View | Details | Raw Unified | Return to bug 34478
Collapse All | Expand All

(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-search.inc (+2 lines)
Lines 3-8 Link Here
3
    <div class="tab-content">
3
    <div class="tab-content">
4
        <div id="supplier_search" role="tabpanel" class="tab-pane active">
4
        <div id="supplier_search" role="tabpanel" class="tab-pane active">
5
            <form name="findsupplier" action="/cgi-bin/koha/acqui/booksellers.pl" method="post">
5
            <form name="findsupplier" action="/cgi-bin/koha/acqui/booksellers.pl" method="post">
6
                [% INCLUDE 'csrf-token.inc' %]
6
                <div class="form-title">
7
                <div class="form-title">
7
                    <label class="control-label" for="supplier"><span class="control-text">Vendor search</span> <i class="fa fa-fw fa-upload" aria-hidden="true"></i></label>
8
                    <label class="control-label" for="supplier"><span class="control-text">Vendor search</span> <i class="fa fa-fw fa-upload" aria-hidden="true"></i></label>
8
                </div>
9
                </div>
Lines 16-21 Link Here
16
17
17
        <div id="orders_search" role="tabpanel" class="tab-pane">
18
        <div id="orders_search" role="tabpanel" class="tab-pane">
18
            <form action="/cgi-bin/koha/acqui/histsearch.pl" method="post">
19
            <form action="/cgi-bin/koha/acqui/histsearch.pl" method="post">
20
                [% INCLUDE 'csrf-token.inc' %]
19
                <div class="form-title">
21
                <div class="form-title">
20
                    <label class="control-label" for="order_title"><span class="control-text">Orders search</span> <i class="fa fa-fw fa-download" aria-hidden="true"></i></label>
22
                    <label class="control-label" for="order_title"><span class="control-text">Orders search</span> <i class="fa fa-fw fa-download" aria-hidden="true"></i></label>
21
                </div>
23
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-toolbar.inc (+1 lines)
Lines 25-30 Link Here
25
                [% UNLESS ( basketcount OR subscriptioncount ) %]
25
                [% UNLESS ( basketcount OR subscriptioncount ) %]
26
                    <div class="btn-group">
26
                    <div class="btn-group">
27
                        <form action="/cgi-bin/koha/acqui/supplier.pl" method="post">
27
                        <form action="/cgi-bin/koha/acqui/supplier.pl" method="post">
28
                            [% INCLUDE 'csrf-token.inc' %]
28
                            <input type="hidden" name="op" value="delete" />
29
                            <input type="hidden" name="op" value="delete" />
29
                            <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
30
                            <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
30
                            <button class="btn btn-default" id="deletesupplier" type="submit"><i class="fa fa-trash-can"></i> Delete vendor</button>
31
                            <button class="btn btn-default" id="deletesupplier" type="submit"><i class="fa fa-trash-can"></i> Delete vendor</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/budgets-admin-search.inc (+1 lines)
Lines 6-11 Link Here
6
    <div class="tab-content">
6
    <div class="tab-content">
7
        <div id="budgets_search" role="tabpanel" class="tab-pane active">
7
        <div id="budgets_search" role="tabpanel" class="tab-pane active">
8
            <form action="/cgi-bin/koha/admin/aqbudgets.pl" method="post">
8
            <form action="/cgi-bin/koha/admin/aqbudgets.pl" method="post">
9
                [% INCLUDE 'csrf-token.inc' %]
9
                <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
10
                <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
10
11
11
                <div class="form-title">
12
                <div class="form-title">
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/checkin-search-box.inc (+1 lines)
Lines 6-11 Link Here
6
        <div id="checkin_search" role="tabpanel" class="tab-pane">
6
        <div id="checkin_search" role="tabpanel" class="tab-pane">
7
    [% END %]
7
    [% END %]
8
        <form method="post" action="/cgi-bin/koha/circ/returns.pl" autocomplete="off">
8
        <form method="post" action="/cgi-bin/koha/circ/returns.pl" autocomplete="off">
9
            [% INCLUDE 'csrf-token.inc' %]
9
            <div class="form-title">
10
            <div class="form-title">
10
                <label class="control-label" for="ret_barcode"><span class="control-text">Check in</span> <i class="fa fa-fw fa-download" aria-hidden="true"></i></label>
11
                <label class="control-label" for="ret_barcode"><span class="control-text">Check in</span> <i class="fa fa-fw fa-download" aria-hidden="true"></i></label>
11
            </div>
12
            </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/checkouts-table.inc (+1 lines)
Lines 16-21 Link Here
16
        </p>
16
        </p>
17
    </div>
17
    </div>
18
    <form name="issues" action="/cgi-bin/koha/tools/export.pl" method="post">
18
    <form name="issues" action="/cgi-bin/koha/tools/export.pl" method="post">
19
        [% INCLUDE 'csrf-token.inc' %]
19
        <table id="issues-table" style="width: 100% !Important;">
20
        <table id="issues-table" style="width: 100% !Important;">
20
            <thead>
21
            <thead>
21
                <tr>
22
                <tr>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/circ-menu.inc (+2 lines)
Lines 200-205 Link Here
200
                <div id="upload-patron-image" class="patroninfo-section">
200
                <div id="upload-patron-image" class="patroninfo-section">
201
                    <h5>Upload patron photo</h5>
201
                    <h5>Upload patron photo</h5>
202
                    <form method="post" id="picture-upload" action="/cgi-bin/koha/tools/picture-upload.pl"
202
                    <form method="post" id="picture-upload" action="/cgi-bin/koha/tools/picture-upload.pl"
203
                        [% INCLUDE 'csrf-token.inc' %]
203
                        enctype="multipart/form-data">
204
                        enctype="multipart/form-data">
204
                        [% IF ( patron.image ) %]
205
                        [% IF ( patron.image ) %]
205
                            <div class="hint">
206
                            <div class="hint">
Lines 232-237 Link Here
232
                <div id="capture-patron-image" class="patroninfo-section">
233
                <div id="capture-patron-image" class="patroninfo-section">
233
                    <h5>Take patron photo</h5>
234
                    <h5>Take patron photo</h5>
234
                    <form method="post" id="camera-upload" action="/cgi-bin/koha/tools/picture-upload.pl">
235
                    <form method="post" id="camera-upload" action="/cgi-bin/koha/tools/picture-upload.pl">
236
                        [% INCLUDE 'csrf-token.inc' %]
235
                        <div class="btn-toolbar">
237
                        <div class="btn-toolbar">
236
                            <div class="btn-group">
238
                            <div class="btn-group">
237
                                <button class="btn btn-default" id="takebutton"><i class="fa fa-camera"></i> Take photo</button>
239
                                <button class="btn btn-default" id="takebutton"><i class="fa fa-camera"></i> Take photo</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/cities-admin-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="city_search" role="tabpanel" class="tab-pane active">
5
        <div id="city_search" role="tabpanel" class="tab-pane active">
6
            <form action="[% script_name | html %]" method="post">
6
            <form action="[% script_name | html %]" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label" for="city_name_filter"><span class="control-text">Search cities</span> <i class="fa fa-fw fa-building" aria-hidden="true"></i></label>
9
                    <label class="control-label" for="city_name_filter"><span class="control-text">Search cities</span> <i class="fa fa-fw fa-building" aria-hidden="true"></i></label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/contracts-admin-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="contract_description_search" role="tabpanel" class="tab-pane active">
5
        <div id="contract_description_search" role="tabpanel" class="tab-pane active">
6
            <form action="[% script_name | html %]" method="post">
6
            <form action="[% script_name | html %]" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label" for="searchfield"><span class="control-text">Search contracts</span> <i class="fa-solid fa-fw fa-pen-to-square" aria-hidden="true"></i></label>
9
                    <label class="control-label" for="searchfield"><span class="control-text">Search contracts</span> <i class="fa-solid fa-fw fa-pen-to-square" aria-hidden="true"></i></label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/currencies-admin-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="currency_search" role="tabpanel" class="tab-pane active">
5
        <div id="currency_search" role="tabpanel" class="tab-pane active">
6
            <form action="[% script_name | html %]" method="post">
6
            <form action="[% script_name | html %]" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label" for="description"><span class="control-text">Search currencies</span> <i class="fa-solid fa-fw fa-dollar-sign" aria-hidden="true"></i></label>
9
                    <label class="control-label" for="description"><span class="control-text">Search currencies</span> <i class="fa-solid fa-fw fa-dollar-sign" aria-hidden="true"></i></label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/desks-admin-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="desk_search" role="tabpanel" class="tab-pane active">
5
        <div id="desk_search" role="tabpanel" class="tab-pane active">
6
            <form action="[% script_name|html %]" method="post">
6
            <form action="[% script_name|html %]" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label" for="desk_name"><span class="control-text">Search desks</span> <i class="fa fa-fw fa-desktop" aria-hidden="true"></i></label>
9
                    <label class="control-label" for="desk_name"><span class="control-text">Search desks</span> <i class="fa fa-fw fa-desktop" aria-hidden="true"></i></label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/letters-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="notices_search" role="tabpanel" class="tab-pane active">
5
        <div id="notices_search" role="tabpanel" class="tab-pane active">
6
            <form action="/cgi-bin/koha/tools/letter.pl" method="post">
6
            <form action="/cgi-bin/koha/tools/letter.pl" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label" for="searchfield"><span class="control-text">Search notices</span> <i class="fa-solid fa-fw fa-comment-dots" aria-hidden="true"></i></label>
9
                    <label class="control-label" for="searchfield"><span class="control-text">Search notices</span> <i class="fa-solid fa-fw fa-comment-dots" aria-hidden="true"></i></label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/mana/mana-share-report.inc (+1 lines)
Lines 2-7 Link Here
2
    <div class="modal-dialog modal-wide" role="document">
2
    <div class="modal-dialog modal-wide" role="document">
3
        <div class="modal-content">
3
        <div class="modal-content">
4
            <form method="post" id="mana_share_form" action="/cgi-bin/koha/reports/guided_reports.pl">
4
            <form method="post" id="mana_share_form" action="/cgi-bin/koha/reports/guided_reports.pl">
5
                [% INCLUDE 'csrf-token.inc' %]
5
                <div class="modal-header">
6
                <div class="modal-header">
6
                    <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
7
                    <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
7
                    <h3 id="mana_share_modal_label">Share with Mana</h3>
8
                    <h3 id="mana_share_modal_label">Share with Mana</h3>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/member-search-box.inc (+1 lines)
Lines 11-16 Link Here
11
        <div id="patron_search" role="tabpanel" class="tab-pane">
11
        <div id="patron_search" role="tabpanel" class="tab-pane">
12
    [% END %]
12
    [% END %]
13
        <form method="post" action="/cgi-bin/koha/members/member.pl">
13
        <form method="post" action="/cgi-bin/koha/members/member.pl">
14
            [% INCLUDE 'csrf-token.inc' %]
14
            <input type="hidden" name="quicksearch" value="1" />
15
            <input type="hidden" name="quicksearch" value="1" />
15
16
16
            <div class="form-title">
17
            <div class="form-title">
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/members-toolbar.inc (+1 lines)
Lines 112-117 Link Here
112
    <div class="modal-dialog">
112
    <div class="modal-dialog">
113
        <div class="modal-content">
113
        <div class="modal-content">
114
            <form method="post" action="/cgi-bin/koha/circ/add_message.pl" id="message_form" name="message_f">
114
            <form method="post" action="/cgi-bin/koha/circ/add_message.pl" id="message_form" name="message_f">
115
                [% INCLUDE 'csrf-token.inc' %]
115
                <div class="modal-header">
116
                <div class="modal-header">
116
                    <h3>Leave a message</h3>
117
                    <h3>Leave a message</h3>
117
                </div>
118
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/modals/cataloguing_create_av.inc (+1 lines)
Lines 6-11 Link Here
6
                <h3 id="avCreateLabel">Create a new authorized value</h3>
6
                <h3 id="avCreateLabel">Create a new authorized value</h3>
7
            </div>
7
            </div>
8
            <form id="add_new_av" method="post">
8
            <form id="add_new_av" method="post">
9
                [% INCLUDE 'csrf-token.inc' %]
9
                <div class="modal-body">
10
                <div class="modal-body">
10
                    <fieldset class="rows">
11
                    <fieldset class="rows">
11
                        <ol>
12
                        <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/modals/serials_multi_receiving.inc (+1 lines)
Lines 2-7 Link Here
2
    <div class="modal-dialog">
2
    <div class="modal-dialog">
3
        <div class="modal-content">
3
        <div class="modal-content">
4
            <form action="/cgi-bin/koha/serials/serials-collection.pl" method="post">
4
            <form action="/cgi-bin/koha/serials/serials-collection.pl" method="post">
5
                [% INCLUDE 'csrf-token.inc' %]
5
                <div class="modal-body">
6
                <div class="modal-body">
6
                    <fieldset class="rows">
7
                    <fieldset class="rows">
7
                        <legend>Multi receiving</legend>
8
                        <legend>Multi receiving</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/patron-detail-tabs.inc (+3 lines)
Lines 138-143 Link Here
138
            [% WRAPPER tab_panel tabname="holds" %]
138
            [% WRAPPER tab_panel tabname="holds" %]
139
                [% IF ( holds_count ) %]
139
                [% IF ( holds_count ) %]
140
                    <form action="/cgi-bin/koha/reserve/modrequest.pl" method="post">
140
                    <form action="/cgi-bin/koha/reserve/modrequest.pl" method="post">
141
                        [% INCLUDE 'csrf-token.inc' %]
141
                        <input type="hidden" name="from" value="circ" />
142
                        <input type="hidden" name="from" value="circ" />
142
                        <table id="holds-table" style="width: 100% !Important;">
143
