="post">
21
    [% INCLUDE 'csrf-token.inc' %]
21
22
22
<fieldset class="rows"> 
23
<fieldset class="rows"> 
23
    <legend><h1>Sending your list</h1></legend>
24
    <legend><h1>Sending your list</h1></legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/shelves.tt (+4 lines)
Lines 204-209 Link Here
204
                <h1>Transfer ownership of public list [% shelf.shelfname | html %]</h1>
204
                <h1>Transfer ownership of public list [% shelf.shelfname | html %]</h1>
205
205
206
                <form action="/cgi-bin/koha/virtualshelves/shelves.pl" id="transferform" method="post">
206
                <form action="/cgi-bin/koha/virtualshelves/shelves.pl" id="transferform" method="post">
207
                    [% INCLUDE 'csrf-token.inc' %]
207
                    [% INCLUDE 'csrf-token.inc' %]
208
                    [% INCLUDE 'csrf-token.inc' %]
208
                    <fieldset>
209
                    <fieldset>
209
                        <input type="hidden" name="op" value="transfer" />
210
                        <input type="hidden" name="op" value="transfer" />
Lines 239-244 Link Here
239
                    [% IF ( contents.count ) %]<p>This list contains [% contents.count | html %] titles</p>[% END %]
240
                    [% IF ( contents.count ) %]<p>This list contains [% contents.count | html %] titles</p>[% END %]
240
                    <div class="pages">[% pagination_bar | $raw %]</div>
241
                    <div class="pages">[% pagination_bar | $raw %]</div>
241
                    <form action="/cgi-bin/koha/virtualshelves/shelves.pl" id="listform" method="post">
242
                    <form action="/cgi-bin/koha/virtualshelves/shelves.pl" id="listform" method="post">
243
                        [% INCLUDE 'csrf-token.inc' %]
242
                        [% INCLUDE 'csrf-token.inc' %]
244
                        [% INCLUDE 'csrf-token.inc' %]
243
                        <input type="hidden" name="op" value="remove_biblios" />
245
                        <input type="hidden" name="op" value="remove_biblios" />
244
                        <input type="hidden" name="referer" value="view" />
246
                        <input type="hidden" name="referer" value="view" />
Lines 391-396 Link Here
391
            [% IF op == 'add_form' OR op == 'edit_form' %]
393
            [% IF op == 'add_form' OR op == 'edit_form' %]
392
394
393
                <form method="post" action="/cgi-bin/koha/virtualshelves/shelves.pl" class="validated">
395
                <form method="post" action="/cgi-bin/koha/virtualshelves/shelves.pl" class="validated">
396
                    [% INCLUDE 'csrf-token.inc' %]
394
                    [% INCLUDE 'csrf-token.inc' %]
397
                    [% INCLUDE 'csrf-token.inc' %]
395
                    <fieldset class="rows">
398
                    <fieldset class="rows">
396
                        [% IF op == 'add_form' %]
399
                        [% IF op == 'add_form' %]
Lines 549-554 Link Here
549
    <div class="modal" id="addToList" tabindex="-1" role="dialog" aria-labelledby="addToListLabel">
552
    <div class="modal" id="addToList" tabindex="-1" role="dialog" aria-labelledby="addToListLabel">
550
        <div class="modal-dialog" role="document">
553
        <div class="modal-dialog" role="document">
551
            <form action="/cgi-bin/koha/virtualshelves/shelves.pl" method="post">
554
            <form action="/cgi-bin/koha/virtualshelves/shelves.pl" method="post">
555
                [% INCLUDE 'csrf-token.inc' %]
552
                [% INCLUDE 'csrf-token.inc' %]
556
                [% INCLUDE 'csrf-token.inc' %]
553
                <div class="modal-content">
557
                <div class="modal-content">
554
                    <div class="modal-header">
558
                    <div class="modal-header">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/account-table.inc (+1 lines)
Lines 1-5 Link Here
1
[% PROCESS 'accounts.inc' %]
1
[% PROCESS 'accounts.inc' %]
2
<form method="post" action="opac-account-pay.pl" class="form-horizontal">
2
<form method="post" action="opac-account-pay.pl" class="form-horizontal">
3
    [% INCLUDE 'csrf-token.inc' %]
3
    [% IF ( ACCOUNT_LINES ) %]
4
    [% IF ( ACCOUNT_LINES ) %]
4
        <table class="table table-bordered table-striped finestable" id="finestable">
5
        <table class="table table-bordered table-striped finestable" id="finestable">
5
            <caption class="sr-only">Your charges</caption>
6
            <caption class="sr-only">Your charges</caption>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/holds-table.inc (+7 lines)
Lines 95-100 Link Here
95
                                    <div class="modal" id="changePickup[% HOLD.reserve_id | html %]" tabindex="-1" aria-labelledby="changePickup[% HOLD.reserve_id | html %]Label" aria-hidden="true">
95
                                    <div class="modal" id="changePickup[% HOLD.reserve_id | html %]" tabindex="-1" aria-labelledby="changePickup[% HOLD.reserve_id | html %]Label" aria-hidden="true">
96
                                        <div class="modal-dialog">
96
                                        <div class="modal-dialog">
97
                                            <form id="change_branch_form[% HOLD.reserve_id | html %]" action="/cgi-bin/koha/opac-modrequest.pl" method="post">
97
                                            <form id="change_branch_form[% HOLD.reserve_id | html %]" action="/cgi-bin/koha/opac-modrequest.pl" method="post">
98
                                                [% INCLUDE 'csrf-token.inc' %]
98
                                                <div class="modal-content">
99
                                                <div class="modal-content">
99
                                                    <div class="modal-header">
100
                                                    <div class="modal-header">
100
                                                        <h5 class="modal-title" id="changePickup[% HOLD.reserve_id | html %]Label">Change pickup location for <em>[% INCLUDE 'biblio-title.inc' biblio=HOLD.biblio %]</em></h5>
101
                                                        <h5 class="modal-title" id="changePickup[% HOLD.reserve_id | html %]Label">Change pickup location for <em>[% INCLUDE 'biblio-title.inc' biblio=HOLD.biblio %]</em></h5>
Lines 169-174 Link Here
169
                                [% IF ( HOLD.is_cancelable_from_opac ) %]
170
                                [% IF ( HOLD.is_cancelable_from_opac ) %]
170
                                    [% IF HOLD.suspend %]
171
                                    [% IF HOLD.suspend %]
171
                                        <form class="form-inline" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
172
                                        <form class="form-inline" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
173
                                            [% INCLUDE 'csrf-token.inc' %]
172
                                            <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
174
                                            <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
173
                                            <button class="btn btn-link" type="submit" name="submit"><i class="fa fa-play" aria-hidden="true"></i> Resume</button>
175
                                            <button class="btn btn-link" type="submit" name="submit"><i class="fa fa-play" aria-hidden="true"></i> Resume</button>
174
                                        </form>
176
                                        </form>
Lines 177-182 Link Here
177
                                            <a class="btn btn-link suspend_hold js-show" href="#" role="button" data-title="[% HOLD.biblio.title | html %] [% FOREACH subtitle IN HOLD.biblio.subtitle.split(' \| ') %][% IF Koha.Preference('marcflavour')=='UNIMARC' %],[% END %][% subtitle | html %][% END %]" data-reserve_id="[% HOLD.reserve_id | html %]"><i class="fa fa-pause" aria-hidden="true"></i> Suspend</a>
179
                                            <a class="btn btn-link suspend_hold js-show" href="#" role="button" data-title="[% HOLD.biblio.title | html %] [% FOREACH subtitle IN HOLD.biblio.subtitle.split(' \| ') %][% IF Koha.Preference('marcflavour')=='UNIMARC' %],[% END %][% subtitle | html %][% END %]" data-reserve_id="[% HOLD.reserve_id | html %]"><i class="fa fa-pause" aria-hidden="true"></i> Suspend</a>
178
                                        [% ELSE %]
180
                                        [% ELSE %]
179
                                            <form class="form-inline" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
181
                                            <form class="form-inline" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
182
                                                [% INCLUDE 'csrf-token.inc' %]
180
                                                <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
183
                                                <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
181
                                                <button class="btn btn-link" type="submit" name="submit"><i class="fa fa-pause" aria-hidden="true"></i> Suspend</button>
184
                                                <button class="btn btn-link" type="submit" name="submit"><i class="fa fa-pause" aria-hidden="true"></i> Suspend</button>
182
                                            </form>
185
                                            </form>
Lines 189-200 Link Here
189
                            <td class="modify">
192
                            <td class="modify">
190
                                [% IF ( HOLD.is_cancelable_from_opac ) %]
193
                                [% IF ( HOLD.is_cancelable_from_opac ) %]
191
                                    <form id="delete_hold_[% HOLD.reserve_id | html %]" action="/cgi-bin/koha/opac-modrequest.pl" method="post">
194
                                    <form id="delete_hold_[% HOLD.reserve_id | html %]" action="/cgi-bin/koha/opac-modrequest.pl" method="post">
195
                                        [% INCLUDE 'csrf-token.inc' %]
192
                                        <input type="hidden" name="biblionumber" value="[% HOLD.biblionumber | html %]" />
196
                                        <input type="hidden" name="biblionumber" value="[% HOLD.biblionumber | html %]" />
193
                                        <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
197
                                        <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
194
                                        <button data-title="[% INCLUDE 'biblio-title-head.inc' biblio=HOLD.biblio %]" data-reserve_id="[% HOLD.reserve_id | html %]" type="submit" class="btn btn-sm btn-danger btn-delete-hold"><i class="fa fa-times" aria-hidden="true"></i> [% tp('Cancel hold button', 'Cancel') | html %]</button>
198
                                        <button data-title="[% INCLUDE 'biblio-title-head.inc' biblio=HOLD.biblio %]" data-reserve_id="[% HOLD.reserve_id | html %]" type="submit" class="btn btn-sm btn-danger btn-delete-hold"><i class="fa fa-times" aria-hidden="true"></i> [% tp('Cancel hold button', 'Cancel') | html %]</button>
195
                                    </form>
199
                                    </form>
196
                                [% ELSIF HOLD.is_waiting && HOLD.cancellation_requestable_from_opac %]
200
                                [% ELSIF HOLD.is_waiting && HOLD.cancellation_requestable_from_opac %]
197
                                    <form id="req_cancel_hold_[% HOLD.reserve_id | html %]" action="/cgi-bin/koha/opac-modrequest.pl" method="post">
201
                                    <form id="req_cancel_hold_[% HOLD.reserve_id | html %]" action="/cgi-bin/koha/opac-modrequest.pl" method="post">
202
                                        [% INCLUDE 'csrf-token.inc' %]
198
                                        <input type="hidden" name="biblionumber" value="[% HOLD.biblionumber | html %]" />
203
                                        <input type="hidden" name="biblionumber" value="[% HOLD.biblionumber | html %]" />
199
                                        <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
204
                                        <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
200
                                        <input type="hidden" name="cancellation_request" value="1" />
205
                                        <input type="hidden" name="cancellation_request" value="1" />
Lines 213-218 Link Here
213
            [% UNLESS ( all_holds_waiting ) %]
218
            [% UNLESS ( all_holds_waiting ) %]
214
                <div>
219
                <div>
215
                    <form class="form-inline" id="suspend_all_holds" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
220
