View | Details | Raw Unified | Return to bug 34478
Collapse All | Expand All

(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt (+1 lines)
Lines 564-569 Link Here
564
                                            [% INCLUDE 'csrf-token.inc' %]
564
                                            [% INCLUDE 'csrf-token.inc' %]
565
                                            <legend class="sr-only">Renew</legend>
565
                                            <legend class="sr-only">Renew</legend>
566
                                            <input type="hidden" name="from" value="opac_user" />
566
                                            <input type="hidden" name="from" value="opac_user" />
567
                                            <input type="hidden" name="op" value="renew" />
567
                                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
568
                                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
568
                                            [% FOREACH ISSUE IN ISSUES %]
569
                                            [% FOREACH ISSUE IN ISSUES %]
569
                                                [% IF ISSUE.status %]
570
                                                [% IF ISSUE.status %]
(-)a/opac/opac-renew.pl (+3 lines)
Lines 31-36 use C4::Members; Link Here
31
use Koha::Items;
31
use Koha::Items;
32
use Koha::Patrons;
32
use Koha::Patrons;
33
my $query = CGI->new;
33
my $query = CGI->new;
34
my $op = $query->param('op') || q{};
35
36
die "op must be set" unless $op eq 'renew';
34
37
35
my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
38
my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
36
	{
39
	{
(-)a/opac/opac-user.pl (-2 / +3 lines)
Lines 57-62 use Date::Calc qw( Date_to_Days Today ); Link Here
57
57
58
my $query = CGI->new;
58
my $query = CGI->new;
59
59
60
my $op = $query->param('op') || q{};
61
60
# CAS single logout handling
62
# CAS single logout handling
61
# Will print header and exit
63
# Will print header and exit
62
if ( C4::Context->preference('casAuthentication') ) {
64
if ( C4::Context->preference('casAuthentication') ) {
Lines 87-93 $template->param( shibbolethAuthentication => C4::Context->config('useshibboleth Link Here
87
# get borrower information ....
89
# get borrower information ....
88
my $patron = Koha::Patrons->find( $borrowernumber );
90
my $patron = Koha::Patrons->find( $borrowernumber );
89
91
90
if( $query->param('update_arc') && C4::Context->preference("AllowPatronToControlAutorenewal") ){
92
if( $op eq 'update_arc' && C4::Context->preference("AllowPatronToControlAutorenewal") ){
91
    die "Wrong CSRF token"
93
    die "Wrong CSRF token"
92
        unless Koha::Token->new->check_csrf({
94
        unless Koha::Token->new->check_csrf({
93
            session_id => scalar $query->cookie('CGISESSID'),
95
            session_id => scalar $query->cookie('CGISESSID'),
94
- 

Return to bug 34478