                        <table id="holds-table" style="width: 100% !Important;">
143
                            <thead>
144
                            <thead>
Lines 175-180 Link Here
175
176
176
                    [% IF Koha.Preference('SuspendHoldsIntranet') %]
177
                    [% IF Koha.Preference('SuspendHoldsIntranet') %]
177
                        <form action="/cgi-bin/koha/reserve/modrequest_suspendall.pl" method="post">
178
                        <form action="/cgi-bin/koha/reserve/modrequest_suspendall.pl" method="post">
179
                            [% INCLUDE 'csrf-token.inc' %]
178
                            <fieldset class="action">
180
                            <fieldset class="action">
179
                                <input type="hidden" name="from" value="[% patronpage | html %]" />
181
                                <input type="hidden" name="from" value="[% patronpage | html %]" />
180
                                <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
182
                                <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
Lines 189-194 Link Here
189
                        </form>
191
                        </form>
190
192
191
                        <form action="/cgi-bin/koha/reserve/modrequest_suspendall.pl" method="post">
193
                        <form action="/cgi-bin/koha/reserve/modrequest_suspendall.pl" method="post">
194
                            [% INCLUDE 'csrf-token.inc' %]
192
                            <fieldset class="action">
195
                            <fieldset class="action">
193
                                <input type="hidden" name="from" value="borrower" />
196
                                <input type="hidden" name="from" value="borrower" />
194
                                <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
197
                                <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/patron-restrictions-tab.inc (+1 lines)
Lines 47-52 Link Here
47
[% IF CAN_user_borrowers_edit_borrowers && CAN_user_circulate_manage_restrictions %]
47
[% IF CAN_user_borrowers_edit_borrowers && CAN_user_circulate_manage_restrictions %]
48
    <p><a href="#" id="add_manual_restriction"><i class="fa fa-plus"></i> Add manual restriction</a></p>
48
    <p><a href="#" id="add_manual_restriction"><i class="fa fa-plus"></i> Add manual restriction</a></p>
49
    <form method="post" action="/cgi-bin/koha/members/mod_debarment.pl" class="clearfix">
49
    <form method="post" action="/cgi-bin/koha/members/mod_debarment.pl" class="clearfix">
50
        [% INCLUDE 'csrf-token.inc' %]
50
        <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
51
        <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
51
        <input type="hidden" name="action" value="add" />
52
        <input type="hidden" name="action" value="add" />
52
        <fieldset class="rows" id="manual_restriction_form">
53
        <fieldset class="rows" id="manual_restriction_form">
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/patron-search-box.inc (+1 lines)
Lines 6-11 Link Here
6
        <div id="circ_search" role="tabpanel" class="tab-pane">
6
        <div id="circ_search" role="tabpanel" class="tab-pane">
7
    [% END %]
7
    [% END %]
8
        <form action="/cgi-bin/koha/circ/circulation.pl" id="patronsearch" method="post">
8
        <form action="/cgi-bin/koha/circ/circulation.pl" id="patronsearch" method="post">
9
            [% INCLUDE 'csrf-token.inc' %]
9
            <div class="form-title">
10
            <div class="form-title">
10
                <label class="control-label" for="findborrower"><span class="control-text">Check out</span> <i class="fa fa-fw fa-upload" aria-hidden="true"></i></label>
11
                <label class="control-label" for="findborrower"><span class="control-text">Check out</span> <i class="fa fa-fw fa-upload" aria-hidden="true"></i></label>
11
            </div>
12
            </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/patron_messages.inc (+1 lines)
Lines 335-340 Link Here
335
            <div class="modal-dialog">
335
            <div class="modal-dialog">
336
                <div class="modal-content">
336
                <div class="modal-content">
337
                    <form method="post" action="/cgi-bin/koha/circ/add_message.pl" id="message_form" name="message_f">
337
                    <form method="post" action="/cgi-bin/koha/circ/add_message.pl" id="message_form" name="message_f">
338
                        [% INCLUDE 'csrf-token.inc' %]
338
                        <input type="hidden" name="message_id" value="[% pm.message_id | html %]"/>
339
                        <input type="hidden" name="message_id" value="[% pm.message_id | html %]"/>
339
                        <div class="modal-header">
340
                        <div class="modal-header">
340
                            <h3>Edit message</h3>
341
                            <h3>Edit message</h3>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/patrons-admin-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="patron_category_search" role="tabpanel" class="tab-pane active">
5
        <div id="patron_category_search" role="tabpanel" class="tab-pane active">
6
            <form action="[% script_name | html %]" method="post">
6
            <form action="[% script_name | html %]" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label" for="category_search"><span class="control-text">Search patron categories</span> <i class="fa fa-fw fa-id-card" aria-hidden="true"></i></label>
9
                    <label class="control-label" for="category_search"><span class="control-text">Search patron categories</span> <i class="fa fa-fw fa-id-card" aria-hidden="true"></i></label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/renew-search-box.inc (+1 lines)
Lines 6-11 Link Here
6
        <div id="renew_search" role="tabpanel" class="tab-pane">
6
        <div id="renew_search" role="tabpanel" class="tab-pane">
7
    [% END %]
7
    [% END %]
8
        <form method="post" action="/cgi-bin/koha/circ/renew.pl" autocomplete="off">
8
        <form method="post" action="/cgi-bin/koha/circ/renew.pl" autocomplete="off">
9
            [% INCLUDE 'csrf-token.inc' %]
9
            <div class="form-title">
10
            <div class="form-title">
10
                <label class="control-label" for="ren_barcode"><span class="control-text">Renew</span> <i class="fa fa-fw fa-retweet" aria-hidden="true"></i></label>
11
                <label class="control-label" for="ren_barcode"><span class="control-text">Renew</span> <i class="fa fa-fw fa-retweet" aria-hidden="true"></i></label>
11
            </div>
12
            </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/virtualshelves-toolbar.inc (+1 lines)
Lines 20-25 Link Here
20
                <li>
20
                <li>
21
                    <a id="deleteshelf_toolbar" href="#">Delete list</a>
21
                    <a id="deleteshelf_toolbar" href="#">Delete list</a>
22
                    <form id="deleteshelf_toolbar_form" action="shelves.pl" method="post">
22
                    <form id="deleteshelf_toolbar_form" action="shelves.pl" method="post">
23
                        [% INCLUDE 'csrf-token.inc' %]
23
                        [% INCLUDE 'csrf-token.inc' %]
24
                        [% INCLUDE 'csrf-token.inc' %]
24
                        <input type="hidden" name="op" value="delete">
25
                        <input type="hidden" name="op" value="delete">
25
                        <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]">
26
                        <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]">
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/waiting_holds.inc (+1 lines)
Lines 67-72 Link Here
67
                <td>[% reserveloo.item.enumchron | html %]</td>
67
                <td>[% reserveloo.item.enumchron | html %]</td>
68
                <td>
68
                <td>
69
                    <form name="cancelReserve" action="waitingreserves.pl" method="post">
69
                    <form name="cancelReserve" action="waitingreserves.pl" method="post">
70
                        [% INCLUDE 'csrf-token.inc' %]
70
                        <input type="hidden" name="borrowernumber" value="[% reserveloo.borrower.borrowernumber | html %]" />
71
                        <input type="hidden" name="borrowernumber" value="[% reserveloo.borrower.borrowernumber | html %]" />
71
                        <input type="hidden" name="itemnumber" value="[% reserveloo.item.itemnumber | html %]" />
72
                        <input type="hidden" name="itemnumber" value="[% reserveloo.item.itemnumber | html %]" />
72
                        <input type="hidden" name="fbr" value="[% reserveloo.item.holdingbranch | html %]" />
73
                        <input type="hidden" name="fbr" value="[% reserveloo.item.holdingbranch | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/z3950-admin-search.inc (+1 lines)
Lines 4-9 Link Here
4
    <div class="tab-content">
4
    <div class="tab-content">
5
        <div id="z3950_search" role="tabpanel" class="tab-pane active">
5
        <div id="z3950_search" role="tabpanel" class="tab-pane active">
6
            <form action="/cgi-bin/koha/admin/z3950servers.pl" method="post">
6
            <form action="/cgi-bin/koha/admin/z3950servers.pl" method="post">
7
                [% INCLUDE 'csrf-token.inc' %]
7
                <div class="form-title">
8
                <div class="form-title">
8
                    <label class="control-label" for="searchfield"><span class="control-text">Search Z39.50/SRU servers</span> <i class="fa fa-fw fa-search" aria-hidden="true"></i></label>
9
                    <label class="control-label" for="searchfield"><span class="control-text">Search Z39.50/SRU servers</span> <i class="fa fa-fw fa-search" aria-hidden="true"></i></label>
9
                </div>
10
                </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/acqui-home.tt (+1 lines)
Lines 53-58 Link Here
53
    <fieldset>
53
    <fieldset>
54
        <legend>Manage orders</legend>
54
        <legend>Manage orders</legend>
55
        <form name="findsupplier" action="/cgi-bin/koha/acqui/booksellers.pl" method="post">
55
        <form name="findsupplier" action="/cgi-bin/koha/acqui/booksellers.pl" method="post">
56
            [% INCLUDE 'csrf-token.inc' %]
56
            <p><label for="supplierpage">Vendor: </label><input type="text" size="25" name="supplier" id="supplierpage" class="focus" />
57
            <p><label for="supplierpage">Vendor: </label><input type="text" size="25" name="supplier" id="supplierpage" class="focus" />
57
            <input type="submit" class="btn btn-primary" value="Search" />
58
            <input type="submit" class="btn btn-primary" value="Search" />
58
            </p>
59
            </p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/addorder.tt (+1 lines)
Lines 15-20 Link Here
15
    <div class="container-fluid">
15
    <div class="container-fluid">
16
      [% IF (not_enough_budget) %]
16
      [% IF (not_enough_budget) %]
17
        <form action="/cgi-bin/koha/acqui/addorder.pl" method="post">
17
        <form action="/cgi-bin/koha/acqui/addorder.pl" method="post">
18
            [% INCLUDE 'csrf-token.inc' %]
18
          [% FOREACH var IN vars_loop %]
19
          [% FOREACH var IN vars_loop %]
19
            [% FOREACH val IN var.values %]
20
            [% FOREACH val IN var.values %]
20
              <input type="hidden" name="[% var.name | html %]" value="[% val | html %]" />
21
              <input type="hidden" name="[% var.name | html %]" value="[% val | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/addorderiso2709.tt (+1 lines)
Lines 94-99 Link Here
94
                        ([% file_name | html %] staged on [% upload_timestamp | $KohaDates  with_hours => 1 %])
94
                        ([% file_name | html %] staged on [% upload_timestamp | $KohaDates  with_hours => 1 %])
95
                    </h1>
95
                    </h1>
96
                    <form action="/cgi-bin/koha/acqui/addorderiso2709.pl" method="post" id="Aform" class="validated">
96
                    <form action="/cgi-bin/koha/acqui/addorderiso2709.pl" method="post" id="Aform" class="validated">
97
                        [% INCLUDE 'csrf-token.inc' %]
97
                        [% WRAPPER tabs id= "tabs" %]
98
                        [% WRAPPER tabs id= "tabs" %]
98
                            [% WRAPPER tabs_nav %]
99
                            [% WRAPPER tabs_nav %]
99
                                [% WRAPPER tab_item tabname= "records_to_import" bt_active= 1 %] <span>Select to import</span> [% END %]
100
                                [% WRAPPER tab_item tabname= "records_to_import" bt_active= 1 %] <span>Select to import</span> [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt (+6 lines)
Lines 106-111 Link Here
106
                                        [% IF ( active && books_loop ) %]
106
                                        [% IF ( active && books_loop ) %]
107
                                            <div class="btn-group">
107
                                            <div class="btn-group">
108
                                                <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
108
                                                <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
109
                                                    [% INCLUDE 'csrf-token.inc' %]
109
                                                    <input type="hidden" name="op" value="email" />
110
                                                    <input type="hidden" name="op" value="email" />
110
                                                    <input type="hidden" name="basketno" value="[% basketno | html %]" />
111
                                                    <input type="hidden" name="basketno" value="[% basketno | html %]" />
111
                                                    <button type="submit" class="btn btn-default" id="emailvendorbutton"><i class="fa-solid fa-envelope"></i> E-mail order</button>
112
                                                    <button type="submit" class="btn btn-default" id="emailvendorbutton"><i class="fa-solid fa-envelope"></i> E-mail order</button>
Lines 309-314 Link Here
309
                                                    <ol>
310
                                                    <ol>
310
                                                        <li id="managedby">
311
                                                        <li id="managedby">
311
                                                            <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
312
                                                            <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
313
                                                                [% INCLUDE 'csrf-token.inc' %]
312
                                                                <span class="label">[% tp('Acquisitions basket managed by user', 'Managed by:') | html %]</span>
314
                                                                <span class="label">[% tp('Acquisitions basket managed by user', 'Managed by:') | html %]</span>
313
                                                                <div style="display:inline-block">
315
                                                                <div style="display:inline-block">
314
                                                                    <ul id="users_names" style="padding-left:0">
316
                                                                    <ul id="users_names" style="padding-left:0">
Lines 347-352 Link Here
347
                                                                <span class="label">&nbsp;</span>
349
                                                                <span class="label">&nbsp;</span>