                    <form class="form-inline" id="suspend_all_holds" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
221
                        [% INCLUDE 'csrf-token.inc' %]
216
                        <button type="submit" id="suspend_all_submit" class="btn btn-primary"><i class="fa fa-pause" aria-hidden="true"></i> Suspend all holds</button>
222
                        <button type="submit" id="suspend_all_submit" class="btn btn-primary"><i class="fa fa-pause" aria-hidden="true"></i> Suspend all holds</button>
217
                        <input type="hidden" name="suspend" value="1" />
223
                        <input type="hidden" name="suspend" value="1" />
218
224
Lines 226-231 Link Here
226
                <br/>
232
                <br/>
227
                <div>
233
                <div>
228
                    <form id="resume_all_holds" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
234
                    <form id="resume_all_holds" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
235
                        [% INCLUDE 'csrf-token.inc' %]
229
                        <button type="submit" id="resume_all_submit" class="btn btn-primary"><i class="fa fa-play" aria-hidden="true"></i> Resume all suspended holds</button>
236
                        <button type="submit" id="resume_all_submit" class="btn btn-primary"><i class="fa fa-play" aria-hidden="true"></i> Resume all suspended holds</button>
230
                        <input type="hidden" name="suspend" value="0" />
237
                        <input type="hidden" name="suspend" value="0" />
231
                    </form>
238
                    </form>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/masthead.inc (+1 lines)
Lines 371-376 Link Here
371
                    </button>
371
                    </button>
372
                </div>
372
                </div>
373
                <form action="/cgi-bin/koha/opac-user.pl" method="post" name="auth" id="modalAuth">
373
                <form action="/cgi-bin/koha/opac-user.pl" method="post" name="auth" id="modalAuth">
374
                    [% INCLUDE 'csrf-token.inc' %]
374
                    <input type="hidden" name="has-search-query" id="has-search-query" value="" />
375
                    <input type="hidden" name="has-search-query" id="has-search-query" value="" />
375
                    <div class="modal-body">
376
                    <div class="modal-body">
376
                        [% IF ( Koha.Preference('GoogleOpenIDConnect') == 1 ) %]
377
                        [% IF ( Koha.Preference('GoogleOpenIDConnect') == 1 ) %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/opac-detail-sidebar.inc (+1 lines)
Lines 119-124 Link Here
119
                <button type="button" class="closebtn" data-dismiss="modal" aria-hidden="true">&times;</button>
119
                <button type="button" class="closebtn" data-dismiss="modal" aria-hidden="true">&times;</button>
120
            </div>
120
            </div>
121
            <form method="post" action="/cgi-bin/koha/opac-export.pl">
121
            <form method="post" action="/cgi-bin/koha/opac-export.pl">
122
                [% INCLUDE 'csrf-token.inc' %]
122
                <div class="modal-body">
123
                <div class="modal-body">
123
                    <fieldset id="dc_fieldset">
124
                    <fieldset id="dc_fieldset">
124
                        <input id="input-simple" type="radio" name="format" value="rdfdc">
125
                        <input id="input-simple" type="radio" name="format" value="rdfdc">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/opac-note.inc (+1 lines)
Lines 8-13 Link Here
8
                    &nbsp;&nbsp;&nbsp;<em>Written on [% message.message_date | $KohaDates %] by [% Branches.GetName(message.branchcode) | html %]</em>
8
                    &nbsp;&nbsp;&nbsp;<em>Written on [% message.message_date | $KohaDates %] by [% Branches.GetName(message.branchcode) | html %]</em>
9
                </li>
9
                </li>
10
                <form id="dismiss-message-form" action="/cgi-bin/koha/opac-dismiss-message.pl" method="post">
10
                <form id="dismiss-message-form" action="/cgi-bin/koha/opac-dismiss-message.pl" method="post">
11
                    [% INCLUDE 'csrf-token.inc' %]
11
                    <input type="hidden" name="message_id" value="[% message.message_id | html %]">
12
                    <input type="hidden" name="message_id" value="[% message.message_id | html %]">
12
                    <input type="hidden" name="patron_id" value="[% message.borrowernumber | html %]">
13
                    <input type="hidden" name="patron_id" value="[% message.borrowernumber | html %]">
13
                    <button type="submit" class="dismiss-message-button btn btn-primary"><i class="fa fa-trash" aria-hidden="true"></i> Dismiss</button>
14
                    <button type="submit" class="dismiss-message-button btn btn-primary"><i class="fa fa-trash" aria-hidden="true"></i> Dismiss</button>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/overdrive-checkout.inc (+1 lines)
Lines 8-13 Link Here
8
                </button>
8
                </button>
9
            </div>
9
            </div>
10
            <form action="#" method="post" id="overdrive-checkout-form">
10
            <form action="#" method="post" id="overdrive-checkout-form">
11
                [% INCLUDE 'csrf-token.inc' %]
11
                <div class="modal-body">
12
                <div class="modal-body">
12
                    <input type="hidden" name="id" value="" />
13
                    <input type="hidden" name="id" value="" />
13
                    <div id="overdrive-format-list">
14
                    <div id="overdrive-format-list">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/overdrive-login.inc (+1 lines)
Lines 8-13 Link Here
8
                </button>
8
                </button>
9
            </div>
9
            </div>
10
            <form action="#" method="post" id="overdrive-login-form">
10
            <form action="#" method="post" id="overdrive-login-form">
11
                [% INCLUDE 'csrf-token.inc' %]
11
                <div class="modal-body">
12
                <div class="modal-body">
12
                        <fieldset class="brief">
13
                        <fieldset class="brief">
13
                            <label for="ODpassword">Password:</label>
14
                            <label for="ODpassword">Password:</label>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-addbybiblionumber.tt (+3 lines)
Lines 25-30 Link Here
25
                                </ul>
25
                                </ul>
26
                                [% IF private_shelves.count or public_shelves.count or private_shelves_shared_with_me.count %]
26
                                [% IF private_shelves.count or public_shelves.count or private_shelves_shared_with_me.count %]
27
                                    <form name="f1" action="/cgi-bin/koha/opac-addbybiblionumber.pl" method="post">
27
                                    <form name="f1" action="/cgi-bin/koha/opac-addbybiblionumber.pl" method="post">
28
                                        [% INCLUDE 'csrf-token.inc' %]
28
                                        <fieldset>
29
                                        <fieldset>
29
                                            <legend>Select a list</legend>
30
                                            <legend>Select a list</legend>
30
                                            <label for="shelfnumber">Add to list:</label> <select name="shelfnumber" id="shelfnumber">
31
                                            <label for="shelfnumber">Add to list:</label> <select name="shelfnumber" id="shelfnumber">
Lines 58-63 Link Here
58
                                [% ELSE %]
59
                                [% ELSE %]
59
                                    [% IF ( singleshelf ) %]
60
                                    [% IF ( singleshelf ) %]
60
                                        <form name="f1" action="/cgi-bin/koha/opac-addbybiblionumber.pl" method="post">
61
                                        <form name="f1" action="/cgi-bin/koha/opac-addbybiblionumber.pl" method="post">
62
                                            [% INCLUDE 'csrf-token.inc' %]
61
                                            [% FOREACH biblio IN biblios %]
63
                                            [% FOREACH biblio IN biblios %]
62
                                                <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]">
64
                                                <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]">
63
                                            [% END %]
65
                                            [% END %]
Lines 74-79 Link Here
74
76
75
                            [% UNLESS ( singleshelf ) %]
77
                            [% UNLESS ( singleshelf ) %]
76
                                <form name="f2" method="post" action="/cgi-bin/koha/opac-addbybiblionumber.pl">
78
                                <form name="f2" method="post" action="/cgi-bin/koha/opac-addbybiblionumber.pl">
79
                                    [% INCLUDE 'csrf-token.inc' %]
77
                                    <fieldset>
80
                                    <fieldset>
78
                                        <legend>Add to a new list:</legend>
81
                                        <legend>Add to a new list:</legend>
79
                                            <label for="newvirtualshelf">List name:</label>
82
                                            <label for="newvirtualshelf">List name:</label>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-alert-subscribe.tt (+2 lines)
Lines 36-41 Link Here
36
                        [% IF ( typeissue ) %]
36
                        [% IF ( typeissue ) %]
37
                            <h2>Subscribe to a subscription alert</h2>
37
                            <h2>Subscribe to a subscription alert</h2>
38
                            <form action="opac-alert-subscribe.pl" method="post">
38
                            <form action="opac-alert-subscribe.pl" method="post">
39
                                [% INCLUDE 'csrf-token.inc' %]
39
                                <p>Do you want to receive an email when a new issue for this subscription arrives?</p>
40
                                <p>Do you want to receive an email when a new issue for this subscription arrives?</p>
40
                                <h3>[% bibliotitle | html %]</h3>
41
                                <h3>[% bibliotitle | html %]</h3>
41
                                [% IF ( notes ) %]<p>[% notes | html %]</p>[% END %]
42
                                [% IF ( notes ) %]<p>[% notes | html %]</p>[% END %]
Lines 50-55 Link Here
50
                        [% IF ( typeissuecancel ) %]
51
                        [% IF ( typeissuecancel ) %]
51
                            <h2>Unsubscribe from a subscription alert</h2>
52
                            <h2>Unsubscribe from a subscription alert</h2>
52
                            <form action="opac-alert-subscribe.pl" method="post">
53
                            <form action="opac-alert-subscribe.pl" method="post">
54
                                [% INCLUDE 'csrf-token.inc' %]
53
                                <p>Please confirm that you do not want to receive email when a new issue arrives for this subscription.</p>
55
                                <p>Please confirm that you do not want to receive email when a new issue arrives for this subscription.</p>
54
                                <h3>[% bibliotitle | html %]</h3>
56
                                <h3>[% bibliotitle | html %]</h3>
55
                                [% IF ( notes ) %]<p>[% notes | html %]</p>[% END %]
57
                                [% IF ( notes ) %]<p>[% notes | html %]</p>[% END %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-auth.tt (+1 lines)
Lines 213-218 Link Here
213
                                <form action="/cgi-bin/koha/sci/sci-main.pl" name="auth" id="auth" method="post" autocomplete="off">
213
                                <form action="/cgi-bin/koha/sci/sci-main.pl" name="auth" id="auth" method="post" autocomplete="off">
214
                            [% ELSE %]
214
                            [% ELSE %]
215
                                <form action="[% script_name | html %]" name="auth" id="auth" method="post" autocomplete="off">
215
                                <form action="[% script_name | html %]" name="auth" id="auth" method="post" autocomplete="off">
216
                                    [% INCLUDE 'csrf-token.inc' %]
216
                            [% END %]
217
                            [% END %]
217
                                <input type="hidden" name="koha_login_context" value="opac" />
218
                                <input type="hidden" name="koha_login_context" value="opac" />
218
219
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-authorities-home.tt (+1 lines)
Lines 36-41 Link Here
36
                [% END %]
36
                [% END %]
37
                    <div id="userauthhome" class="maincontent">
37
                    <div id="userauthhome" class="maincontent">
38
                        <form name="f" action="/cgi-bin/koha/opac-authorities-home.pl" method="post">
38
                        <form name="f" action="/cgi-bin/koha/opac-authorities-home.pl" method="post">
39
                            [% INCLUDE 'csrf-token.inc' %]
39
                            <input type="hidden" name="op" value="do_search" />
40
                            <input type="hidden" name="op" value="do_search" />
40
                            <input type="hidden" name="type" value="opac" />
41
                            <input type="hidden" name="type" value="opac" />
41
                            <fieldset class="rows">
42
                            <fieldset class="rows">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-basket.tt (+1 lines)
Lines 350-355 Link Here
350
                                <input type="hidden" name="records" id="records" />
350
                                <input type="hidden" name="records" id="records" />
351
                            </form>
351
                            </form>
352
                            <form method="post" id="download_cart" action="/cgi-bin/koha/opac-downloadcart.pl">
352
                            <form method="post" id="download_cart" action="/cgi-bin/koha/opac-downloadcart.pl">
353
                                [% INCLUDE 'csrf-token.inc' %]
353
                                <input type="hidden" name="format" id="download_format" value="" />
354
                                <input type="hidden" name="format" id="download_format" value="" />
354
                                <input type="hidden" name="bib_list" value="[% bib_list | html %]" />
355
                                <input type="hidden" name="bib_list" value="[% bib_list | html %]" />
355
                            </form>
356
                            </form>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-curbside-pickups.tt (+3 lines)
Lines 190-195 Link Here
190
                                                    <td>[% p.notes | html %]</td>
190
                                                    <td>[% p.notes | html %]</td>
191
                                                    <td>
191
                                                    <td>
192
                                                        <form method="post">
192
                                                        <form method="post">
193
                                                            [% INCLUDE 'csrf-token.inc' %]
193
                                                            <input type="hidden" name="op" value="arrival-alert" />
194
                                                            <input type="hidden" name="op" value="arrival-alert" />
194
                                                            <input type="hidden" name="pickup_id" value="[% p.id | html %]" />
195
                                                            <input type="hidden" name="pickup_id" value="[% p.id | html %]" />
195
                                                            [% IF ! p.staged_datetime || p.arrival_datetime %]
196
                                                            [% IF ! p.staged_datetime || p.arrival_datetime %]
Lines 202-207 Link Here
202
                                                        </form>
203
                                                        </form>
203
                                                        <p>
204
                                                        <p>
204
                                                        <form method="post">
205
                                                        <form method="post">
206
                                                            [% INCLUDE 'csrf-token.inc' %]
205
                                                            <input type="hidden" name="op" value="cancel-pickup" />
207
                                                            <input type="hidden" name="op" value="cancel-pickup" />
206
                                                            <input type="hidden" name="pickup_id" value="[% p.id | html %]" />
208
                                                            <input type="hidden" name="pickup_id" value="[% p.id | html %]" />
207
                                                            [% IF p.delivered_datetime %]
209
                                                            [% IF p.delivered_datetime %]
Lines 229-234 Link Here
229
                                <div role="tabpanel" class="tab-pane active" id="user-schedule-pickup" aria-labelledby="tab-user-schedule-pickup">
231
                                <div role="tabpanel" class="tab-pane active" id="user-schedule-pickup" aria-labelledby="tab-user-schedule-pickup">
230
                                [% END %]
232
                                [% END %]
231
                                    <form id="create-pickup" method="post">
233
                                    <form id="create-pickup" method="post">
234
                                        [% INCLUDE 'csrf-token.inc' %]
232
                                        <fieldset class="rows">
235
                                        <fieldset class="rows">
233
                                            <ol>
236
                                            <ol>
234
                                                <li>
237
                                                <li>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-detail.tt (+2 lines)
Lines 238-243 Link Here
238
                    [% IF ( TagsInputEnabled ) %]
238
                    [% IF ( TagsInputEnabled ) %]
239
                        [% IF ( loggedinusername ) %]
239
                        [% IF ( loggedinusername ) %]
240
                            <form id="tagform[% biblio.biblionumber | html %]" method="post" action="/cgi-bin/koha/opac-tags.pl" style="display:none;">
240
                            <form id="tagform[% biblio.biblionumber | html %]" method="post" action="/cgi-bin/koha/opac-tags.pl" style="display:none;">
241
                                [% INCLUDE 'csrf-token.inc' %]
241
                                <legend class="sr-only">Tags</legend>
242
                                <legend class="sr-only">Tags</legend>
242
                                <div class="form-row">
243
                                <div class="form-row">
243
                                    <div class="col-3">
244
                                    <div class="col-3">
Lines 300-305 Link Here
300
301
301
                    [% IF ( OpacStarRatings != 'disable' ) %]
302
                    [% IF ( OpacStarRatings != 'disable' ) %]
302
                        <form method="post" action="/cgi-bin/koha/opac-ratings.pl">
303
                        <form method="post" action="/cgi-bin/koha/opac-ratings.pl">
304
                            [% INCLUDE 'csrf-token.inc' %]
303
                            <legend class="sr-only">Star ratings</legend>
305
                            <legend class="sr-only">Star ratings</legend>
304
                            <div class="results_summary ratings" id="rating-[% biblio.biblionumber | html %]">
306
                            <div class="results_summary ratings" id="rating-[% biblio.biblionumber | html %]">
305
307
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-downloadcart.tt (+1 lines)
Lines 11-16 Link Here
11
                    <div id="userdownloadcart" class="maincontent">
11
                    <div id="userdownloadcart" class="maincontent">
12
                        <h1>Download cart</h1>
12
                        <h1>Download cart</h1>
13
                        <form method="post" action="/cgi-bin/koha/opac-downloadcart.pl">
13
                        <form method="post" action="/cgi-bin/koha/opac-downloadcart.pl">
14
                            [% INCLUDE 'csrf-token.inc' %]
14
                            <select name="format" id="format">
15
                            <select name="format" id="format">
15
                                <option value="">-- Choose format --</option>
16
                                <option value="">-- Choose format --</option>
16
                                <option value="ris">RIS (Zotero, EndNote, others)</option>
17
                                <option value="ris">RIS (Zotero, EndNote, others)</option>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-downloadshelf.tt (+1 lines)
Lines 59-64 Link Here
59
                                </div>
59
                                </div>
60
                            [% ELSE %]
60
                            [% ELSE %]
61
                                <form method="post" action="/cgi-bin/koha/opac-downloadshelf.pl">
61
                                <form method="post" action="/cgi-bin/koha/opac-downloadshelf.pl">
62
                                    [% INCLUDE 'csrf-token.inc' %]
62
                                    <fieldset>
63
                                    <fieldset>
63
                                        <select name="format" id="dlformat" required="required">
64
                                        <select name="format" id="dlformat" required="required">
64
                                            <legend>Choose format</legend>
65
                                            <legend>Choose format</legend>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-illrequests.tt (+3 lines)
Lines 90-95 Link Here
90
                                [% INCLUDE messages %]
90
                                [% INCLUDE messages %]
91
                                [% IF backends %]
91
                                [% IF backends %]
92
                                    <form method="post" id="illrequestcreate-form" novalidate="novalidate">
92
                                    <form method="post" id="illrequestcreate-form" novalidate="novalidate">
93
                                        [% INCLUDE 'csrf-token.inc' %]
93
                                        <legend class="sr-only">Backends</legend>
94
                                        <legend class="sr-only">Backends</legend>
94
                                        <fieldset class="rows">
95
                                        <fieldset class="rows">
95
                                            <label for="backend">Provider:</label>
96
                                            <label for="backend">Provider:</label>
Lines 175-180 Link Here
175
                            [% INCLUDE messages %]
176
                            [% INCLUDE messages %]
176
                            [% status = request.status %]
177
                            [% status = request.status %]
177
                            <form method="post" action="?method=update" id="illrequestupdate-form" novalidate="novalidate">
178
                            <form method="post" action="?method=update" id="illrequestupdate-form" novalidate="novalidate">
179
                                [% INCLUDE 'csrf-token.inc' %]
178
                                <fieldset class="rows">
180
                                <fieldset class="rows">
179
                                    <legend id="library_legend">Details from library</legend>
181
                                    <legend id="library_legend">Details from library</legend>
180
                                    <ol>
182
                                    <ol>
Lines 248-253 Link Here
248
                            <h1>Interlibrary loan item availability</h1>
250
                            <h1>Interlibrary loan item availability</h1>
249
                            <div id="results">
251
                            <div id="results">
250
                                <form method="POST" action="/cgi-bin/koha/opac-illrequests.pl">
252
                                <form method="POST" action="/cgi-bin/koha/opac-illrequests.pl">
253
                                    [% INCLUDE 'csrf-token.inc' %]
251
                                    <legend><h2>Displaying availability results</h2></legend>
254
                                    <legend><h2>Displaying availability results</h2></legend>
252
                                    [% FOREACH key IN whole.keys %]
255
                                    [% FOREACH key IN whole.keys %]
253
                                        [% value = whole.$key %]
256
                                        [% value = whole.$key %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-issue-note.tt (+1 lines)
Lines 41-46 Link Here
41
                            Issue notes have not been enabled. Please contact the library.