348
                                                                <div>
350
                                                                <div>
349
                                                                    <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
351
                                                                    <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
352
                                                                        [% INCLUDE 'csrf-token.inc' %]
350
                                                                        <select id="select_managing_library" name="branch">
353
                                                                        <select id="select_managing_library" name="branch">
351
                                                                            <option value="">(no library)</option>
354
                                                                            <option value="">(no library)</option>
352
                                                                            [% FOREACH branch IN branches_loop %]
355
                                                                            [% FOREACH branch IN branches_loop %]
Lines 406-411 Link Here
406
                                                                    <span class="label">&nbsp;</span>
409
                                                                    <span class="label">&nbsp;</span>
407
                                                                    <div style="float:left">
410
                                                                    <div style="float:left">
408
                                                                        <form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post">
411
                                                                        <form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post">
412
                                                                            [% INCLUDE 'csrf-token.inc' %]
409
                                                                            <select id="basketgroupid" name="basketgroupid">
413
                                                                            <select id="basketgroupid" name="basketgroupid">
410
                                                                                <option value="">No group</option>
414
                                                                                <option value="">No group</option>
411
                                                                                [% FOREACH bg IN basketgroups %]
415
                                                                                [% FOREACH bg IN basketgroups %]
Lines 884-889 Link Here
884
    <div class="modal" id="noteEditor" tabindex="-1" role="dialog" aria-labelledby="noteEditorLabel">
888
    <div class="modal" id="noteEditor" tabindex="-1" role="dialog" aria-labelledby="noteEditorLabel">
885
        <div class="modal-dialog" role="document">
889
        <div class="modal-dialog" role="document">
886
            <form id="modify_order_notes" action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
890
            <form id="modify_order_notes" action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
891
                [% INCLUDE 'csrf-token.inc' %]
887
                <div class="modal-content">
892
                <div class="modal-content">
888
                    <div class="modal-header">
893
                    <div class="modal-header">
889
                        <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
894
                        <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
Lines 908-913 Link Here
908
    <div class="modal" id="dateEditor" tabindex="-1" role="dialog" aria-labelledby="dateEditorLabel">
913
    <div class="modal" id="dateEditor" tabindex="-1" role="dialog" aria-labelledby="dateEditorLabel">
909
        <div class="modal-dialog" role="document">
914
        <div class="modal-dialog" role="document">
910
            <form id="modify_estimated_delivery_date" action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
915
            <form id="modify_estimated_delivery_date" action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
916
                [% INCLUDE 'csrf-token.inc' %]
911
                <div class="modal-content">
917
                <div class="modal-content">
912
                    <div class="modal-header">
918
                    <div class="modal-header">
913
                        <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
919
                        <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basketgroup.tt (+1 lines)
Lines 121-126 Link Here
121
                            <div class="col-xs-6 col-xs-pull-6">
121
                            <div class="col-xs-6 col-xs-pull-6">
122
                        [% END %]
122
                        [% END %]
123
                            <form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post" id="groupingform">
123
                            <form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post" id="groupingform">
124
                                [% INCLUDE 'csrf-token.inc' %]
124
                                <fieldset id="various" class="brief">
125
                                <fieldset id="various" class="brief">
125
                                    <ol>
126
                                    <ol>
126
                                        [% UNLESS (closedbg) %]
127
                                        [% UNLESS (closedbg) %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basketheader.tt (+1 lines)
Lines 56-61 Link Here
56
        [% ELSE %]<h1>Add a basket to [% booksellername | html %]</h1>
56
        [% ELSE %]<h1>Add a basket to [% booksellername | html %]</h1>
57
        [% END %]
57
        [% END %]
58
    <form name="Aform" action="[% script_name | html %]" method="post" class="validated">
58
    <form name="Aform" action="[% script_name | html %]" method="post" class="validated">
59
        [% INCLUDE 'csrf-token.inc' %]
59
        <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
60
        <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
60
        <fieldset class="rows">
61
        <fieldset class="rows">
61
            <ol>
62
            <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/cancelorder.tt (+1 lines)
Lines 35-40 Link Here
35
35
36
      [% UNLESS ( confirmcancel ) %]
36
      [% UNLESS ( confirmcancel ) %]
37
      <form method="post" action="">
37
      <form method="post" action="">
38
          [% INCLUDE 'csrf-token.inc' %]
38
        <div class="dialog alert">
39
        <div class="dialog alert">
39
          <h1>Are you sure you want to cancel this order ([% ordernumber | html %])</h1>
40
          <h1>Are you sure you want to cancel this order ([% ordernumber | html %])</h1>
40
          <p>
41
          <p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/duplicate_orders.tt (+3 lines)
Lines 55-60 Link Here
55
55
56
[% IF op == 'search' || op == 'select' %]
56
[% IF op == 'search' || op == 'select' %]
57
<form action="/cgi-bin/koha/acqui/duplicate_orders.pl" method="post">
57
<form action="/cgi-bin/koha/acqui/duplicate_orders.pl" method="post">
58
    [% INCLUDE 'csrf-token.inc' %]
58
    <fieldset class="rows">
59
    <fieldset class="rows">
59
        <legend>
60
        <legend>
60
            [% IF op == 'search' %]
61
            [% IF op == 'search' %]
Lines 137-142 Link Here
137
138
138
[% IF op == 'select' && ( result_order_loop || selected_order_loop ) %]
139
[% IF op == 'select' && ( result_order_loop || selected_order_loop ) %]
139
<form method="post" action="/cgi-bin/koha/acqui/duplicate_orders.pl">
140
<form method="post" action="/cgi-bin/koha/acqui/duplicate_orders.pl">
141
    [% INCLUDE 'csrf-token.inc' %]
140
    <div id="orders_to_copy" class="page-section">
142
    <div id="orders_to_copy" class="page-section">
141
        <table id="table_orders">
143
        <table id="table_orders">
142
            <caption>
144
            <caption>
Lines 184-189 Link Here
184
[% ELSIF op == "batch_edit" %]
186
[% ELSIF op == "batch_edit" %]
185
187
186
<form method="post" action="/cgi-bin/koha/acqui/duplicate_orders.pl" id="batch_edit_form">
188
<form method="post" action="/cgi-bin/koha/acqui/duplicate_orders.pl" id="batch_edit_form">
189
    [% INCLUDE 'csrf-token.inc' %]
187
    <div id="accounting_details">
190
    <div id="accounting_details">
188
      <p>Duplicate all the orders with the following accounting details:</p>
191
      <p>Duplicate all the orders with the following accounting details:</p>
189
      <fieldset class="rows" style="float:none;">
192
      <fieldset class="rows" style="float:none;">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/histsearch.tt (+1 lines)
Lines 202-207 Link Here
202
202
203
[% BLOCK filter_form %]
203
[% BLOCK filter_form %]
204
    <form action="/cgi-bin/koha/acqui/histsearch.pl" method="post">
204
    <form action="/cgi-bin/koha/acqui/histsearch.pl" method="post">
205
        [% INCLUDE 'csrf-token.inc' %]
205
        [% IF ( context == "sidebar" ) %]
206
        [% IF ( context == "sidebar" ) %]
206
            <fieldset class="brief">
207
            <fieldset class="brief">
207
                <h4>Search orders</h4>
208
                <h4>Search orders</h4>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/invoice-files.tt (+1 lines)
Lines 87-92 Link Here
87
      [% IF invoiceid %]
87
      [% IF invoiceid %]
88
          <br />
88
          <br />
89
          <form method="post" action="/cgi-bin/koha/acqui/invoice-files.pl" enctype="multipart/form-data">
89
          <form method="post" action="/cgi-bin/koha/acqui/invoice-files.pl" enctype="multipart/form-data">
90
              [% INCLUDE 'csrf-token.inc' %]
90
              <fieldset class="rows">
91
              <fieldset class="rows">
91
                  <legend>Upload new file</legend>
92
                  <legend>Upload new file</legend>
92
                  <ol>
93
                  <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/invoice.tt (+2 lines)
Lines 61-66 Link Here
61
                <p>Vendor: <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid | uri %]">[% suppliername | html %]</a></p>
61
                <p>Vendor: <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid | uri %]">[% suppliername | html %]</a></p>
62
62
63
                <form action="/cgi-bin/koha/acqui/invoice.pl" method="post" class="validated">
63
                <form action="/cgi-bin/koha/acqui/invoice.pl" method="post" class="validated">
64
                    [% INCLUDE 'csrf-token.inc' %]
64
                    <fieldset class="rows">
65
                    <fieldset class="rows">
65
                        <ol>
66
                        <ol>
66
                            <li>
67
                            <li>
Lines 147-152 Link Here
147
                </form>
148
                </form>
148
149
149
                <form action="/cgi-bin/koha/acqui/invoice.pl" method="post" class="validated">
150
                <form action="/cgi-bin/koha/acqui/invoice.pl" method="post" class="validated">
151
                    [% INCLUDE 'csrf-token.inc' %]
150
                    <fieldset class="rows">
152
                    <fieldset class="rows">
151
                        <input type="hidden" name="invoiceid" value="[% invoiceid | html %]" />
153
                        <input type="hidden" name="invoiceid" value="[% invoiceid | html %]" />
152
                        <h3>Adjustments</h3>
154
                        <h3>Adjustments</h3>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/invoices.tt (+1 lines)
Lines 168-173 Link Here
168
168
169
                        <div id="merge_invoices">
169
                        <div id="merge_invoices">
170
                            <form id="merge_invoice_form" class="validated" action="/cgi-bin/koha/acqui/invoice.pl" method="post">
170
                            <form id="merge_invoice_form" class="validated" action="/cgi-bin/koha/acqui/invoice.pl" method="post">
171
                                [% INCLUDE 'csrf-token.inc' %]
171
                                <fieldset class="rows">
172
                                <fieldset class="rows">
172
                                    <ol>
173
                                    <ol>
173
                                        <li><h2>Merge invoices</h2></li>
174
                                        <li><h2>Merge invoices</h2></li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/lateorders.tt (+3 lines)
Lines 53-58 Link Here
53
[% END %]
53
[% END %]
54
[% IF lateorders.size %]
54
[% IF lateorders.size %]
55
<form action="lateorders.pl" name="claim" method="post">
55
<form action="lateorders.pl" name="claim" method="post">
56
    [% INCLUDE 'csrf-token.inc' %]
56
  <input type="hidden" name="op" value="send_alert" />
57
  <input type="hidden" name="op" value="send_alert" />
57
  <input type="hidden" name="delay" value="[% delay | html %]" />
58
  <input type="hidden" name="delay" value="[% delay | html %]" />
58
  <input type="hidden" name="booksellerid" value="[% bookseller_filter.id | html %]" />
59
  <input type="hidden" name="booksellerid" value="[% bookseller_filter.id | html %]" />
Lines 277-282 Link Here
277
<div class="modal" id="noteEditor" tabindex="-1" role="dialog" aria-labelledby="noteEditorLabel">
278
<div class="modal" id="noteEditor" tabindex="-1" role="dialog" aria-labelledby="noteEditorLabel">
278
    <div class="modal-dialog" role="document">
279
    <div class="modal-dialog" role="document">
279
        <form id="modify_order_notes" action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
280
        <form id="modify_order_notes" action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
281
            [% INCLUDE 'csrf-token.inc' %]
280
            <div class="modal-content">
282
            <div class="modal-content">
281
                <div class="modal-header">
283
                <div class="modal-header">
282
                    <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
284
                    <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
Lines 301-306 Link Here
301
<div class="modal" id="dateEditor" tabindex="-1" role="dialog" aria-labelledby="dateEditorLabel">
303
<div class="modal" id="dateEditor" tabindex="-1" role="dialog" aria-labelledby="dateEditorLabel">
302
    <div class="modal-dialog" role="document">
304
    <div class="modal-dialog" role="document">
303
        <form id="modify_estimated_delivery_date" action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
305
        <form id="modify_estimated_delivery_date" action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
306
            [% INCLUDE 'csrf-token.inc' %]
304
            <div class="modal-content">
307
            <div class="modal-content">
305
                <div class="modal-header">
308
                <div class="modal-header">
306
                    <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
309
                    <button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/moddeliverydate.tt (+1 lines)
Lines 37-42 Link Here
37
37
38
      <h1>Change estimated delivery date</h1>
38
      <h1>Change estimated delivery date</h1>
39
      <form action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
39
      <form action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
40
          [% INCLUDE 'csrf-token.inc' %]
40
        <fieldset class="brief">
41
        <fieldset class="brief">
41
          <label for="estimated_delivery_date">Estimated delivery date:</label>
42
          <label for="estimated_delivery_date">Estimated delivery date:</label>
42
          <input type="text" id="estimated_delivery_date" size="10" name="estimated_delivery_date" class="flatpickr" value="[% estimated_delivery_date | html %]"/>