41
                            Issue notes have not been enabled. Please contact the library.
42
                        [% ELSE %]
42
                        [% ELSE %]
43
                            <form id="issue-note" action="/cgi-bin/koha/opac-issue-note.pl" method="post">
43
                            <form id="issue-note" action="/cgi-bin/koha/opac-issue-note.pl" method="post">
44
                                [% INCLUDE 'csrf-token.inc' %]
44
                                <legend class="sr-only">Edit issue note</legend>
45
                                <legend class="sr-only">Edit issue note</legend>
45
                                <fieldset>
46
                                <fieldset>
46
                                    <label for="note" class="required">Note:</label>
47
                                    <label for="note" class="required">Note:</label>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-main.tt (+1 lines)
Lines 180-185 Link Here
180
                        [% UNLESS ( casAuthentication || shibbolethAuthentication || Koha.Preference('opacShibOnly') ) %]
180
                        [% UNLESS ( casAuthentication || shibbolethAuthentication || Koha.Preference('opacShibOnly') ) %]
181
                            <div id="login">
181
                            <div id="login">
182
                                <form action="/cgi-bin/koha/opac-user.pl" method="post" name="auth" id="auth" autocomplete="off">
182
                                <form action="/cgi-bin/koha/opac-user.pl" method="post" name="auth" id="auth" autocomplete="off">
183
                                    [% INCLUDE 'csrf-token.inc' %]
183
                                    <input type="hidden" name="koha_login_context" value="opac" />
184
                                    <input type="hidden" name="koha_login_context" value="opac" />
184
                                    <fieldset class="brief">
185
                                    <fieldset class="brief">
185
                                        <legend>Log in to your account:</legend>
186
                                        <legend>Log in to your account:</legend>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-memberentry.tt (+1 lines)
Lines 213-218 Link Here
213
                [% END %]
213
                [% END %]
214
214
215
                <form method="post" action="/cgi-bin/koha/opac-memberentry.pl" id="memberentry-form" autocomplete="off">
215
                <form method="post" action="/cgi-bin/koha/opac-memberentry.pl" id="memberentry-form" autocomplete="off">
216
                    [% INCLUDE 'csrf-token.inc' %]
216
217
217
                [% FOREACH field = ['streetnumber' 'streettype'  'cardnumber' 'branchcode' 'categorycode' 'title' 'surname' 'firstname' 'middle_name' 'dateofbirth' 'initials' 'pronouns' 'othernames' 'address' 'address2' 'city' 'state' 'zipcode' 'country' 'phone' 'phonepro' 'mobile' 'email' 'emailpro' 'fax' 'B_streettype' 'B_streetnumber' 'B_address' 'B_address2' 'B_city' 'B_state' 'B_zipcode' 'B_country' 'B_phone' 'B_email' 'contactnote' 'altcontactsurname' 'altcontactfirstname' 'altcontactaddress1' 'altcontactaddress2' 'altcontactaddress3' 'altcontactstate' 'altcontactzipcode' 'altcontactcountry' 'altcontactphone' 'password' ] %]
218
                [% FOREACH field = ['streetnumber' 'streettype'  'cardnumber' 'branchcode' 'categorycode' 'title' 'surname' 'firstname' 'middle_name' 'dateofbirth' 'initials' 'pronouns' 'othernames' 'address' 'address2' 'city' 'state' 'zipcode' 'country' 'phone' 'phonepro' 'mobile' 'email' 'emailpro' 'fax' 'B_streettype' 'B_streetnumber' 'B_address' 'B_address2' 'B_city' 'B_state' 'B_zipcode' 'B_country' 'B_phone' 'B_email' 'contactnote' 'altcontactsurname' 'altcontactfirstname' 'altcontactaddress1' 'altcontactaddress2' 'altcontactaddress3' 'altcontactstate' 'altcontactzipcode' 'altcontactcountry' 'altcontactphone' 'password' ] %]
218
                    [% IF mandatory.defined( field ) %]
219
                    [% IF mandatory.defined( field ) %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-messaging.tt (+1 lines)
Lines 41-46 Link Here
41
                        <div class="alert alert-success"><p><strong>Settings updated</strong></p></div>
41
                        <div class="alert alert-success"><p><strong>Settings updated</strong></p></div>
42
                        [% END %]
42
                        [% END %]
43
                        <form action="/cgi-bin/koha/opac-messaging.pl" method="post" name="opacmessaging">
43
                        <form action="/cgi-bin/koha/opac-messaging.pl" method="post" name="opacmessaging">
44
                            [% INCLUDE 'csrf-token.inc' %]
44
                            [% INCLUDE csrf-token.inc %]
45
                            [% INCLUDE csrf-token.inc %]
45
                            <input type="hidden" name="modify" value="yes" />
46
                            <input type="hidden" name="modify" value="yes" />
46
47
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-passwd.tt (+2 lines)
Lines 65-70 Link Here
65
                    [% IF logged_in_user.category.effective_change_password %]
65
                    [% IF logged_in_user.category.effective_change_password %]
66
                        [% IF ( Ask_data ) %]
66
                        [% IF ( Ask_data ) %]
67
                            <form action="/cgi-bin/koha/opac-passwd.pl" name="mainform" id="mainform" method="post">
67
                            <form action="/cgi-bin/koha/opac-passwd.pl" name="mainform" id="mainform" method="post">
68
                                [% INCLUDE 'csrf-token.inc' %]
68
                                <legend class="sr-only">Change your password</legend>
69
                                <legend class="sr-only">Change your password</legend>
69
                                <fieldset>
70
                                <fieldset>
70
                                    [% IF ( logged_in_user.category.effective_require_strong_password ) %]
71
                                    [% IF ( logged_in_user.category.effective_require_strong_password ) %]
Lines 102-107 Link Here
102
                            Your password has been changed
103
                            Your password has been changed
103
                        </div>
104
                        </div>
104
                        <form action="/cgi-bin/koha/opac-user.pl" method="post" autocomplete="off">
105
                        <form action="/cgi-bin/koha/opac-user.pl" method="post" autocomplete="off">
106
                            [% INCLUDE 'csrf-token.inc' %]
105
                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
107
                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
106
                            <p><input type="submit" class="btn btn-primary" value="Return to my account" /></p>
108
                            <p><input type="submit" class="btn btn-primary" value="Return to my account" /></p>
107
                        </form>
109
                        </form>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-password-recovery.tt (+2 lines)
Lines 120-125 Link Here
120
                        <div class="alert alert-info">You can't reset your password.</div>
120
                        <div class="alert alert-info">You can't reset your password.</div>
121
                    [% ELSIF (password_recovery) %]
121
                    [% ELSIF (password_recovery) %]
122
                        <form action="/cgi-bin/koha/opac-password-recovery.pl" method="post" autocomplete="off">
122
                        <form action="/cgi-bin/koha/opac-password-recovery.pl" method="post" autocomplete="off">
123
                            [% INCLUDE 'csrf-token.inc' %]
123
                            <legend class="sr-only">Password recovery</legend>
124
                            <legend class="sr-only">Password recovery</legend>
124
                            <input type="hidden" name="koha_login_context" value="opac" />
125
                            <input type="hidden" name="koha_login_context" value="opac" />
125
                            <p>To reset your password, enter your login or your email address.</p>
126
                            <p>To reset your password, enter your login or your email address.</p>
Lines 142-147 Link Here
142
                    [% ELSIF (new_password) %]
143
                    [% ELSIF (new_password) %]
143
                        [% UNLESS ( errLinkNotValid ) %]
144
                        [% UNLESS ( errLinkNotValid ) %]
144
                            <form id="mainform" name="mainform" action="/cgi-bin/koha/opac-password-recovery.pl" method="post" autocomplete="off">
145
                            <form id="mainform" name="mainform" action="/cgi-bin/koha/opac-password-recovery.pl" method="post" autocomplete="off">
146
                                [% INCLUDE 'csrf-token.inc' %]
145
                                <legend class="sr-only">Password not valid</legend>
147
                                <legend class="sr-only">Password not valid</legend>
146
                                <input type="hidden" name="koha_login_context" value="opac" />
148
                                <input type="hidden" name="koha_login_context" value="opac" />
147
                                <fieldset class="brief">
149
                                <fieldset class="brief">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-patron-consent.tt (+1 lines)
Lines 47-52 Link Here
47
                    <h1>Your consents</h1>
47
                    <h1>Your consents</h1>
48
48
49
                    <form action="/cgi-bin/koha/opac-patron-consent.pl" method="post">
49
                    <form action="/cgi-bin/koha/opac-patron-consent.pl" method="post">
50
                        [% INCLUDE 'csrf-token.inc' %]
50
                        [% IF Koha.Preference('PrivacyPolicyConsent') %]
51
                        [% IF Koha.Preference('PrivacyPolicyConsent') %]
51
                        <legend><h2 id="GDPR_consents">Privacy policy consents</h2></legend>
52
                        <legend><h2 id="GDPR_consents">Privacy policy consents</h2></legend>
52
                            <input type="hidden" name="op" value="gdpr_proc_save"/>
53
                            <input type="hidden" name="op" value="gdpr_proc_save"/>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-privacy.tt (+4 lines)
Lines 74-79 Link Here
74
                        <p id="note1">Please note that information on any book still checked-out must be kept by the library no matter which privacy option you choose.</p>
74
                        <p id="note1">Please note that information on any book still checked-out must be kept by the library no matter which privacy option you choose.</p>
75
                        <p id="note2">Please also note that the library staff can't update these values for you: it's your privacy!</p>
75
                        <p id="note2">Please also note that the library staff can't update these values for you: it's your privacy!</p>
76
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-update-form">
76
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-update-form">
77
                            [% INCLUDE 'csrf-token.inc' %]
77
                            <legend class="sr-only">Privacy rule</legend>
78
                            <legend class="sr-only">Privacy rule</legend>
78
                            <input type="hidden" name="op" value="update_privacy" />
79
                            <input type="hidden" name="op" value="update_privacy" />
79
                            <fieldset>
80
                            <fieldset>
Lines 157-172 Link Here
157
                        <p>You can delete all your checkout and hold history immediately by clicking here. <strong>BE CAREFUL</strong>. Once you've confirmed the deletion, no one can retrieve the list!</p>
158
                        <p>You can delete all your checkout and hold history immediately by clicking here. <strong>BE CAREFUL</strong>. Once you've confirmed the deletion, no one can retrieve the list!</p>
158
159
159
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-delete-checkouts">
160
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-delete-checkouts">
161
                            [% INCLUDE 'csrf-token.inc' %]
160
                            <input type="hidden" name="op" value="delete_record" />
162
                            <input type="hidden" name="op" value="delete_record" />
161
                            <input type="hidden" name="checkouts" value="1" />
163
                            <input type="hidden" name="checkouts" value="1" />
162
                        </form>
164
                        </form>
163
165
164
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-delete-holds">
166
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-delete-holds">
167
                            [% INCLUDE 'csrf-token.inc' %]
165
                            <input type="hidden" name="op" value="delete_record" />
168
                            <input type="hidden" name="op" value="delete_record" />
166
                            <input type="hidden" name="holds" value="1" />
169
                            <input type="hidden" name="holds" value="1" />
167
                        </form>
170
                        </form>
168
171
169
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-delete-all">
172
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-delete-all">
173
                            [% INCLUDE 'csrf-token.inc' %]
170
                            <input type="hidden" name="op" value="delete_record" />
174
                            <input type="hidden" name="op" value="delete_record" />
171
                            <input type="hidden" name="all" value="1" />
175
                            <input type="hidden" name="all" value="1" />
172
                        </form>
176
                        </form>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-recall.tt (+1 lines)
Lines 66-71 Link Here
66
                                <div class="dialog">
66
                                <div class="dialog">
67
67
68
                                    <form id="recallform" action="/cgi-bin/koha/opac-recall.pl" method="post">
68
                                    <form id="recallform" action="/cgi-bin/koha/opac-recall.pl" method="post">
69
                                        [% INCLUDE 'csrf-token.inc' %]
69
                                        <fieldset class="rows" id="options">
70
                                        <fieldset class="rows" id="options">
70
                                            <legend>Place a recall on <b>[% biblio.title | html %]</b> ([% biblio.author | html %])?</legend>
71
                                            <legend>Place a recall on <b>[% biblio.title | html %]</b> ([% biblio.author | html %])?</legend>
71
                                            <ul>
72
                                            <ul>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-recalls.tt (+1 lines)
Lines 113-118 Link Here
113
                                                    <td class="cancelrecall">
113
                                                    <td class="cancelrecall">
114
                                                        [% IF ( RECALL.requested or RECALL.overdue ) %]
114
                                                        [% IF ( RECALL.requested or RECALL.overdue ) %]
115
                                                            <form action="/cgi-bin/koha/opac-recall.pl" method="post">
115
                                                            <form action="/cgi-bin/koha/opac-recall.pl" method="post">
116
                                                                [% INCLUDE 'csrf-token.inc' %]
116
                                                                <input type="hidden" name="op" value="cancel">
117
                                                                <input type="hidden" name="op" value="cancel">
117
                                                                <input type="hidden" name="recall_id" value="[% RECALL.id | html %]">
118
                                                                <input type="hidden" name="recall_id" value="[% RECALL.id | html %]">
118
                                                                <input type="hidden" name="biblionumber" value="[% RECALL.biblio_id | html %]">
119
                                                                <input type="hidden" name="biblionumber" value="[% RECALL.biblio_id | html %]">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-registration-confirmation.tt (+1 lines)
Lines 83-88 Link Here
83
                        [% UNLESS ( casAuthentication ) %]
83
                        [% UNLESS ( casAuthentication ) %]
84
                            <div id="login">
84
                            <div id="login">
85
                                <form action="/cgi-bin/koha/opac-user.pl" method="post" name="auth" id="auth" autocomplete="off">
85
                                <form action="/cgi-bin/koha/opac-user.pl" method="post" name="auth" id="auth" autocomplete="off">
86
                                    [% INCLUDE 'csrf-token.inc' %]
86
                                    <input type="hidden" name="koha_login_context" value="opac" />
87
                                    <input type="hidden" name="koha_login_context" value="opac" />
87
                                    <fieldset class="brief">
88
                                    <fieldset class="brief">
88
                                        <legend>Log in to your account:</legend>
89
                                        <legend>Log in to your account:</legend>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-reportproblem.tt (+1 lines)
Lines 55-60 Link Here
55
55
56
                    <div id="reportproblem" class="maincontent toptabs">
56
                    <div id="reportproblem" class="maincontent toptabs">
57
                        <form name="reportlibform" action="/cgi-bin/koha/opac-reportproblem.pl" method="post">
57
                        <form name="reportlibform" action="/cgi-bin/koha/opac-reportproblem.pl" method="post">
58
                            [% INCLUDE 'csrf-token.inc' %]
58
                            <legend class="sr-only">Report a problem</legend>
59
                            <legend class="sr-only">Report a problem</legend>
59
                            <input type="hidden" name="op" value="addreport" />
60
                            <input type="hidden" name="op" value="addreport" />
60
                            <fieldset class="rows">
61
                            <fieldset class="rows">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-request-article.tt (+1 lines)
Lines 65-70 Link Here
65
                    [% END %]
65
                    [% END %]
66
66
67
                        <form id="place-article-request" method="post" action="/cgi-bin/koha/opac-request-article.pl">
67
                        <form id="place-article-request" method="post" action="/cgi-bin/koha/opac-request-article.pl">
68
                            [% INCLUDE 'csrf-token.inc' %]
68
                            <legend class="sr-only">Place article request</legend>
69
                            <legend class="sr-only">Place article request</legend>
69
                            <input type="hidden" name="action" value="create" />
70
                            <input type="hidden" name="action" value="create" />
70
                            <input type="hidden" name="biblionumber" id="biblionumber" value="[% biblio.biblionumber | html %]" />
71
                            <input type="hidden" name="biblionumber" id="biblionumber" value="[% biblio.biblionumber | html %]" />
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-reserve.tt (+1 lines)
Lines 148-153 Link Here
148
                [% END %]
148
                [% END %]
149
149
150
            <form action="/cgi-bin/koha/opac-reserve.pl" method="post" id="hold-request-form">
150
            <form action="/cgi-bin/koha/opac-reserve.pl" method="post" id="hold-request-form">
151
                [% INCLUDE 'csrf-token.inc' %]
151
                <legend class="sr-only">Hold requests</legend>
152
                <legend class="sr-only">Hold requests</legend>
152
                <input type="hidden" name="place_reserve" value="1"/>
153
                <input type="hidden" name="place_reserve" value="1"/>
153
                <!-- These values are set dynamically by js -->
154
                <!-- These values are set dynamically by js -->
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-reset-password.tt (+1 lines)
Lines 75-80 Link Here
75
                            </div>
75
                            </div>
76
                        [% ELSE %]
76
                        [% ELSE %]
77
                        <form action="/cgi-bin/koha/opac-reset-password.pl" name="mainform" id="mainform" method="post" autocomplete="off">
77
                        <form action="/cgi-bin/koha/opac-reset-password.pl" name="mainform" id="mainform" method="post" autocomplete="off">
78
                            [% INCLUDE 'csrf-token.inc' %]
78
                            <legend class="sr-only">Reset your password</legend>
79
                            <legend class="sr-only">Reset your password</legend>
79
80
80
                            <fieldset class="brief">
81
                            <fieldset class="brief">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-review.tt (+1 lines)
Lines 40-45 Link Here
40
                        <h2>Comments on <em>[% INCLUDE 'biblio-title.inc' %]</em></h2>
40
                        <h2>Comments on <em>[% INCLUDE 'biblio-title.inc' %]</em></h2>
41
                        [% IF ( biblio.author ) %]<h3>[% biblio.author | html %]</h3>[% END %]
41
                        [% IF ( biblio.author ) %]<h3>[% biblio.author | html %]</h3>[% END %]
42
                        <form id="reviewf" action="/cgi-bin/koha/opac-review.pl" method="post">
42
                        <form id="reviewf" action="/cgi-bin/koha/opac-review.pl" method="post">
43
                            [% INCLUDE 'csrf-token.inc' %]
43
                            <legend class="sr-only">Comments</legend>
44
                            <legend class="sr-only">Comments</legend>
44
                            <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]" />
45
                            <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]" />
45
                            [% IF ( reviewid ) %]<input type="hidden" name="reviewid" value="[% reviewid | html %]" />[% END %]
46
                            [% IF ( reviewid ) %]<input type="hidden" name="reviewid" value="[% reviewid | html %]" />[% END %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-search-history.tt (+4 lines)
Lines 86-91 Link Here
86
        [% IF ( current_biblio_searches ) %]
86
        [% IF ( current_biblio_searches ) %]
87
            <h2>Current session</h2>
87
            <h2>Current session</h2>
88
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
88
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
89
                [% INCLUDE 'csrf-token.inc' %]
89
                <legend class="sr-only">Toolbar control</legend>
90
                <legend class="sr-only">Toolbar control</legend>
90
91
91
                [% INCLUDE 'toolbar_controls' %]
92
                [% INCLUDE 'toolbar_controls' %]
Lines 133-138 Link Here
133
        [% IF ( previous_biblio_searches ) %]
134
        [% IF ( previous_biblio_searches ) %]
134
            <h2>Previous sessions</h2>
135
            <h2>Previous sessions</h2>
135
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
136
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
137
                [% INCLUDE 'csrf-token.inc' %]
136
                <legend class="sr-only">Toolbar control</legend>
138
                <legend class="sr-only">Toolbar control</legend>
137
                [% INCLUDE 'toolbar_controls' %]
139
                [% INCLUDE 'toolbar_controls' %]
138
140
Lines 188-193 Link Here
188
        [% IF ( current_authority_searches ) %]
190
        [% IF ( current_authority_searches ) %]
189
            <h2>Current session</h2>
191
            <h2>Current session</h2>
190
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
192
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
193
                [% INCLUDE 'csrf-token.inc' %]
191
                <legend class="sr-only">Toolbar control</legend>
194
                <legend class="sr-only">Toolbar control</legend>
192
                [% INCLUDE 'toolbar_controls' %]
195
                [% INCLUDE 'toolbar_controls' %]
193
                <input type="hidden" name="action" value="delete" />
196
                <input type="hidden" name="action" value="delete" />
Lines 229-234 Link Here
229
        [% IF ( previous_authority_searches ) %]
232
        [% IF ( previous_authority_searches ) %]
230
            <h2>Previous sessions</h2>
233
            <h2>Previous sessions</h2>
231
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
234
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
235
                [% INCLUDE 'csrf-token.inc' %]
232
                <legend class="sr-only">Toolbar control</legend>
236
                <legend class="sr-only">Toolbar control</legend>
233
                [% INCLUDE 'toolbar_controls' %]
237