43
          <input type="text" id="estimated_delivery_date" size="10" name="estimated_delivery_date" class="flatpickr" value="[% estimated_delivery_date | html %]"/>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/modordernotes.tt (+1 lines)
Lines 47-52 Link Here
47
          <h1>Change order internal note (order no. [% ordernumber | html %])</h1>
47
          <h1>Change order internal note (order no. [% ordernumber | html %])</h1>
48
      [% END %]
48
      [% END %]
49
      <form action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
49
      <form action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
50
          [% INCLUDE 'csrf-token.inc' %]
50
        <fieldset class="brief">
51
        <fieldset class="brief">
51
          <label for="ordernotes">Note:</label>
52
          <label for="ordernotes">Note:</label>
52
          <textarea id="ordernotes" name="ordernotes" rows="3" cols="30" class="focus">[% ordernotes | html %]</textarea>
53
          <textarea id="ordernotes" name="ordernotes" rows="3" cols="30" class="focus">[% ordernotes | html %]</textarea>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/neworderempty.tt (+2 lines)
Lines 291-296 Link Here
291
        [% IF ( creationdate ) %]<li><span class="label">Open on:</span>  [% creationdate | $KohaDates %]</li>[% END %]
291
        [% IF ( creationdate ) %]<li><span class="label">Open on:</span>  [% creationdate | $KohaDates %]</li>[% END %]
292
        [% IF ( closedate ) %]
292
        [% IF ( closedate ) %]
293
        <form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post">
293
        <form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post">
294
            [% INCLUDE 'csrf-token.inc' %]
294
        <li><span class="label">Closed on:</span>  [% closedate | $KohaDates %]</li>
295
        <li><span class="label">Closed on:</span>  [% closedate | $KohaDates %]</li>
295
        [% IF ( basketgroups ) %]
296
        [% IF ( basketgroups ) %]
296
            <li>Basketgroup: <select id="basketgroupid" name="basketgroupid">
297
            <li>Basketgroup: <select id="basketgroupid" name="basketgroupid">
Lines 316-321 Link Here
316
[% END %]
317
[% END %]
317
318
318
<form action="/cgi-bin/koha/acqui/addorder.pl" method="post" class="validated noEnterSubmit" id="Aform" onsubmit="return Check(this);" >
319
<form action="/cgi-bin/koha/acqui/addorder.pl" method="post" class="validated noEnterSubmit" id="Aform" onsubmit="return Check(this);" >
320
    [% INCLUDE 'csrf-token.inc' %]
319
321
320
    <fieldset class="rows">
322
    <fieldset class="rows">
321
        <legend>Patrons</legend>
323
        <legend>Patrons</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/supplier.tt (+1 lines)
Lines 202-207 div.rows { padding: 1rem; } Link Here
202
[% UNLESS ( enter ) %][% INCLUDE 'acquisitions-toolbar.inc' %][% END %]
202
[% UNLESS ( enter ) %][% INCLUDE 'acquisitions-toolbar.inc' %][% END %]
203
[% IF ( enter ) %]
203
[% IF ( enter ) %]
204
    <form action="updatesupplier.pl" name="updatesupplier" style="display:block" class="validated" method="post">
204
    <form action="updatesupplier.pl" name="updatesupplier" style="display:block" class="validated" method="post">
205
        [% INCLUDE 'csrf-token.inc' %]
205
        <div id="toolbar" class="btn-toolbar">
206
        <div id="toolbar" class="btn-toolbar">
206
            <button class="btn btn-primary" type="submit"><i class="fa fa-save"></i> Save</button>
207
            <button class="btn btn-primary" type="submit"><i class="fa fa-save"></i> Save</button>
207
            [% IF ( booksellerid ) %]
208
            [% IF ( booksellerid ) %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/uncertainprice.tt (+2 lines)
Lines 88-93 Link Here
88
        <div class="page-section">
88
        <div class="page-section">
89
            <h2>Order lines with uncertain prices</h2>
89
            <h2>Order lines with uncertain prices</h2>
90
            <form action="[% scriptname | html %]" method="post">
90
            <form action="[% scriptname | html %]" method="post">
91
                [% INCLUDE 'csrf-token.inc' %]
91
                <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
92
                <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
92
                <label for="owner">Orders from:</label>
93
                <label for="owner">Orders from:</label>
93
                <select id="owner" name="owner">
94
                <select id="owner" name="owner">
Lines 103-108 Link Here
103
            </form>
104
            </form>
104
        </div> <!-- /.page-section -->
105
        </div> <!-- /.page-section -->
105
        <form action="[% scriptname | html %]" method="post" id="uncertainprices">
106
        <form action="[% scriptname | html %]" method="post" id="uncertainprices">
107
            [% INCLUDE 'csrf-token.inc' %]
106
            <fieldset class="rows">
108
            <fieldset class="rows">
107
                <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
109
                <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
108
                <input type="hidden" name="op" value="validate" />
110
                <input type="hidden" name="op" value="validate" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/vendor_issues.tt (+2 lines)
Lines 92-97 Link Here
92
    [% END %]
92
    [% END %]
93
93
94
    <form action="/cgi-bin/koha/acqui/vendor_issues.pl" name="Aform" method="post" class="validated">
94
    <form action="/cgi-bin/koha/acqui/vendor_issues.pl" name="Aform" method="post" class="validated">
95
        [% INCLUDE 'csrf-token.inc' %]
95
        <input type="hidden" name="op" value="add_validate" />
96
        <input type="hidden" name="op" value="add_validate" />
96
        <input type="hidden" name="booksellerid" value="[% vendor.id | html %]" />
97
        <input type="hidden" name="booksellerid" value="[% vendor.id | html %]" />
97
        <input type="hidden" name="issue_id" value="[% issue.issue_id| html %]" />
98
        <input type="hidden" name="issue_id" value="[% issue.issue_id| html %]" />
Lines 133-138 Link Here
133
    <div class="dialog alert">
134
    <div class="dialog alert">
134
        <h1>Delete issue #[% issue.issue_id | html %]?<h1>
135
        <h1>Delete issue #[% issue.issue_id | html %]?<h1>
135
        <form action="/cgi-bin/koha/acqui/vendor_issues.pl" method="post">
136
        <form action="/cgi-bin/koha/acqui/vendor_issues.pl" method="post">
137
            [% INCLUDE 'csrf-token.inc' %]
136
            <input type="hidden" name="op" value="delete_confirmed" />
138
            <input type="hidden" name="op" value="delete_confirmed" />
137
            <input type="hidden" name="issue_id" value="[% issue.issue_id | html %]" />
139
            <input type="hidden" name="issue_id" value="[% issue.issue_id | html %]" />
138
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
140
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/z3950_search.tt (+2 lines)
Lines 82-87 tr.selected td { Link Here
82
<div class="main container-fluid">
82
<div class="main container-fluid">
83
      [% IF ( opsearch ) %]
83
      [% IF ( opsearch ) %]
84
    <form method="post" action="z3950_search.pl" name="f" class="checkboxed">
84
    <form method="post" action="z3950_search.pl" name="f" class="checkboxed">
85
        [% INCLUDE 'csrf-token.inc' %]
85
    <div class="row">
86
    <div class="row">
86
    <div class="col-sm-6">
87
    <div class="col-sm-6">
87
    <h1>Order from external source</h1>
88
    <h1>Order from external source</h1>
Lines 246-251 tr.selected td { Link Here
246
    </div>
247
    </div>
247
248
248
    <form method="post" action="z3950_search.pl" id="page_form" name="page_form" class="checkboxed">
249
    <form method="post" action="z3950_search.pl" id="page_form" name="page_form" class="checkboxed">
250
        [% INCLUDE 'csrf-token.inc' %]
249
        <input type="hidden" name="op" id="op" value="do_search" />
251
        <input type="hidden" name="op" id="op" value="do_search" />
250
        <input type="hidden" name="current_page" id="current_page" value="[% current_page | html %]" />
252
        <input type="hidden" name="current_page" id="current_page" value="[% current_page | html %]" />
251
        <input type="hidden" id="searchtitle"  name="title" value="[% title | html %]" />
253
        <input type="hidden" id="searchtitle"  name="title" value="[% title | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/additional-fields.tt (+1 lines)
Lines 196-201 Link Here
196
            <h1>[% tx("New field for table '{table_name}'", { table_name = tablename } ) | html %]</h1>
196
            <h1>[% tx("New field for table '{table_name}'", { table_name = tablename } ) | html %]</h1>
197
        [% END %]
197
        [% END %]
198
        <form action="" name="add_form" id="add_field" method="post">
198
        <form action="" name="add_form" id="add_field" method="post">
199
            [% INCLUDE 'csrf-token.inc' %]
199
            <fieldset class="rows">
200
            <fieldset class="rows">
200
                <ol>
201
                <ol>
201
                    <li>
202
                    <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/admin-home.tt (+1 lines)
Lines 56-61 Link Here
56
            <div class="col-md-6 sysprefs">
56
            <div class="col-md-6 sysprefs">
57
            [% IF ( CAN_user_parameters_manage_sysprefs ) %]
57
            [% IF ( CAN_user_parameters_manage_sysprefs ) %]
58
                <form action="/cgi-bin/koha/admin/preferences.pl" method="post">
58
                <form action="/cgi-bin/koha/admin/preferences.pl" method="post">
59
                    [% INCLUDE 'csrf-token.inc' %]
59
                <fieldset>
60
                <fieldset>
60
                    <h4><a href="/cgi-bin/koha/admin/preferences.pl">System preferences</a></h4>
61
                    <h4><a href="/cgi-bin/koha/admin/preferences.pl">System preferences</a></h4>
61
                    <p>Manage system preferences like MARC flavor, date format, administrator email, and templates.</p>
62
                    <p>Manage system preferences like MARC flavor, date format, administrator email, and templates.</p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/adveditorshortcuts.tt (+1 lines)
Lines 44-49 Link Here
44
                    </ul>
44
                    </ul>
45
45
46
                    <form id="adveditor_shortcuts" method="post" action="/cgi-bin/koha/admin/adveditorshortcuts.pl">
46
                    <form id="adveditor_shortcuts" method="post" action="/cgi-bin/koha/admin/adveditorshortcuts.pl">
47
                        [% INCLUDE 'csrf-token.inc' %]
47
                        <fieldset>
48
                        <fieldset>
48
                        <input type=hidden name="op" value="save" />
49
                        <input type=hidden name="op" value="save" />
49
50
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqbudgetperiods.tt (+5 lines)
Lines 148-153 Link Here
148
[% IF ( duplicate_form ) %]
148
[% IF ( duplicate_form ) %]
149
<h1>Duplicate budget</h1>
149
<h1>Duplicate budget</h1>
150
<form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" id="add_modify_budget" name="f" method="post">
150
<form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" id="add_modify_budget" name="f" method="post">
151
    [% INCLUDE 'csrf-token.inc' %]
151
    <fieldset class="rows">
152
    <fieldset class="rows">
152
    <input type="hidden" name="op" value="duplicate_budget" />
153
    <input type="hidden" name="op" value="duplicate_budget" />
153
    <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
154
    <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
Lines 217-222 Link Here
217
        <h1>Add budget</h1>
218
        <h1>Add budget</h1>
218
	[% END %]
219
	[% END %]
219
<form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" id="add_modify_budget" name="f" method="post">
220
<form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" id="add_modify_budget" name="f" method="post">
221
    [% INCLUDE 'csrf-token.inc' %]
220
    <fieldset class="rows">
222
    <fieldset class="rows">
221
    <!-- ################################################################################# -->
223
    <!-- ################################################################################# -->
222
    <!-- display information about the budget period that must be added or modified -->
224
    <!-- display information about the budget period that must be added or modified -->
Lines 309-319 Link Here
309
    <!-- ############################################################# -->
311
    <!-- ############################################################# -->
310
312
311
    <form action="[% script_name | html %]" method="post">
313
    <form action="[% script_name | html %]" method="post">
314
        [% INCLUDE 'csrf-token.inc' %]
312
        <input type="hidden" name="op" value="delete_confirmed" />
315
        <input type="hidden" name="op" value="delete_confirmed" />
313
        <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
316
        <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
314
        <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
317
        <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
315
    </form>
318
    </form>
316
    <form action="[% script_name | html %]" method="post">
319
    <form action="[% script_name | html %]" method="post">
320
        [% INCLUDE 'csrf-token.inc' %]
317
        <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
321
        <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
318
    </form>
322
    </form>
319
    [% END %]
323
    [% END %]
Lines 355-360 Link Here
355
          </tbody>
359
          </tbody>
356
        </table>
360
        </table>
357
        <form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" name="f" method="post" id="move_form">
361
        <form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" name="f" method="post" id="move_form">
362
            [% INCLUDE 'csrf-token.inc' %]
358
          <fieldset class="rows">
363
          <fieldset class="rows">
359
            <ol>
364
            <ol>
360
              <li>
365
              <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqbudgets.tt (+2 lines)
Lines 250-255 Link Here
250
<!-- create add/mod entry form -->
250
<!-- create add/mod entry form -->
251
[% IF op == 'add_form' && !error_not_authorised_to_modify %]
251
[% IF op == 'add_form' && !error_not_authorised_to_modify %]
252
<form action="/cgi-bin/koha/admin/aqbudgets.pl" id="edit_fund" name="Aform" method="post">
252
<form action="/cgi-bin/koha/admin/aqbudgets.pl" id="edit_fund" name="Aform" method="post">
253
    [% INCLUDE 'csrf-token.inc' %]
253
    <fieldset class="rows">
254
    <fieldset class="rows">
254
        <legend><h1>[% IF ( budget_id ) %]<span>Modify fund</span>[% ELSE %]<span>Add fund</span>[% END %]
255
        <legend><h1>[% IF ( budget_id ) %]<span>Modify fund</span>[% ELSE %]<span>Add fund</span>[% END %]
255
    [% IF ( budget_period_description ) %]
256
    [% IF ( budget_period_description ) %]
Lines 430-435 Link Here
430
        </table>
431
        </table>
431
432
432
        <form action="/cgi-bin/koha/admin/aqbudgets.pl" method="post">
433
        <form action="/cgi-bin/koha/admin/aqbudgets.pl" method="post">
434
            [% INCLUDE 'csrf-token.inc' %]
433
            <input type="hidden" name="op" value="delete_confirmed" />
435
            <input type="hidden" name="op" value="delete_confirmed" />
434
            <input type="hidden" name="budget_id" value="[% budget_id | html %]" />
436
            <input type="hidden" name="budget_id" value="[% budget_id | html %]" />
435
            <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
437
            <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqcontract.tt (+4 lines)