                [% INCLUDE 'toolbar_controls' %]
234
                <input type="hidden" name="action" value="delete" />
238
                <input type="hidden" name="action" value="delete" />
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-sendbasketform.tt (+1 lines)
Lines 28-33 Link Here
28
28
29
                        [% ELSE %]
29
                        [% ELSE %]
30
                            <form action="/cgi-bin/koha/opac-sendbasket.pl" method="post" id="sendbasketform">
30
                            <form action="/cgi-bin/koha/opac-sendbasket.pl" method="post" id="sendbasketform">
31
                                [% INCLUDE 'csrf-token.inc' %]
31
                                <fieldset class="brief">
32
                                <fieldset class="brief">
32
                                    <legend><h1>Sending your cart</h1></legend>
33
                                    <legend><h1>Sending your cart</h1></legend>
33
                                    <label for="email_add">Email address:</label>
34
                                    <label for="email_add">Email address:</label>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-sendshelfform.tt (+1 lines)
Lines 31-36 Link Here
31
                                <p><a class="button close" href="/cgi-bin/koha/opac-shelves.pl?op=view&amp;shelfnumber=[% shelfid | html %]">Back to lists</a></p>
31
                                <p><a class="button close" href="/cgi-bin/koha/opac-shelves.pl?op=view&amp;shelfnumber=[% shelfid | html %]">Back to lists</a></p>
32
                            [% ELSE %]
32
                            [% ELSE %]
33
                                <form action="/cgi-bin/koha/opac-sendshelf.pl" method="post" id="sendshelfform">
33
                                <form action="/cgi-bin/koha/opac-sendshelf.pl" method="post" id="sendshelfform">
34
                                    [% INCLUDE 'csrf-token.inc' %]
34
                                    <fieldset class="brief">
35
                                    <fieldset class="brief">
35
                                        <legend><h1>Sending your list</h1></legend>
36
                                        <legend><h1>Sending your list</h1></legend>
36
                                        <label for="email">Email address:</label>
37
                                        <label for="email">Email address:</label>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-serial-issues.tt (+1 lines)
Lines 55-60 Link Here
55
                            <span class="view"><a id="Fullhistory" href="opac-serial-issues.pl?selectview=full&amp;biblionumber=[% biblionumber | html %]" class="button">Full history</a></span>
55
                            <span class="view"><a id="Fullhistory" href="opac-serial-issues.pl?selectview=full&amp;biblionumber=[% biblionumber | html %]" class="button">Full history</a></span>
56
                        </div>
56
                        </div>
57
                        <form method="post" name="f">
57
                        <form method="post" name="f">
58
                            [% INCLUDE 'csrf-token.inc' %]
58
                            [% FOREACH subscription_LOO IN subscription_LOOP %]
59
                            [% FOREACH subscription_LOO IN subscription_LOOP %]
59
                                <div id="subscriptionline[% subscription_LOO.subscriptionid | html %]" class="subscriptionline">
60
                                <div id="subscriptionline[% subscription_LOO.subscriptionid | html %]" class="subscriptionline">
60
                                    <caption><h2>Subscription information for [% subscription_LOO.bibliotitle | html %]</h2><caption>
61
                                    <caption><h2>Subscription information for [% subscription_LOO.bibliotitle | html %]</h2><caption>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves.tt (+12 lines)
Lines 10-15 Link Here
10
10
11
[% BLOCK delete_shelf %]
11
[% BLOCK delete_shelf %]
12
    <form action="/cgi-bin/koha/opac-shelves.pl" method="post" id="deleteshelf[% shelf.shelfnumber | html %]" class="d-inline">
12
    <form action="/cgi-bin/koha/opac-shelves.pl" method="post" id="deleteshelf[% shelf.shelfnumber | html %]" class="d-inline">
13
        [% INCLUDE 'csrf-token.inc' %]
13
        <input type="hidden" name="op" value="delete" />
14
        <input type="hidden" name="op" value="delete" />
14
        <input type="hidden" name="referer" value="list" />
15
        <input type="hidden" name="referer" value="list" />
15
        <input type='hidden' name='public' value='[% public | html %]' />
16
        <input type='hidden' name='public' value='[% public | html %]' />
Lines 249-254 Link Here
249
                                        [% IF can_manage_shelf %]
250
                                        [% IF can_manage_shelf %]
250
                                            <span class="sep">|</span>
251
                                            <span class="sep">|</span>
251
                                            <form method="post" action="/cgi-bin/koha/opac-shelves.pl" class="d-inline">
252
                                            <form method="post" action="/cgi-bin/koha/opac-shelves.pl" class="d-inline">
253
                                                [% INCLUDE 'csrf-token.inc' %]
252
                                                <input type="hidden" name="op" value="edit_form" />
254
                                                <input type="hidden" name="op" value="edit_form" />
253
                                                <input type="hidden" name="referer" value="view" />
255
                                                <input type="hidden" name="referer" value="view" />
254
                                                <input type='hidden' name='public' value='[% shelf.public | html %]' />
256
                                                <input type='hidden' name='public' value='[% shelf.public | html %]' />
Lines 263-268 Link Here
263
                                            [% END %]
265
                                            [% END %]
264
                                        [% ELSIF !public # not manageshelf and private means shared %]
266
                                        [% ELSIF !public # not manageshelf and private means shared %]
265
                                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" id="unshare[% shelf.shelfnumber | html %]" class="d-inline">
267
                                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" id="unshare[% shelf.shelfnumber | html %]" class="d-inline">
268
                                                [% INCLUDE 'csrf-token.inc' %]
266
                                                <input type="hidden" name="op" value="remove_share" />
269
                                                <input type="hidden" name="op" value="remove_share" />
267
                                                <input type="hidden" name="referer" value="list" />
270
                                                <input type="hidden" name="referer" value="list" />
268
                                                <input type='hidden' name='public' value='[% public | html %]' />
271
                                                <input type='hidden' name='public' value='[% public | html %]' />
Lines 384-389 Link Here
384
                            </div> <!-- /#floating -->
387
                            </div> <!-- /#floating -->
385
388
386
                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" id="myform" name="myform">
389
                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" id="myform" name="myform">
390
                                [% INCLUDE 'csrf-token.inc' %]
387
                                [% IF can_manage_shelf %]
391
                                [% IF can_manage_shelf %]
388
                                    <input type="hidden" name="op" value="remove_biblios" />
392
                                    <input type="hidden" name="op" value="remove_biblios" />
389
                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
393
                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
Lines 547-552 Link Here
547
                                    [% IF can_manage_shelf %]
551
                                    [% IF can_manage_shelf %]
548
                                        <span class="sep">|</span>
552
                                        <span class="sep">|</span>
549
                                        <form method="post" action="/cgi-bin/koha/opac-shelves.pl" class="d-inline">
553
                                        <form method="post" action="/cgi-bin/koha/opac-shelves.pl" class="d-inline">
554
                                            [% INCLUDE 'csrf-token.inc' %]
550
                                            <input type="hidden" name="op" value="edit_form" />
555
                                            <input type="hidden" name="op" value="edit_form" />
551
                                            <input type="hidden" name="referer" value="view" />
556
                                            <input type="hidden" name="referer" value="view" />
552
                                            <input type="hidden" name="public" value="[% shelf.public | html %]" />
557
                                            <input type="hidden" name="public" value="[% shelf.public | html %]" />
Lines 569-574 Link Here
569
574
570
                            [% IF can_manage_shelf %]
575
                            [% IF can_manage_shelf %]
571
                                <form method="post" action="opac-shelves.pl">
576
                                <form method="post" action="opac-shelves.pl">
577
                                    [% INCLUDE 'csrf-token.inc' %]
572
                                    <input type="hidden" name="op" value="delete" />
578
                                    <input type="hidden" name="op" value="delete" />
573
                                    <input type="hidden" name="referer" value="list" />
579
                                    <input type="hidden" name="referer" value="list" />
574
                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]"/>
580
                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]"/>
Lines 580-585 Link Here
580
586
581
                    [% IF op == 'add_form' OR op == 'edit_form' %]
587
                    [% IF op == 'add_form' OR op == 'edit_form' %]
582
                        <form method="post" action="/cgi-bin/koha/opac-shelves.pl">
588
                        <form method="post" action="/cgi-bin/koha/opac-shelves.pl">
589
                            [% INCLUDE 'csrf-token.inc' %]
583
                            <fieldset class="rows">
590
                            <fieldset class="rows">
584
                                [% IF op == 'add_form' %]
591
                                [% IF op == 'add_form' %]
585
                                    <div id="addshelf">
592
                                    <div id="addshelf">
Lines 668-673 Link Here
668
                        <h1>Transfer ownership of shared list '[% shelf.shelfname | html %]'</h1>
675
                        <h1>Transfer ownership of shared list '[% shelf.shelfname | html %]'</h1>
669
                        <br/>
676
                        <br/>
670
                        <form action="/cgi-bin/koha/opac-shelves.pl" id="transferform" method="post">
677
                        <form action="/cgi-bin/koha/opac-shelves.pl" id="transferform" method="post">
678
                            [% INCLUDE 'csrf-token.inc' %]
671
                        <fieldset>
679
                        <fieldset>
672
                            <input type="hidden" name="op" value="transfer" />
680
                            <input type="hidden" name="op" value="transfer" />
673
                            <input type="hidden" name="public" value="0" />
681
                            <input type="hidden" name="public" value="0" />
Lines 764-769 Link Here
764
                                                    <td>
772
                                                    <td>
765
                                                        [% IF s.can_be_managed( loggedinusernumber ) %]
773
                                                        [% IF s.can_be_managed( loggedinusernumber ) %]
766
                                                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" class="d-inline">
774
                                                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" class="d-inline">
775
                                                                [% INCLUDE 'csrf-token.inc' %]
767
                                                                <input type="hidden" name="shelfnumber" value="[% s.shelfnumber | html %]" />
776
                                                                <input type="hidden" name="shelfnumber" value="[% s.shelfnumber | html %]" />
768
                                                                <input type="hidden" name="public" value="[% s.public | html %]" />
777
                                                                <input type="hidden" name="public" value="[% s.public | html %]" />
769
                                                                <input type="hidden" name="op" value="edit_form" />
778
                                                                <input type="hidden" name="op" value="edit_form" />
Lines 779-784 Link Here
779
                                                        [% END %]
788
                                                        [% END %]
780
                                                        [% IF s.is_shared AND s.can_be_managed( loggedinusernumber ) %]
789
                                                        [% IF s.is_shared AND s.can_be_managed( loggedinusernumber ) %]
781
                                                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" class="d-inline">
790
                                                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" class="d-inline">
791
                                                                [% INCLUDE 'csrf-token.inc' %]
782
                                                                <input type="hidden" name="shelfnumber" value="[% s.shelfnumber | html %]" />
792
                                                                <input type="hidden" name="shelfnumber" value="[% s.shelfnumber | html %]" />
783
                                                                <input type="hidden" name="public" value="0" />
793
                                                                <input type="hidden" name="public" value="0" />
784
                                                                <input type="hidden" name="op" value="transfer" />
794
                                                                <input type="hidden" name="op" value="transfer" />
Lines 788-793 Link Here
788
                                                        [% END %]
798
                                                        [% END %]
789
                                                        [% IF s.is_shared_with( loggedinusernumber ) %]
799
                                                        [% IF s.is_shared_with( loggedinusernumber ) %]
790
                                                            <form action="opac-shelves.pl" method="post" id="unshare[% s.shelfnumber | html %]" class="d-inline">
800
                                                            <form action="opac-shelves.pl" method="post" id="unshare[% s.shelfnumber | html %]" class="d-inline">
801
                                                                [% INCLUDE 'csrf-token.inc' %]
791
                                                                <input type="hidden" name="op" value="remove_share" />
802
                                                                <input type="hidden" name="op" value="remove_share" />
792
                                                                <input type="hidden" name="referer" value="list" />
803
                                                                <input type="hidden" name="referer" value="list" />
793
                                                                <input type='hidden' name='public' value='[% public | html %]' />
804
                                                                <input type='hidden' name='public' value='[% public | html %]' />
Lines 823-828 Link Here
823
</div> <!-- / .main -->
834
</div> <!-- / .main -->
824
835
825
<form method="post" id="download_list" action="/cgi-bin/koha/opac-downloadshelf.pl">
836
<form method="post" id="download_list" action="/cgi-bin/koha/opac-downloadshelf.pl">
837
    [% INCLUDE 'csrf-token.inc' %]
826
    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
838
    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
827
    <input type="hidden" name="format" id="download_format" value="" />
839
    <input type="hidden" name="format" id="download_format" value="" />
828
</form>
840
</form>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-suggestions.tt (+2 lines)
Lines 75-80 Link Here
75
                            [% END %]
75
                            [% END %]
76
76
77
                            <form action="/cgi-bin/koha/opac-suggestions.pl" method="post" id="add_suggestion_form">
77
                            <form action="/cgi-bin/koha/opac-suggestions.pl" method="post" id="add_suggestion_form">
78
                                [% INCLUDE 'csrf-token.inc' %]
78
                                <fieldset class="rows">
79
                                <fieldset class="rows">
79
                                    <ol>
80
                                    <ol>
80
                                        [% IF Koha.Preference( 'OPACSuggestionAutoFill' ) %]
81
                                        [% IF Koha.Preference( 'OPACSuggestionAutoFill' ) %]
Lines 368-373 Link Here
368
                            [% IF suggestions.size > 0 %]
369
                            [% IF suggestions.size > 0 %]
369
                                [% SET can_delete_suggestion = 0 %]
370
                                [% SET can_delete_suggestion = 0 %]
370
                                <form action="/cgi-bin/koha/opac-suggestions.pl" method="post" id="delete_suggestions">
371
                                <form action="/cgi-bin/koha/opac-suggestions.pl" method="post" id="delete_suggestions">
372
                                    [% INCLUDE 'csrf-token.inc' %]
371
                                    <input type="hidden" name="op" value="delete_confirm" />
373
                                    <input type="hidden" name="op" value="delete_confirm" />
372
                                    [% IF ( loggedinusername || ( Koha.Preference( 'AnonSuggestions' ) == 1 ) ) %]
374
                                    [% IF ( loggedinusername || ( Koha.Preference( 'AnonSuggestions' ) == 1 ) ) %]
373
                                        <div id="toolbar" class="toolbar clearfix">
375
                                        <div id="toolbar" class="toolbar clearfix">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-tags.tt (+1 lines)
Lines 133-138 Link Here
133
133
134
                        [% IF ( MY_TAGS ) %]
134
                        [% IF ( MY_TAGS ) %]
135
                        <form id="deletetags" method="post" action="opac-tags.pl">
135
                        <form id="deletetags" method="post" action="opac-tags.pl">
136
                            [% INCLUDE 'csrf-token.inc' %]
136
                            <table id="mytagst" class="table table-bordered table-striped">
137
                            <table id="mytagst" class="table table-bordered table-striped">
137
                            <caption>Your tags</caption>
138
                            <caption>Your tags</caption>
138
                                <thead>
139
                                <thead>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-tags_subject.tt (+1 lines)
Lines 43-48 Link Here
43
                                    <fieldset>
43
                                    <fieldset>
44
                                        <legend>Show</legend>
44
                                        <legend>Show</legend>
45
                                        <form class="form-inline" action="/cgi-bin/koha/opac-tags_subject.pl" method="post">
45
                                        <form class="form-inline" action="/cgi-bin/koha/opac-tags_subject.pl" method="post">
46
                                            [% INCLUDE 'csrf-token.inc' %]
46
                                            <p>up to <input type="text" name="number" value="[% number | html %]" size="4" maxlength="4" /> subjects <input type="submit" class="btn btn-primary" value="OK" /></p>
47
                                            <p>up to <input type="text" name="number" value="[% number | html %]" size="4" maxlength="4" /> subjects <input type="submit" class="btn btn-primary" value="OK" /></p>
47
                                        </form>
48
                                        </form>
48
                                    </fieldset>
49
                                    </fieldset>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt (+5 lines)
Lines 221-226 Link Here
221
221
222
                    [% IF Koha.Preference('AllowPatronToControlAutorenewal') %]
222
                    [% IF Koha.Preference('AllowPatronToControlAutorenewal') %]
223
                    <form id="autorenewal_option" action="/cgi-bin/koha/opac-user.pl" method="post">
223
                    <form id="autorenewal_option" action="/cgi-bin/koha/opac-user.pl" method="post">
224
                        [% INCLUDE 'csrf-token.inc' %]
224
                        <legend class="sr-only">Auto-renewal</legend>
225
                        <legend class="sr-only">Auto-renewal</legend>
225
                            <label for="yes-autorenew_checkouts">
226
                            <label for="yes-autorenew_checkouts">
226
                                Allow auto-renewal:
227
                                Allow auto-renewal:
Lines 320-325 Link Here
320
                            <div id="opac-user-checkouts" class="tab-pane active" role="tabpanel" aria-labelledby="opac-user-checkouts-tab">
321
                            <div id="opac-user-checkouts" class="tab-pane active" role="tabpanel" aria-labelledby="opac-user-checkouts-tab">
321
                                [% IF ( issues_count ) %]
322
                                [% IF ( issues_count ) %]
322
                                    <form id="renewselected" action="/cgi-bin/koha/opac-renew.pl" method="post">
323
                                    <form id="renewselected" action="/cgi-bin/koha/opac-renew.pl" method="post">
324
                                        [% INCLUDE 'csrf-token.inc' %]
323
                                        <legend class="sr-only">Renew selected</legend>
325
                                        <legend class="sr-only">Renew selected</legend>
324
                                        <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]">
326
                                        <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]">
325
                                        <input type="hidden" name="from" value="opac_user" />
327
                                        <input type="hidden" name="from" value="opac_user" />
Lines 559-564 Link Here
559
561
560
                                    [% IF ( canrenew && !userdebarred && OpacRenewalAllowed && !( logged_in_user.is_expired && logged_in_user.category.effective_BlockExpiredPatronOpacActions ) ) %]
562
                                    [% IF ( canrenew && !userdebarred && OpacRenewalAllowed && !( logged_in_user.is_expired && logged_in_user.category.effective_BlockExpiredPatronOpacActions ) ) %]
561
                                        <form id="renewall" class="js-hide" action="/cgi-bin/koha/opac-renew.pl" method="post">
563
                                        <form id="renewall" class="js-hide" action="/cgi-bin/koha/opac-renew.pl" method="post">
564
                                            [% INCLUDE 'csrf-token.inc' %]
562
                                            <legend class="sr-only">Renew</legend>
565
                                            <legend class="sr-only">Renew</legend>
563
                                            <input type="hidden" name="from" value="opac_user" />
566
                                            <input type="hidden" name="from" value="opac_user" />
564
                                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
567
                                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
Lines 900-905 Link Here
900
                                                <td class="cancelrecall">
903
                                                <td class="cancelrecall">
901
                                                    [% IF ( RECALL.requested or RECALL.overdue ) %]
904
                                                    [% IF ( RECALL.requested or RECALL.overdue ) %]
902
                                                        <form action="/cgi-bin/koha/opac-recall.pl" method="post">
905