Lines 102-107 Link Here
102
            [% IF ( add_form ) %]
102
            [% IF ( add_form ) %]
103
                <div class="page-section">
103
                <div class="page-section">
104
                    <form name="Aform" action="/cgi-bin/koha/admin/aqcontract.pl" id="add_modify_contract" method="post">
104
                    <form name="Aform" action="/cgi-bin/koha/admin/aqcontract.pl" id="add_modify_contract" method="post">
105
                        [% INCLUDE 'csrf-token.inc' %]
105
                        <input type="hidden" name="op" value="add_validate" />
106
                        <input type="hidden" name="op" value="add_validate" />
106
                        <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
107
                        <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
107
                        <input type="hidden" name="checked" value="0" />
108
                        <input type="hidden" name="checked" value="0" />
Lines 146-151 Link Here
146
            [% IF ( add_validate ) %]
147
            [% IF ( add_validate ) %]
147
                <h1>Data recorded</h1>
148
                <h1>Data recorded</h1>
148
                <form action="[% script_name | html %]" method="post">
149
                <form action="[% script_name | html %]" method="post">
150
                    [% INCLUDE 'csrf-token.inc' %]
149
                    <input type="submit" class="btn btn-primary" value="OK" />
151
                    <input type="submit" class="btn btn-primary" value="OK" />
150
                </form>
152
                </form>
151
            [% END %]
153
            [% END %]
Lines 161-166 Link Here
161
                            <tr><th scope="row">Vendor:</th><td>[% booksellername | html %]</td></tr>
163
                            <tr><th scope="row">Vendor:</th><td>[% booksellername | html %]</td></tr>
162
                        </table>
164
                        </table>
163
                        <form action="[% script_name | html %]" method="post">
165
                        <form action="[% script_name | html %]" method="post">
166
                            [% INCLUDE 'csrf-token.inc' %]
164
                            <input type="hidden" name="op" value="delete_confirmed" />
167
                            <input type="hidden" name="op" value="delete_confirmed" />
165
                            <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
168
                            <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
166
                            <input type="hidden" name="contractnumber" value="[% contractnumber | html %]" />
169
                            <input type="hidden" name="contractnumber" value="[% contractnumber | html %]" />
Lines 176-181 Link Here
176
            [% IF ( delete_confirmed ) %]
179
            [% IF ( delete_confirmed ) %]
177
                <h1>Contract deleted</h1>
180
                <h1>Contract deleted</h1>
178
                <form action="[% script_name | html %]" method="post">
181
                <form action="[% script_name | html %]" method="post">
182
                    [% INCLUDE 'csrf-token.inc' %]
179
                    <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
183
                    <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
180
                    <input type="submit" class="btn btn-primary" value="OK" />
184
                    <input type="submit" class="btn btn-primary" value="OK" />
181
                </form>
185
                </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqplan.tt (+3 lines)
Lines 46-51 Link Here
46
[% INCLUDE 'budgets-admin-toolbar.inc' %]
46
[% INCLUDE 'budgets-admin-toolbar.inc' %]
47
47
48
<form method="post" id="Aform" name="Aform"  action="/cgi-bin/koha/admin/aqplan.pl">
48
<form method="post" id="Aform" name="Aform"  action="/cgi-bin/koha/admin/aqplan.pl">
49
    [% INCLUDE 'csrf-token.inc' %]
49
<h1>Planning for [% budget_period_description | html %] [% PROCESS planning plan=authcat %]</h1>
50
<h1>Planning for [% budget_period_description | html %] [% PROCESS planning plan=authcat %]</h1>
50
<input type="hidden" name="authcat" value="[% authcat | html %]" />
51
<input type="hidden" name="authcat" value="[% authcat | html %]" />
51
<!-- Budget Lines -->
52
<!-- Budget Lines -->
Lines 202-207 Link Here
202
            <aside>
203
            <aside>
203
204
204
<form method="post" action="/cgi-bin/koha/admin/aqplan.pl">
205
<form method="post" action="/cgi-bin/koha/admin/aqplan.pl">
206
    [% INCLUDE 'csrf-token.inc' %]
205
    <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
207
    <input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
206
<fieldset class="brief">
208
<fieldset class="brief">
207
<h4>Filter</h4>
209
<h4>Filter</h4>
Lines 262-267 Link Here
262
</form>
264
</form>
263
[% IF ( budget_lines ) %]
265
[% IF ( budget_lines ) %]
264
<form method="post" action="/cgi-bin/koha/admin/aqplan.pl">
266
<form method="post" action="/cgi-bin/koha/admin/aqplan.pl">
267
    [% INCLUDE 'csrf-token.inc' %]
265
<fieldset class="brief">
268
<fieldset class="brief">
266
<h4>Export</h4>
269
<h4>Export</h4>
267
    <ol>
270
    <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/audio_alerts.tt (+2 lines)
Lines 39-44 Link Here
39
39
40
40
41
                <form id="new-alert-form" action="audio_alerts.pl" method="post" class="validated">
41
                <form id="new-alert-form" action="audio_alerts.pl" method="post" class="validated">
42
                    [% INCLUDE 'csrf-token.inc' %]
42
                    <h1><span class="create-alert">New alert</span><span class="edit-alert">Edit alert</span></h1>
43
                    <h1><span class="create-alert">New alert</span><span class="edit-alert">Edit alert</span></h1>
43
                    <fieldset class="rows">
44
                    <fieldset class="rows">
44
                        <legend class="sr-only">Audio alert details</legend>
45
                        <legend class="sr-only">Audio alert details</legend>
Lines 88-93 Link Here
88
                </form>
89
                </form>
89
90
90
                <form id="delete-alert-form" action="audio_alerts.pl" method="post">
91
                <form id="delete-alert-form" action="audio_alerts.pl" method="post">
92
                    [% INCLUDE 'csrf-token.inc' %]
91
                    <h1>Audio alerts</h1>
93
                    <h1>Audio alerts</h1>
92
                    [%IF !( Koha.Preference('AudioAlerts') ) %]
94
                    [%IF !( Koha.Preference('AudioAlerts') ) %]
93
                        <div class="dialog alert">
95
                        <div class="dialog alert">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/auth_subfields_structure.tt (+2 lines)
Lines 82-87 Link Here
82
    [% ELSE %][% action | html %][% END %]</h1>
82
    [% ELSE %][% action | html %][% END %]</h1>
83
    <div class="hint">You can drag and drop the subfield tabs to change the order.</div>
83
    <div class="hint">You can drag and drop the subfield tabs to change the order.</div>
84
    <form action="[% script_name | html %]" name="Aform" method="post">
84
    <form action="[% script_name | html %]" name="Aform" method="post">
85
        [% INCLUDE 'csrf-token.inc' %]
85
        <input type="hidden" name="op" value="add_validate" />
86
        <input type="hidden" name="op" value="add_validate" />
86
        <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
87
        <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
87
        <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
88
        <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
Lines 284-289 Link Here
284
    <div class="dialog alert">
285
    <div class="dialog alert">
285
        <h1>Delete subfield <span class="ex">'[% ass.tagsubfield | html %]'?</span></h1>
286
        <h1>Delete subfield <span class="ex">'[% ass.tagsubfield | html %]'?</span></h1>
286
        <form action="[% delete_link | html %]" method="post">
287
        <form action="[% delete_link | html %]" method="post">
288
            [% INCLUDE 'csrf-token.inc' %]
287
            <input type="hidden" name="op" value="delete_confirmed" />
289
            <input type="hidden" name="op" value="delete_confirmed" />
288
            <table>
290
            <table>
289
                <tr><th scope="row">Subfield:</th> <td>[% ass.tagsubfield | html %]</td></tr>
291
                <tr><th scope="row">Subfield:</th> <td>[% ass.tagsubfield | html %]</td></tr>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/auth_tag_structure.tt (+5 lines)
Lines 143-148 Link Here
143
        [% END %]
143
        [% END %]
144
    </h2>
144
    </h2>
145
    <form action="[% script_name | html %]" name="Aform" method="post" class="validated">
145
    <form action="[% script_name | html %]" name="Aform" method="post" class="validated">
146
        [% INCLUDE 'csrf-token.inc' %]
146
        <input type="hidden" name="op" value="add_validate" />
147
        <input type="hidden" name="op" value="add_validate" />
147
        [% IF ( heading_modify_tag_p ) %]<input type="hidden" name="modif" value="1" />[% END %]
148
        [% IF ( heading_modify_tag_p ) %]<input type="hidden" name="modif" value="1" />[% END %]
148
        <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
149
        <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
Lines 198-203 Link Here
198
    <div class="dialog alert">
199
    <div class="dialog alert">
199
        <h3>Confirm deletion</h3>
200
        <h3>Confirm deletion</h3>
200
        <form action="[% script_name | html %]" method="post">
201
        <form action="[% script_name | html %]" method="post">
202
            [% INCLUDE 'csrf-token.inc' %]
201
            <table>
203
            <table>
202
                <tr><th scope="row">Tag: </th><td>[% searchfield | html %] [% liblibrarian | html %]</td></tr>
204
                <tr><th scope="row">Tag: </th><td>[% searchfield | html %] [% liblibrarian | html %]</td></tr>
203
            </table>
205
            </table>
Lines 216-221 Link Here
216
218
217
  <div class="dialog message">  <h3>Data deleted</h3>
219
  <div class="dialog message">  <h3>Data deleted</h3>
218
    <form action="[% script_name | html %]" method="post">
220
    <form action="[% script_name | html %]" method="post">
221
        [% INCLUDE 'csrf-token.inc' %]
219
    <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
222
    <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
220
    <input type="hidden" name="searchfield" value="[% searchfield | html %]" />
223
    <input type="hidden" name="searchfield" value="[% searchfield | html %]" />
221
    <input type="submit" value="OK" class="btn btn-primary" />
224
    <input type="submit" value="OK" class="btn btn-primary" />
Lines 224-229 Link Here
224
[% IF ( authtype_create ) %]
227
[% IF ( authtype_create ) %]
225
228
226
    <form action="[% script_name | html %]" method="post">
229
    <form action="[% script_name | html %]" method="post">
230
        [% INCLUDE 'csrf-token.inc' %]
227
        <input type="hidden" name="op" value="authtype_create_confirm" />
231
        <input type="hidden" name="op" value="authtype_create_confirm" />
228
        <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
232
        <input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
229
        Create authority framework for [% authtypecode | html %] using
233
        Create authority framework for [% authtypecode | html %] using
Lines 249-254 Link Here
249
253
250
<h2>Select an authority framework</h2>
254
<h2>Select an authority framework</h2>
251
<form action="[% script_name | html %]" method="post">
255
<form action="[% script_name | html %]" method="post">
256
    [% INCLUDE 'csrf-token.inc' %]
252
    <select name="authtypecode">
257
    <select name="authtypecode">
253
    [% FOREACH authority_type IN authority_types%]
258
    [% FOREACH authority_type IN authority_types%]
254
        [% IF authority_type.authtypecode == authtypecode%]
259
        [% IF authority_type.authtypecode == authtypecode%]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/authorised_values.tt (+2 lines)
Lines 123-128 Link Here
123
                    [% END %]
123
                    [% END %]
124
124
125
                    <form action="/cgi-bin/koha/admin/authorised_values.pl" name="Aform" method="post" class="validated">
125
                    <form action="/cgi-bin/koha/admin/authorised_values.pl" name="Aform" method="post" class="validated">
126
                        [% INCLUDE 'csrf-token.inc' %]
126
                        <fieldset class="rows">
127
                        <fieldset class="rows">
127
                            [% IF action_add_category %]
128
                            [% IF action_add_category %]
128
                                <ol>
129
                                <ol>
Lines 311-316 Link Here
311
                                </form>
312
                                </form>
312
                                [% UNLESS category.is_system %]
313
                                [% UNLESS category.is_system %]
313
                                    <form id="delete_category" action="/cgi-bin/koha/admin/authorised_values.pl" method="post">
314
                                    <form id="delete_category" action="/cgi-bin/koha/admin/authorised_values.pl" method="post">
315
                                        [% INCLUDE 'csrf-token.inc' %]
314
                                        <input type="hidden" name="op" value="delete_category" />
316
                                        <input type="hidden" name="op" value="delete_category" />
315
                                        <input type="hidden" name="category_name" value="[% category.category_name | html %]" />
317
                                        <input type="hidden" name="category_name" value="[% category.category_name | html %]" />
316
                                        <button type="submit"><i class="fa fa-plus"></i> Delete category '[% category.category_name | html %]' </button>
318
                                        <button type="submit"><i class="fa fa-plus"></i> Delete category '[% category.category_name | html %]' </button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/authtypes.tt (+3 lines)
Lines 89-94 Link Here
89
89
90
[% IF op == 'add_form' %]
90
[% IF op == 'add_form' %]
91
    <form action="/cgi-bin/koha/admin/authtypes.pl" name="Aform" method="post" class="validated">
91
    <form action="/cgi-bin/koha/admin/authtypes.pl" name="Aform" method="post" class="validated">
92
        [% INCLUDE 'csrf-token.inc' %]
92
        <fieldset class="rows">
93
        <fieldset class="rows">
93
            <legend>
94
            <legend>
94
                <h1>
95
                <h1>
Lines 149-154 Link Here
149
        [% ELSE %]
150
        [% ELSE %]
150
            <h1>Confirm deletion of authority structure definition for <span class="ex">'[% authority_type.authtypetext | html %]' ([% authority_type.authtypecode | html %])</span></h1>
151
            <h1>Confirm deletion of authority structure definition for <span class="ex">'[% authority_type.authtypetext | html %]' ([% authority_type.authtypecode | html %])</span></h1>
151
            <form action="/cgi-bin/koha/admin/authtypes.pl" method="post">
152
            <form action="/cgi-bin/koha/admin/authtypes.pl" method="post">
153
                [% INCLUDE 'csrf-token.inc' %]
152
                <input type="hidden" name="op" value="delete_confirmed" />
154
                <input type="hidden" name="op" value="delete_confirmed" />
153
                <input type="hidden" name="authtypecode" value="[% authority_type.authtypecode | html %]" />
155
                <input type="hidden" name="authtypecode" value="[% authority_type.authtypecode | html %]" />
154
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
156
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
Lines 235-240 Link Here
235
                                    <h3 id="importLabelexportModal_[% authority_type.authtypecode | html %][% loop.count | html %]">Import [% authority_type.authtypecode | html %] authority type (fields and subfields) from a spreadsheet file (.csv, .ods)</h3>
237
                                    <h3 id="importLabelexportModal_[% authority_type.authtypecode | html %][% loop.count | html %]">Import [% authority_type.authtypecode | html %] authority type (fields and subfields) from a spreadsheet file (.csv, .ods)</h3>
236
                                </div>
238
                                </div>
237
                                <form action="/cgi-bin/koha/admin/import_export_authtype.pl" name="form_i_[% authority_type.authtypecode | html %]" id="form_i_[% authority_type.authtypecode | html %]" method="post" enctype="multipart/form-data" class="form_import">
239
                                <form action="/cgi-bin/koha/admin/import_export_authtype.pl" name="form_i_[% authority_type.authtypecode | html %]" id="form_i_[% authority_type.authtypecode | html %]" method="post" enctype="multipart/form-data" class="form_import">
240
                                    [% INCLUDE 'csrf-token.inc' %]
238
                                    <div class="modal-body">
241
                                    <div class="modal-body">
239
                                        <input type="hidden" name="authtypecode" value="[% authority_type.authtypecode | html %]" />
242
                                        <input type="hidden" name="authtypecode" value="[% authority_type.authtypecode | html %]" />
240
                                        <input type="hidden" name="action" value="import" />
243
                                        <input type="hidden" name="action" value="import" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/biblio_framework.tt (+4 lines)
Lines 100-105 Link Here
100
[% IF op == 'add_form' %]
100
[% IF op == 'add_form' %]
101
    <h1>[% IF framework %]Modify framework text[% ELSE %]Add framework[% END %]</h1>
101
    <h1>[% IF framework %]Modify framework text[% ELSE %]Add framework[% END %]</h1>
102
    <form action="/cgi-bin/koha/admin/biblio_framework.pl" name="Aform" method="post" class="validated">
102
    <form action="/cgi-bin/koha/admin/biblio_framework.pl" name="Aform" method="post" class="validated">
103
        [% INCLUDE 'csrf-token.inc' %]
103
        <input type="hidden" name="op" value="add_validate" />
104
        <input type="hidden" name="op" value="add_validate" />
104
        <fieldset class="rows">
105
        <fieldset class="rows">
105
            <ol>
106
            <ol>
Lines 141-146 Link Here
141
        [% ELSE %]
142
        [% ELSE %]
142
            <h1>Delete framework for [% framework.frameworktext | html %] ([% framework.frameworkcode | html %])?</h1>
143
            <h1>Delete framework for [% framework.frameworktext | html %] ([% framework.frameworkcode | html %])?</h1>
143
            <form class="inline" action="/cgi-bin/koha/admin/biblio_framework.pl" method="post">
144
            <form class="inline" action="/cgi-bin/koha/admin/biblio_framework.pl" method="post">
145
                [% INCLUDE 'csrf-token.inc' %]
144
                <input type="hidden" name="op" value="delete_confirmed" />
146
                <input type="hidden" name="op" value="delete_confirmed" />
145
                <input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
147
                <input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
146
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this framework</button>
148
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this framework</button>
Lines 214-219 Link Here
214
                        <h1 id="importLabelexportModal_[% framework.frameworkcode | html %][% frameworks.count | html %]">Import default framework structure (fields and subfields) from a spreadsheet file (.csv or .ods)</h1>
216
                        <h1 id="importLabelexportModal_[% framework.frameworkcode | html %][% frameworks.count | html %]">Import default framework structure (fields and subfields) from a spreadsheet file (.csv or .ods)</h1>
215
                    </div> <!-- /.modal-header -->
217
                    </div> <!-- /.modal-header -->
216
                    <form action="/cgi-bin/koha/admin/import_export_framework.pl" name="form_i_default" id="form_i_default" method="post" enctype="multipart/form-data" class="form_import">
218
                    <form action="/cgi-bin/koha/admin/import_export_framework.pl" name="form_i_default" id="form_i_default" method="post" enctype="multipart/form-data" class="form_import">
219
                        [% INCLUDE 'csrf-token.inc' %]
217
                        <div class="modal-body">
220
                        <div class="modal-body">
218
                            <input type="hidden" name="frameworkcode" value="default" />
221
                            <input type="hidden" name="frameworkcode" value="default" />
219
                            <input type="hidden" name="action" value="import" />
222
                            <input type="hidden" name="action" value="import" />
Lines 284-289 Link Here
284
                            <h1 id="importLabelexportModal_[% loo.frameworkcode | html %][% loop.count | html %]">Import [% loo.frameworkcode | html %] framework structure (fields and subfields) from a spreadsheet file (.csv or .ods)</h1>
287
                            <h1 id="importLabelexportModal_[% loo.frameworkcode | html %][% loop.count | html %]">Import [% loo.frameworkcode | html %] framework structure (fields and subfields) from a spreadsheet file (.csv or .ods)</h1>
285
                        </div> <!-- /.modal-header -->
288
                        </div> <!-- /.modal-header -->
286
                        <form action="/cgi-bin/koha/admin/import_export_framework.pl" name="form_i_[% loo.frameworkcode | html %]" id="form_i_[% loo.frameworkcode | html %]" method="post" enctype="multipart/form-data" class="form_import">
289
                        <form action="/cgi-bin/koha/admin/import_export_framework.pl" name="form_i_[% loo.frameworkcode | html %]" id="form_i_[% loo.frameworkcode | html %]" method="post" enctype="multipart/form-data" class="form_import">
290
                            [% INCLUDE 'csrf-token.inc' %]
287
                            <div class="modal-body">
291
                            <div class="modal-body">
288
                                <input type="hidden" name="frameworkcode" value="[% loo.frameworkcode | html %]" />
292
                                <input type="hidden" name="frameworkcode" value="[% loo.frameworkcode | html %]" />
289
                                <input type="hidden" name="action" value="import" />
293
                                <input type="hidden" name="action" value="import" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/branch_transfer_limits.tt (+1 lines)
Lines 64-69 Link Here
64
    [% END %]
64
    [% END %]
65
65
66
    <form method="post" action="branch_transfer_limits.pl">
66
    <form method="post" action="branch_transfer_limits.pl">
67
        [% INCLUDE 'csrf-token.inc' %]
67
        [% WRAPPER tab_panels %]
68
        [% WRAPPER tab_panels %]
68
            [% FOREACH codes_loo IN codes_loop %]
69
            [% FOREACH codes_loo IN codes_loop %]
69
                [% WRAPPER tab_panel tabname=codes_loo.code %]
70
                [% WRAPPER tab_panel tabname=codes_loo.code %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/branches.tt (+2 lines)
Lines 124-129 Link Here
124
        [% END %]
124
        [% END %]
125
    </h1>
125
    </h1>
126
    <form action="/cgi-bin/koha/admin/branches.pl" id="Aform" name="Aform" class="validated" method="post">
126
    <form action="/cgi-bin/koha/admin/branches.pl" id="Aform" name="Aform" class="validated" method="post">
127
        [% INCLUDE 'csrf-token.inc' %]
127
        <fieldset class="rows">
128
        <fieldset class="rows">
128
            <input type="hidden" name="op" value="add_validate" />
129
            <input type="hidden" name="op" value="add_validate" />
129
            [% IF library %]
130
            [% IF library %]
Lines 298-303 Link Here
298
[% IF op == 'delete_confirm' and not ( items_count or patrons_count )%]
299
[% IF op == 'delete_confirm' and not ( items_count or patrons_count )%]
299
    <div class="dialog alert">
300
    <div class="dialog alert">
300
        <form action="/cgi-bin/koha/admin/branches.pl" method="post">
301
        <form action="/cgi-bin/koha/admin/branches.pl" method="post">
302
            [% INCLUDE 'csrf-token.inc' %]
301
            <h1>Are you sure you want to delete [% library.branchname | html %] ([% library.branchcode | html %])?</h1>
303
            <h1>Are you sure you want to delete [% library.branchname | html %] ([% library.branchcode | html %])?</h1>
302
            <input type="hidden" name="op" value="delete_confirmed" />
304
            <input type="hidden" name="op" value="delete_confirmed" />
303
            <input type="hidden" name="branchcode" value="[% library.branchcode | html %]" />
305
            <input type="hidden" name="branchcode" value="[% library.branchcode | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/cash_registers.tt (+1 lines)
Lines 96-101 Link Here
96
                [% IF op == 'add_form' %]
96
                [% IF op == 'add_form' %]
97
                <h1>[% IF cash_register %]Modify cash register[% ELSE %]Add new cash register[% END %]</h1>
97
                <h1>[% IF cash_register %]Modify cash register[% ELSE %]Add new cash register[% END %]</h1>
98
                <form action="/cgi-bin/koha/admin/cash_registers.pl" id="Aform" name="Aform" class="validated" method="post">
98
                <form action="/cgi-bin/koha/admin/cash_registers.pl" id="Aform" name="Aform" class="validated" method="post">
99
                    [% INCLUDE 'csrf-token.inc' %]
99
100
100
                    <fieldset class="rows">
101
                    <fieldset class="rows">
101
                        <input type="hidden" name="op" value="add_validate" />
102
                        <input type="hidden" name="op" value="add_validate" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/categories.tt (+2 lines)
Lines 114-119 Link Here
114
114
115
[% IF op == 'add_form' %]
115
[% IF op == 'add_form' %]
116
    <form id="category_form" action="/cgi-bin/koha/admin/categories.pl" method="post">
116
    <form id="category_form" action="/cgi-bin/koha/admin/categories.pl" method="post">
117
        [% INCLUDE 'csrf-token.inc' %]
117
        <input type="hidden" name="op" value="add_validate" />
118
        <input type="hidden" name="op" value="add_validate" />
118
        <input type="hidden" name="checked" value="0" />
119
        <input type="hidden" name="checked" value="0" />
119
        [% IF category %]
120
        [% IF category %]
Lines 504-509 Link Here
504
    </div> <!-- /.page-section -->
505
    </div> <!-- /.page-section -->
505
506
506
    <form action="/cgi-bin/koha/admin/categories.pl" method="post">
507
    <form action="/cgi-bin/koha/admin/categories.pl" method="post">
508
        [% INCLUDE 'csrf-token.inc' %]
507
        <fieldset class="action">
509
        <fieldset class="action">
508
            [% IF patrons_in_category > 0 %]
510
            [% IF patrons_in_category > 0 %]
509
                <input type="submit" class="btn btn-primary" value="OK" />
511
                <input type="submit" class="btn btn-primary" value="OK" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/cities.tt (+2 lines)
Lines 101-106 Link Here
101
    [% END %]
101
    [% END %]
102
102
103
    <form action="/cgi-bin/koha/admin/cities.pl" name="Aform" method="post" class="validated">
103
    <form action="/cgi-bin/koha/admin/cities.pl" name="Aform" method="post" class="validated">
104
        [% INCLUDE 'csrf-token.inc' %]
104
        <input type="hidden" name="op" value="add_validate" />
105
        <input type="hidden" name="op" value="add_validate" />
105
        <input type="hidden" name="cityid" value="[% city.cityid | html %]" />
106
        <input type="hidden" name="cityid" value="[% city.cityid | html %]" />
106
107
Lines 158-163 Link Here
158
            </tr>
159
            </tr>
159
        </table>
160
        </table>
160
        <form action="/cgi-bin/koha/admin/cities.pl" method="post">
161
        <form action="/cgi-bin/koha/admin/cities.pl" method="post">
162
            [% INCLUDE 'csrf-token.inc' %]
161
            <input type="hidden" name="op" value="delete_confirmed" />
163
            <input type="hidden" name="op" value="delete_confirmed" />
162
            <input type="hidden" name="cityid" value="[% city.cityid | html %]" />
164
            <input type="hidden" name="cityid" value="[% city.cityid | html %]" />
163
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
165
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/classsources.tt (+3 lines)
Lines 148-153 Link Here
148
<h1>Add classification source</h1>
148
<h1>Add classification source</h1>
149
  [% END %]
149
  [% END %]
150
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
150
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
151
    [% INCLUDE 'csrf-token.inc' %]
151
  <input type="hidden" name="op" value="add_source_validate" />
152
  <input type="hidden" name="op" value="add_source_validate" />
152
  <fieldset class="rows">
153
  <fieldset class="rows">
153
    <ol>
154
    <ol>
Lines 212-217 Link Here
212
<h1>Add filing rule</h1>
213
<h1>Add filing rule</h1>
213
  [% END %]
214
  [% END %]
214
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
215
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
216
    [% INCLUDE 'csrf-token.inc' %]
215
  <input type="hidden" name="op" value="add_sort_rule_validate" />
217
  <input type="hidden" name="op" value="add_sort_rule_validate" />
216
  <fieldset class="rows">
218
  <fieldset class="rows">
217
    <ol>
219
    <ol>
Lines 258-263 Link Here
258
<h1>Add splitting rule</h1>
260
<h1>Add splitting rule</h1>
259
  [% END %]
261
  [% END %]
260
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
262
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
263
    [% INCLUDE 'csrf-token.inc' %]
261
  <input type="hidden" name="op" value="add_split_rule_validate" />
264
  <input type="hidden" name="op" value="add_split_rule_validate" />
262
  <fieldset class="rows">
265
  <fieldset class="rows">
263
    <ol>
266
    <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/clone-rules.tt (+1 lines)
Lines 52-57 Link Here
52
52
53
    <p class="help">Use carefully! If the destination library already has circulation and fine rules, they will be deleted without warning!</p>
53
    <p class="help">Use carefully! If the destination library already has circulation and fine rules, they will be deleted without warning!</p>
54
    <form action="/cgi-bin/koha/admin/clone-rules.pl" method="post">
54
    <form action="/cgi-bin/koha/admin/clone-rules.pl" method="post">
55
        [% INCLUDE 'csrf-token.inc' %]
55
        [% UNLESS ( frombranch ) %]
56
        [% UNLESS ( frombranch ) %]
56
            <fieldset>
57
            <fieldset>
57
                <legend>Please choose a library to clone rules from:</legend>
58
                <legend>Please choose a library to clone rules from:</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/columns_settings.tt (+1 lines)
Lines 13-18 Link Here
13
    [% END %]
13
    [% END %]
14
    <div class="pagelist">
14
    <div class="pagelist">
15
        <form method="post" action="/cgi-bin/koha/admin/columns_settings.pl">
15
        <form method="post" action="/cgi-bin/koha/admin/columns_settings.pl">
16
            [% INCLUDE 'csrf-token.inc' %]
16
            <input type="hidden" name="action" value="save" />
17
            <input type="hidden" name="action" value="save" />
17