                                                        <form action="/cgi-bin/koha/opac-recall.pl" method="post">
906
                                                            [% INCLUDE 'csrf-token.inc' %]
903
                                                            <input type="hidden" name="op" value="cancel">
907
                                                            <input type="hidden" name="op" value="cancel">
904
                                                            <input type="hidden" name="recall_id" value="[% RECALL.id | html %]">
908
                                                            <input type="hidden" name="recall_id" value="[% RECALL.id | html %]">
905
                                                            <input type="hidden" name="biblionumber" value="[% RECALL.biblio_id | html %]">
909
                                                            <input type="hidden" name="biblionumber" value="[% RECALL.biblio_id | html %]">
Lines 1040-1045 Link Here
1040
    <div class="modal-dialog">
1044
    <div class="modal-dialog">
1041
        <div class="modal-content">
1045
        <div class="modal-content">
1042
            <form action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
1046
            <form action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
1047
                [% INCLUDE 'csrf-token.inc' %]
1043
                <div class="modal-header">
1048
                <div class="modal-header">
1044
                    [% IF HOLD.suspend %]
1049
                    [% IF HOLD.suspend %]
1045
                        <h5 class="modal-title" id="suspendModalLabel">Resume hold</h5>
1050
                        <h5 class="modal-title" id="suspendModalLabel">Resume hold</h5>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/sci/sci-main.tt (+2 lines)
Lines 101-106 Link Here
101
                                    </table>
101
                                    </table>
102
                                    <div>
102
                                    <div>
103
                                        <form method="post" action="#" id="finish_form">
103
                                        <form method="post" action="#" id="finish_form">
104
                                            [% INCLUDE 'csrf-token.inc' %]
104
                                            <legend class="sr-only">Finish</legend>
105
                                            <legend class="sr-only">Finish</legend>
105
                                            <button id="sci_finish_button" type="submit" class="btn btn-primary"><i class="fa fa-check" aria-hidden="true"></i> Finish</button>
106
                                            <button id="sci_finish_button" type="submit" class="btn btn-primary"><i class="fa fa-check" aria-hidden="true"></i> Finish</button>
106
                                        </form>
107
                                        </form>
Lines 115-120 Link Here
115
                        [%# Prompt for barcodes %]
116
                        [%# Prompt for barcodes %]
116
                        <div id="new_checkins" class="sci_entry">
117
                        <div id="new_checkins" class="sci_entry">
117
                            <form id="scan_form" name="scan_form" method="post" action="/cgi-bin/koha/sci/sci-main.pl">
118
                            <form id="scan_form" name="scan_form" method="post" action="/cgi-bin/koha/sci/sci-main.pl">
119
                                [% INCLUDE 'csrf-token.inc' %]
118
                                <legend class="sr-only">Scan</legend>
120
                                <legend class="sr-only">Scan</legend>
119
                                <div class="row">
121
                                <div class="row">
120
                                    <div class="col-auto">
122
                                    <div class="col-auto">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/sco/sco-main.tt (-1 / +9 lines)
Lines 94-99 Link Here
94
94
95
                            [% IF ( returnitem && Koha.Preference('SCOAllowCheckin') ) %]
95
                            [% IF ( returnitem && Koha.Preference('SCOAllowCheckin') ) %]
96
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="errorForm" class="inline" method="post">
96
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="errorForm" class="inline" method="post">
97
                                    [% INCLUDE 'csrf-token.inc' %]
97
                                    <legend class="sr-only">Return</legend>
98
                                    <legend class="sr-only">Return</legend>
98
                                    <input type="hidden" name="op" value="returnbook" />
99
                                    <input type="hidden" name="op" value="returnbook" />
99
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
100
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
Lines 104-109 Link Here
104
                            [% END %]
105
                            [% END %]
105
106
106
                            <form action="/cgi-bin/koha/sco/sco-main.pl" name="errorForm" class="inline" method="post">
107
                            <form action="/cgi-bin/koha/sco/sco-main.pl" name="errorForm" class="inline" method="post">
108
                                [% INCLUDE 'csrf-token.inc' %]
107
                                <legend class="sr-only">Error</legend>
109
                                <legend class="sr-only">Error</legend>
108
                                <input type="hidden" name="op" value="" />
110
                                <input type="hidden" name="op" value="" />
109
                                <input type="hidden" name="patronid" value="[% patronid | html %]" />
111
                                <input type="hidden" name="patronid" value="[% patronid | html %]" />
Lines 123-128 Link Here
123
125
124
                            [% IF ( renew && Koha.Preference('SCOAllowCheckin') ) %]
126
                            [% IF ( renew && Koha.Preference('SCOAllowCheckin') ) %]
125
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
127
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
128
                                    [% INCLUDE 'csrf-token.inc' %]
126
                                    <legend class="sr-only">Return</legend>
129
                                    <legend class="sr-only">Return</legend>
127
                                    <input type="hidden" name="op" value="returnbook" />
130
                                    <input type="hidden" name="op" value="returnbook" />
128
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
131
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
Lines 135-140 Link Here
135
138
136
                            [% UNLESS ( renew ) %]
139
                            [% UNLESS ( renew ) %]
137
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
140
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
141
                                    [% INCLUDE 'csrf-token.inc' %]
138
                                    <legend class="sr-only">Renew</legend>
142
                                    <legend class="sr-only">Renew</legend>
139
                                    <input type="hidden" name="op" value="renew" />
143
                                    <input type="hidden" name="op" value="renew" />
140
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
144
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
Lines 145-150 Link Here
145
                                  </form>
149
                                  </form>
146
                            [% ELSE %]
150
                            [% ELSE %]
147
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
151
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
152
                                    [% INCLUDE 'csrf-token.inc' %]
148
                                    <legend class="sr-only">Renew</legend>
153
                                    <legend class="sr-only">Renew</legend>
149
                                    <input type="hidden" name="op" value="renew" />
154
                                    <input type="hidden" name="op" value="renew" />
150
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
155
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
Lines 156-161 Link Here
156
                            [% END %]
161
                            [% END %]
157
162
158
                            <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
163
                            <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
164
                                [% INCLUDE 'csrf-token.inc' %]
159
                                <legend class="sr-only">Cancel</legend>
165
                                <legend class="sr-only">Cancel</legend>
160
                                <input type="hidden" name="op" value="" />
166
                                <input type="hidden" name="op" value="" />
161
                                <input type="hidden" name="patronid" value="[% patronid | html %]" />
167
                                <input type="hidden" name="patronid" value="[% patronid | html %]" />
Lines 242-247 Link Here
242
                        [% IF ( validuser ) %]
248
                        [% IF ( validuser ) %]
243
                            <div id="newcheckout" class="sco_entry">
249
                            <div id="newcheckout" class="sco_entry">
244
                                <form id="scan_form" name="scan_form" method="post" action="/cgi-bin/koha/sco/sco-main.pl" onsubmit="return checkout_confirm('[% patronid | html %]');">
250
                                <form id="scan_form" name="scan_form" method="post" action="/cgi-bin/koha/sco/sco-main.pl" onsubmit="return checkout_confirm('[% patronid | html %]');">
251
                                    [% INCLUDE 'csrf-token.inc' %]
245
                                    <legend><h2>
252
                                    <legend><h2>
246
                                        [% IF ( Koha.Preference('SCOAllowCheckin') ) %]
253
                                        [% IF ( Koha.Preference('SCOAllowCheckin') ) %]
247
                                            <span>Check out, return, or renew an item:</span>
254
                                            <span>Check out, return, or renew an item:</span>
Lines 343-348 Link Here
343
                                                    [% END %]
350
                                                    [% END %]
344
                                                    <td>
351
                                                    <td>
345
                                                        <form action="/cgi-bin/koha/sco/sco-main.pl" method="post">
352
                                                        <form action="/cgi-bin/koha/sco/sco-main.pl" method="post">
353
                                                            [% INCLUDE 'csrf-token.inc' %]
346
                                                            <legend class="sr-only">Issue renews</legend>
354
                                                            <legend class="sr-only">Issue renews</legend>
347
                                                            <input type="hidden" name="patronid" value="[% patronid | html %]" />
355
                                                            <input type="hidden" name="patronid" value="[% patronid | html %]" />
348
                                                            <input type="hidden" name="barcode" value="[% ISSUE.barcode | html %]" />
356
                                                            <input type="hidden" name="barcode" value="[% ISSUE.barcode | html %]" />
Lines 403-408 Link Here
403
                        [% ELSE # IF validuser %]
411
                        [% ELSE # IF validuser %]
404
                            <div class="sco_entry" >
412
                            <div class="sco_entry" >
405
                                <form id="mainform" action="/cgi-bin/koha/sco/sco-main.pl" name="mainform" method="post">
413
                                <form id="mainform" action="/cgi-bin/koha/sco/sco-main.pl" name="mainform" method="post">
414
                                    [% INCLUDE 'csrf-token.inc' %]
406
                                    <fieldset>
415
                                    <fieldset>
407
                                        [% IF ( Koha.Preference('SelfCheckoutByLogin') ) %]
416
                                        [% IF ( Koha.Preference('SelfCheckoutByLogin') ) %]
408
                                            <legend>Log in to your account</legend>
417
                                            <legend>Log in to your account</legend>
409
- 

Return to bug 34478