            <input type="hidden" name="module" value="[% modulename | html %]" />
18
            <input type="hidden" name="module" value="[% modulename | html %]" />
18
            [% IF module.keys and module.keys.size > 0 %]
19
            [% IF module.keys and module.keys.size > 0 %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/credit_types.tt (+1 lines)
Lines 83-88 Link Here
83
                    [% END %]
83
                    [% END %]
84
84
85
                    <form action="/cgi-bin/koha/admin/credit_types.pl" name="Aform" method="post" class="validated">
85
                    <form action="/cgi-bin/koha/admin/credit_types.pl" name="Aform" method="post" class="validated">
86
                        [% INCLUDE 'csrf-token.inc' %]
86
                        <input type="hidden" name="op" value="add_validate" />
87
                        <input type="hidden" name="op" value="add_validate" />
87
                        <fieldset class="rows">
88
                        <fieldset class="rows">
88
                            <ol>
89
                            <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/curbside_pickup.tt (+1 lines)
Lines 63-68 Link Here
63
        <div class="dialog message">The [% pref_CurbsidePickup_link | $raw | $KohaSpan %] preference is not enabled, do not forget to enable it to turn the feature on.</div>
63
        <div class="dialog message">The [% pref_CurbsidePickup_link | $raw | $KohaSpan %] preference is not enabled, do not forget to enable it to turn the feature on.</div>
64
    [% END %]
64
    [% END %]
65
    <form method="post" class="form">
65
    <form method="post" class="form">
66
        [% INCLUDE 'csrf-token.inc' %]
66
        <div id="curbside_pickup_tabs" class="toptabs">
67
        <div id="curbside_pickup_tabs" class="toptabs">
67
            <ul class="nav nav-tabs" role="tablist">
68
            <ul class="nav nav-tabs" role="tablist">
68
                [% FOREACH l IN libraries %]
69
                [% FOREACH l IN libraries %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/currency.tt (+4 lines)
Lines 109-114 Link Here
109
</h1>
109
</h1>
110
110
111
<form action="/cgi-bin/koha/admin/currency.pl" name="Aform" method="post" class="validated">
111
<form action="/cgi-bin/koha/admin/currency.pl" name="Aform" method="post" class="validated">
112
    [% INCLUDE 'csrf-token.inc' %]
112
    <input type="hidden" name="op" value="add_validate" />
113
    <input type="hidden" name="op" value="add_validate" />
113
    <fieldset class="rows">
114
    <fieldset class="rows">
114
        <legend class="sr-only">New currency entry form</legend>
115
        <legend class="sr-only">New currency entry form</legend>
Lines 179-184 Link Here
179
            <span>Deletion not possible</span>
180
            <span>Deletion not possible</span>
180
        </p>
181
        </p>
181
        <form action="/cgi-bin/koha/admin/currency.pl" method="post">
182
        <form action="/cgi-bin/koha/admin/currency.pl" method="post">
183
            [% INCLUDE 'csrf-token.inc' %]
182
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
184
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
183
        </form>
185
        </form>
184
    </div>
186
    </div>
Lines 194-204 Link Here
194
            </tr>
196
            </tr>
195
        </table>
197
        </table>
196
        <form action="/cgi-bin/koha/admin/currency.pl" method="post">
198
        <form action="/cgi-bin/koha/admin/currency.pl" method="post">
199
            [% INCLUDE 'csrf-token.inc' %]
197
            <input type="hidden" name="op" value="delete_confirmed" />
200
            <input type="hidden" name="op" value="delete_confirmed" />
198
            <input type="hidden" name="currency_code" value="[% currency.currency | html %]" />
201
            <input type="hidden" name="currency_code" value="[% currency.currency | html %]" />
199
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this currency</button>
202
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this currency</button>
200
        </form>
203
        </form>
201
        <form action="/cgi-bin/koha/admin/currency.pl" method="post">
204
        <form action="/cgi-bin/koha/admin/currency.pl" method="post">
205
            [% INCLUDE 'csrf-token.inc' %]
202
            <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
206
            <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
203
        </form>
207
        </form>
204
    </div>
208
    </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/debit_types.tt (+1 lines)
Lines 82-87 Link Here
82
                    [% END %]
82
                    [% END %]
83
83
84
                    <form action="/cgi-bin/koha/admin/debit_types.pl" name="Aform" method="post" class="validated">
84
                    <form action="/cgi-bin/koha/admin/debit_types.pl" name="Aform" method="post" class="validated">
85
                        [% INCLUDE 'csrf-token.inc' %]
85
                        <input type="hidden" name="op" value="add_validate" />
86
                        <input type="hidden" name="op" value="add_validate" />
86
                        <fieldset class="rows">
87
                        <fieldset class="rows">
87
                            <ol>
88
                            <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/desks.tt (+2 lines)
Lines 98-103 Link Here
98
    [% END %]
98
    [% END %]
99
99
100
    <form action="/cgi-bin/koha/admin/desks.pl" name="Aform" method="post" class="validated">
100
    <form action="/cgi-bin/koha/admin/desks.pl" name="Aform" method="post" class="validated">
101
        [% INCLUDE 'csrf-token.inc' %]
101
        <input type="hidden" name="op" value="add_validate" />
102
        <input type="hidden" name="op" value="add_validate" />
102
        <input type="hidden" name="desk_id" value="[% desk.desk_id | html %]" />
103
        <input type="hidden" name="desk_id" value="[% desk.desk_id | html %]" />
103
104
Lines 154-159 Link Here
154
            </tr>
155
            </tr>
155
        </table>
156
        </table>
156
        <form action="/cgi-bin/koha/admin/desks.pl" method="post">
157
        <form action="/cgi-bin/koha/admin/desks.pl" method="post">
158
            [% INCLUDE 'csrf-token.inc' %]
157
            <input type="hidden" name="op" value="delete_confirmed" />
159
            <input type="hidden" name="op" value="delete_confirmed" />
158
            <input type="hidden" name="desk_id" value="[% desk.desk_id | html %]" />
160
            <input type="hidden" name="desk_id" value="[% desk.desk_id | html %]" />
159
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
161
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/didyoumean.tt (+1 lines)
Lines 67-72 Link Here
67
            plugins that you want to use.
67
            plugins that you want to use.
68
        </div>
68
        </div>
69
        <form action="/cgi-bin/koha/admin/didyoumean.pl" method="post">
69
        <form action="/cgi-bin/koha/admin/didyoumean.pl" method="post">
70
            [% INCLUDE 'csrf-token.inc' %]
70
            <fieldset id="didyoumeanopac">
71
            <fieldset id="didyoumeanopac">
71
                <legend>OPAC</legend>
72
                <legend>OPAC</legend>
72
                [% PROCESS pluginlist plugins=OPACpluginlist type='opac' %]
73
                [% PROCESS pluginlist plugins=OPACpluginlist type='opac' %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/edi_accounts.tt (+2 lines)
Lines 84-89 Link Here
84
84
85
[% IF acct_form %]
85
[% IF acct_form %]
86
<form action="/cgi-bin/koha/admin/edi_accounts.pl" name="Actform" method="post">
86
<form action="/cgi-bin/koha/admin/edi_accounts.pl" name="Actform" method="post">
87
    [% INCLUDE 'csrf-token.inc' %]
87
  <input type="hidden" name="op" value="save" />
88
  <input type="hidden" name="op" value="save" />
88
  [% IF account %]
89
  [% IF account %]
89
  <input type="hidden" name="id" value="[% account.id | html %]" />
90
  <input type="hidden" name="id" value="[% account.id | html %]" />
Lines 281-286 Link Here
281
    </tr>
282
    </tr>
282
</table>
283
</table>
283
<form action="/cgi-bin/koha/admin/edi_accounts.pl" method="post">
284
<form action="/cgi-bin/koha/admin/edi_accounts.pl" method="post">
285
    [% INCLUDE 'csrf-token.inc' %]
284
    <table>
286
    <table>
285
    </table>
287
    </table>
286
    <input type="hidden" name="op" value="delete_confirmed" />
288
    <input type="hidden" name="op" value="delete_confirmed" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/edi_ean_accounts.tt (+2 lines)
Lines 75-80 Link Here
75
75
76
[% IF ean_form %]
76
[% IF ean_form %]
77
<form action="/cgi-bin/koha/admin/edi_ean_accounts.pl" name="Eanform" method="post">
77
<form action="/cgi-bin/koha/admin/edi_ean_accounts.pl" name="Eanform" method="post">
78
    [% INCLUDE 'csrf-token.inc' %]
78
  <input type="hidden" name="op" value="save" />
79
  <input type="hidden" name="op" value="save" />
79
  [% IF ean %]
80
  [% IF ean %]
80
      <input type="hidden" name="oldbranchcode" value="[% ean.branch.branchcode | html %]" />
81
      <input type="hidden" name="oldbranchcode" value="[% ean.branch.branchcode | html %]" />
Lines 144-149 Link Here
144
<div class="dialog alert">
145
<div class="dialog alert">
145
<h1>Delete EAN [% ean.ean | html %] for [% ean.branch.branchname | html %]?</h1>
146
<h1>Delete EAN [% ean.ean | html %] for [% ean.branch.branchname | html %]?</h1>
146
<form action="/cgi-bin/koha/admin/edi_ean_accounts.pl" method="post">
147
<form action="/cgi-bin/koha/admin/edi_ean_accounts.pl" method="post">
148
    [% INCLUDE 'csrf-token.inc' %]
147
    <input type="hidden" name="op" value="delete_confirmed" />
149
    <input type="hidden" name="op" value="delete_confirmed" />
148
    <input type="hidden" name="id" value="[% ean.id | html %]" />
150
    <input type="hidden" name="id" value="[% ean.id | html %]" />
149
    <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
151
    <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/identity_provider_domains.tt (+2 lines)
Lines 85-90 Link Here
85
    <h1>New email domain</h1>
85
    <h1>New email domain</h1>
86
    <div class="page-section">
86
    <div class="page-section">
87
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="add" name="add" class="validated" method="post">
87
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="add" name="add" class="validated" method="post">
88
            [% INCLUDE 'csrf-token.inc' %]
88
            <input type="hidden" name="op" value="add" />
89
            <input type="hidden" name="op" value="add" />
89
            <input type="hidden" name="domain_ops" value="1" />
90
            <input type="hidden" name="domain_ops" value="1" />
90
            <input type="hidden" name="identity_provider_id" value="[%- identity_provider_id | html -%]" />
91
            <input type="hidden" name="identity_provider_id" value="[%- identity_provider_id | html -%]" />
Lines 166-171 Link Here
166
    <h1>Edit identity provider domain</h1>
167
    <h1>Edit identity provider domain</h1>
167
    <div class="page-section">
168
    <div class="page-section">
168
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="edit_save" name="edit_save" class="validated" method="post">
169
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="edit_save" name="edit_save" class="validated" method="post">
170
            [% INCLUDE 'csrf-token.inc' %]
169
            <input type="hidden" name="op" value="edit_save" />
171
            <input type="hidden" name="op" value="edit_save" />
170
            <input type="hidden" name="domain_ops" value="1" />
172
            <input type="hidden" name="domain_ops" value="1" />
171
            <input type="hidden" name="identity_provider_id" value="[%- identity_provider_id | html -%]" />
173
            <input type="hidden" name="identity_provider_id" value="[%- identity_provider_id | html -%]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/identity_providers.tt (+2 lines)
Lines 82-87 Link Here
82
    <h1>New identity provider</h1>
82
    <h1>New identity provider</h1>
83
    <div class="page-section">
83
    <div class="page-section">
84
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="add" name="add" class="validated" method="post">
84
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="add" name="add" class="validated" method="post">
85
            [% INCLUDE 'csrf-token.inc' %]
85
            <input type="hidden" name="op" value="add" />
86
            <input type="hidden" name="op" value="add" />
86
            <fieldset class="rows">
87
            <fieldset class="rows">
87
                <legend id="identity_provider_basic">Basic configuration</legend>
88
                <legend id="identity_provider_basic">Basic configuration</legend>
Lines 236-241 Link Here
236
    <h1>Edit identity provider</h1>
237
    <h1>Edit identity provider</h1>
237
    <div class="page-section">
238
    <div class="page-section">
238
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="edit_save" name="edit_save" class="validated" method="post">
239
        <form action="/cgi-bin/koha/admin/identity_providers.pl" id="edit_save" name="edit_save" class="validated" method="post">
240
            [% INCLUDE 'csrf-token.inc' %]
239
            <input type="hidden" name="op" value="edit_save" />
241
            <input type="hidden" name="op" value="edit_save" />
240
            <input type="hidden" name="identity_provider_id" value="[%- identity_provider.identity_provider_id | html -%]" />
242
            <input type="hidden" name="identity_provider_id" value="[%- identity_provider.identity_provider_id | html -%]" />
241
            <fieldset class="rows">
243
            <fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/items_search_field.tt (+1 lines)
Lines 47-52 Link Here
47
                    <h1>Item search field: [% field.label | html %]</h1>
47
                    <h1>Item search field: [% field.label | html %]</h1>
48
48
49
                    <form action="/cgi-bin/koha/admin/items_search_field.pl" method="POST" id="edit_search_fields">
49
                    <form action="/cgi-bin/koha/admin/items_search_field.pl" method="POST" id="edit_search_fields">
50
                        [% INCLUDE 'csrf-token.inc' %]
50
                        <fieldset class="rows">
51
                        <fieldset class="rows">
51
                        <legend>Edit field</legend>
52
                        <legend>Edit field</legend>
52
                        [% INCLUDE 'admin-items-search-field-form.inc' field=field %]
53
                        [% INCLUDE 'admin-items-search-field-form.inc' field=field %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/items_search_fields.tt (+1 lines)
Lines 109-114 Link Here
109
                    [% END %]
109
                    [% END %]
110
110
111
                    <form id="add_field_form" action="/cgi-bin/koha/admin/items_search_fields.pl" method="POST">
111
                    <form id="add_field_form" action="/cgi-bin/koha/admin/items_search_fields.pl" method="POST">
112
                        [% INCLUDE 'csrf-token.inc' %]
112
                        <fieldset class="rows">
113
                        <fieldset class="rows">
113
                            <legend><h1>Add a new field</h1></legend>
114
                            <legend><h1>Add a new field</h1></legend>
114
                            [% INCLUDE 'admin-items-search-field-form.inc' field=undef %]
115
                            [% INCLUDE 'admin-items-search-field-form.inc' field=undef %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/itemtypes.tt (+3 lines)
Lines 149-154 Link Here
149
        <h1>New item type</h1>
149
        <h1>New item type</h1>
150
    [% END %]
150
    [% END %]
151
    <form action="/cgi-bin/koha/admin/itemtypes.pl" name="Aform" method="post" id="itemtypeentry">
151
    <form action="/cgi-bin/koha/admin/itemtypes.pl" name="Aform" method="post" id="itemtypeentry">
152
        [% INCLUDE 'csrf-token.inc' %]
152
        <input type="hidden" name="op" value="add_validate" />
153
        <input type="hidden" name="op" value="add_validate" />
153
        <fieldset class="rows">
154
        <fieldset class="rows">
154
            <ol>
155
            <ol>
Lines 373-382 Link Here
373
            <tr><th scope="row">Rental charge</th><td>[% itemtype.rentalcharge | $Price %]</td></tr>
374
            <tr><th scope="row">Rental charge</th><td>[% itemtype.rentalcharge | $Price %]</td></tr>
374
        </table>
375
        </table>
375
        <form action="/cgi-bin/koha/admin/itemtypes.pl" method="post">
376
        <form action="/cgi-bin/koha/admin/itemtypes.pl" method="post">
377
            [% INCLUDE 'csrf-token.inc' %]
376
            <input type="hidden" name="op" value="delete_confirmed" /><input type="hidden" name="itemtype" value="[% itemtype.itemtype | html %]" />
378
            <input type="hidden" name="op" value="delete_confirmed" /><input type="hidden" name="itemtype" value="[% itemtype.itemtype | html %]" />
377
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this item type</button>
379
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this item type</button>
378
        </form>
380
        </form>
379
        <form action="/cgi-bin/koha/admin/itemtypes.pl" method="post">
381
        <form action="/cgi-bin/koha/admin/itemtypes.pl" method="post">
382
            [% INCLUDE 'csrf-token.inc' %]
380
            <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
383
            <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
381
        </form>
384
        </form>
382
    </div>
385
    </div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/koha2marclinks.tt (+1 lines)
Lines 36-41 Link Here
36
<br/>
36
<br/>
37
<div class="dialog message">If you make any change to the mappings, you must ask your administrator to run misc/batchRebuildBiblioTables.pl.</div>
37
<div class="dialog message">If you make any change to the mappings, you must ask your administrator to run misc/batchRebuildBiblioTables.pl.</div>
38
<form action="/cgi-bin/koha/admin/koha2marclinks.pl" method="post" id="koha2marc">
38
<form action="/cgi-bin/koha/admin/koha2marclinks.pl" method="post" id="koha2marc">
39
    [% INCLUDE 'csrf-token.inc' %]
39
40
40
[% IF error_add %]
41
[% IF error_add %]
41
    <div class="dialog alert">Failed to add mapping for [% error_info | html %]</div>
42
    <div class="dialog alert">Failed to add mapping for [% error_info | html %]</div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/localization.tt (+1 lines)
Lines 17-22 Link Here
17
            <div class="col-sm-12">
17
            <div class="col-sm-12">
18
                <h1>Localization</h1>
18
                <h1>Localization</h1>
19
<form id="add_translation" method="post">
19
<form id="add_translation" method="post">
20
    [% INCLUDE 'csrf-token.inc' %]
20
    <input type="hidden" name="entity" value="[% entity | html %]" />
21
    <input type="hidden" name="entity" value="[% entity | html %]" />
21
    <input type="hidden" name="code" value="[% code | html %]" />
22
    <input type="hidden" name="code" value="[% code | html %]" />
22
    <input type="hidden" name="interface" value="[% interface_side | html %]" />
23
    <input type="hidden" name="interface" value="[% interface_side | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/marc-overlay-rules.tt (+2 lines)
Lines 78-83 Link Here
78
78
79
                <div class="page-section">
79
                <div class="page-section">
80
                <form action="/cgi-bin/koha/admin/marc-overlay-rules.pl" method="POST" id="marc-overlay-rules-form">
80
                <form action="/cgi-bin/koha/admin/marc-overlay-rules.pl" method="POST" id="marc-overlay-rules-form">
81
                    [% INCLUDE 'csrf-token.inc' %]
81
                    <table id="marc-overlay-rules">
82
                    <table id="marc-overlay-rules">
82
                        <thead><tr>
83
                        <thead><tr>
83
                            <th>Rule</th>
84
                            <th>Rule</th>
Lines 259-264 Link Here
259
                </div> <!-- /.page-section -->
260
                </div> <!-- /.page-section -->
260
261
261
                <form action="/cgi-bin/koha/admin/marc-overlay-rules.pl" method="post">
262
                <form action="/cgi-bin/koha/admin/marc-overlay-rules.pl" method="post">
263
                    [% INCLUDE 'csrf-token.inc' %]
262
                    <input type="hidden" name="op" value="redo-matching" />
264
                    <input type="hidden" name="op" value="redo-matching" />
263
                </form>
265
                </form>
264
266
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/marc_subfields_structure.tt (+3 lines)
Lines 109-114 Link Here
109
                        <div class="hint">You can drag and drop the subfield tabs to change the order.</div>
109
                        <div class="hint">You can drag and drop the subfield tabs to change the order.</div>
110
110
111
                        <form action="[% script_name | html %]" name="Aform" method="post">
111
                        <form action="[% script_name | html %]" name="Aform" method="post">
112
                            [% INCLUDE 'csrf-token.inc' %]
112
                            <input type="hidden" name="op" value="add_validate" />
113
                            <input type="hidden" name="op" value="add_validate" />
113
                            <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
114
                            <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
114
                            <input type="hidden" name="frameworkcode" value="[% frameworkcode | html %]" />
115
                            <input type="hidden" name="frameworkcode" value="[% frameworkcode | html %]" />
Lines 336-341 Link Here
336
                            <p>Description: [% mss.liblibrarian | html_entity %]</p>
337
                            <p>Description: [% mss.liblibrarian | html_entity %]</p>
337
338
338
                            <form action="[% delete_link | html %]" method="post"><input type="hidden" name="op" value="delete_confirmed" />
339
                            <form action="[% delete_link | html %]" method="post"><input type="hidden" name="op" value="delete_confirmed" />
340
                                [% INCLUDE 'csrf-token.inc' %]
339
                                <input type="hidden" name="tagfield" value="[% mss.tagfield | html %]" />
341
                                <input type="hidden" name="tagfield" value="[% mss.tagfield | html %]" />
340
                                <input type="hidden" name="tagsubfield" value="[% mss.tagsubfield | html %]" />
342
                                <input type="hidden" name="tagsubfield" value="[% mss.tagsubfield | html %]" />
341
                                <input type="hidden" name="frameworkcode" value="[% mss.frameworkcode | html %]" />
343
                                <input type="hidden" name="frameworkcode" value="[% mss.frameworkcode | html %]" />
Lines 344-349 Link Here
344
346
345
347
346
                            <form action="[% script_name | html %]" method="post">
348
                            <form action="[% script_name | html %]" method="post">
349
                                [% INCLUDE 'csrf-token.inc' %]
347
                                <input type="hidden" name="tagfield" value="[% mss.tagfield | html %]" />
350
                                <input type="hidden" name="tagfield" value="[% mss.tagfield | html %]" />
348
                                <input type="hidden" name="tagsubfield" value="[% mss.tagsubfield | html %]" />
351
                                <input type="hidden" name="tagsubfield" value="[% mss.tagsubfield | html %]" />
349
                                <input type="hidden" name="frameworkcode" value="[% mss.frameworkcode | html %]" />
352
                                <input type="hidden" name="frameworkcode" value="[% mss.frameworkcode | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/marctagstructure.tt (+5 lines)
Lines 116-121 Link Here
116
[% IF ( add_form ) %]
116
[% IF ( add_form ) %]
117
117
118
    <form action="[% script_name | html %]" name="Aform" method="post" class="validated">
118
    <form action="[% script_name | html %]" name="Aform" method="post" class="validated">
119
        [% INCLUDE 'csrf-token.inc' %]
119
120
120
      <fieldset class="rows">
121
      <fieldset class="rows">
121
            <legend>
122
            <legend>
Lines 189-194 Link Here
189
        <p>Tag: [% searchfield | html %]</p>
190
        <p>Tag: [% searchfield | html %]</p>
190
        <p>Description: [% liblibrarian | html %]</p>
191
        <p>Description: [% liblibrarian | html %]</p>
191
        <form action="[% script_name | html %]" method="post">
192
        <form action="[% script_name | html %]" method="post">
193
            [% INCLUDE 'csrf-token.inc' %]
192
            <input type="hidden" name="op" value="delete_confirmed" />
194
            <input type="hidden" name="op" value="delete_confirmed" />
193
            <input type="hidden" name="searchfield" value="[% searchfield | html %]" />
195
            <input type="hidden" name="searchfield" value="[% searchfield | html %]" />
194
            <input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
196
            <input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
Lines 204-215 Link Here
204
206
205
    <div class="dialog message"><h3>Tag deleted</h3>
207
    <div class="dialog message"><h3>Tag deleted</h3>
206
    <form action="[% script_name | html %]" method="post"><input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
208
    <form action="[% script_name | html %]" method="post"><input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
209
        [% INCLUDE 'csrf-token.inc' %]
207
        <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
210
        <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
208
    </form></div>
211
    </form></div>
209
[% END %]
212
[% END %]
210
[% IF ( framework_create ) %]
213
[% IF ( framework_create ) %]
211
214
212
    <form action="[% script_name | html %]" method="post">
215
    <form action="[% script_name | html %]" method="post">
216
        [% INCLUDE 'csrf-token.inc' %]
213
        <input type="hidden" name="op" value="framework_create_confirm" />
217
        <input type="hidden" name="op" value="framework_create_confirm" />
214
        <input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
218
        <input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
215
        Create framework for [% framework.frameworkcode | html %] ([% framework.frameworktext | html %]) using
219
        Create framework for [% framework.frameworkcode | html %] ([% framework.frameworktext | html %]) using
Lines 226-231 Link Here
226
230
227
[% IF ( else ) %]
231
[% IF ( else ) %]
228
<form name="f" action="[% script_name | html %]" method="post">
232
<form name="f" action="[% script_name | html %]" method="post">
233
    [% INCLUDE 'csrf-token.inc' %]
229
<fieldset style="padding:.5em;">
234
<fieldset style="padding:.5em;">
230
        <label for="tag_search"><strong>Search for tag:</strong> </label>
235
        <label for="tag_search"><strong>Search for tag:</strong> </label>
231
        <input type="text" name="searchfield" id="tag_search" size="4" value="[% searchfield | html %]" />
236
        <input type="text" name="searchfield" id="tag_search" size="4" value="[% searchfield | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/matching-rules.tt (+2 lines)
Lines 113-118 Link Here
113
                        <h1>Add record matching rule</h1>
113
                        <h1>Add record matching rule</h1>
114
                    [% END %]
114
                    [% END %]
115
                    <form action="[% script_name | html %]" name="Aform" method="post">
115
                    <form action="[% script_name | html %]" name="Aform" method="post">
116
                        [% INCLUDE 'csrf-token.inc' %]
116
                        <input type="hidden" name="op" value="[% confirm_op | html %]" />
117
                        <input type="hidden" name="op" value="[% confirm_op | html %]" />
117
                        <fieldset class="rows">
118
                        <fieldset class="rows">
118
                            <ol>
119
                            <ol>
Lines 423-428 Link Here
423
                    <div class="dialog alert">
424
                    <div class="dialog alert">
424
                        <h1>Confirm deletion of record matching rule <span class="ex">'[% code | html %]' ([% description | html %])</span>?</h1>
425
                        <h1>Confirm deletion of record matching rule <span class="ex">'[% code | html %]' ([% description | html %])</span>?</h1>
425
                        <form action="[% script_name | html %]" name="Aform" method="post">
426
                        <form action="[% script_name | html %]" name="Aform" method="post">
427
                            [% INCLUDE 'csrf-token.inc' %]
426
                            <input type="hidden" name="op" value="[% confirm_op | html %]" />
428
                            <input type="hidden" name="op" value="[% confirm_op | html %]" />
427
                            <input type="hidden" name="matcher_id" value="[% matcher_id | html %]" />
429
                            <input type="hidden" name="matcher_id" value="[% matcher_id | html %]" />
428
                            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete record matching rule</button>
430
                            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete record matching rule</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/oai_set_mappings.tt (+1 lines)
Lines 48-53 Link Here
48
      [% END %]
48
      [% END %]
49
49
50
        <form action="/cgi-bin/koha/admin/oai_set_mappings.pl" method="post" id="mappingform">
50
        <form action="/cgi-bin/koha/admin/oai_set_mappings.pl" method="post" id="mappingform">
51
            [% INCLUDE 'csrf-token.inc' %]
51
            <div class="page-section">
52
            <div class="page-section">
52
                <table id="mappings">
53
                <table id="mappings">
53
                    <thead>
54
                    <thead>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/oai_sets.tt (+1 lines)
Lines 58-63 Link Here
58
58
59
        [% IF ( op_new || op_mod ) %]
59
        [% IF ( op_new || op_mod ) %]
60
            <form method="post" action="/cgi-bin/koha/admin/oai_sets.pl" class="validated">
60
            <form method="post" action="/cgi-bin/koha/admin/oai_sets.pl" class="validated">
61
                [% INCLUDE 'csrf-token.inc' %]
61
            [% IF ( op_new ) %]
62
            [% IF ( op_new ) %]
62
                <h1>New OAI set</h1>
63
                <h1>New OAI set</h1>
63
                <input type="hidden" name="op" value="savenew" />
64
                <input type="hidden" name="op" value="savenew" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/overdrive.tt (+1 lines)
Lines 38-43 Link Here
38
                <h1>OverDrive library authnames</h1>
38
                <h1>OverDrive library authnames</h1>
39
39
40
                <form action="/cgi-bin/koha/admin/overdrive.pl" name="overdrive_form" method="post" class="validated">
40
                <form action="/cgi-bin/koha/admin/overdrive.pl" name="overdrive_form" method="post" class="validated">
41
                    [% INCLUDE 'csrf-token.inc' %]
41
                    <input type="hidden" name="op" value="update" />
42
                    <input type="hidden" name="op" value="update" />
42
                    <fieldset>
43
                    <fieldset>
43
                        <table id="od_info">
44
                        <table id="od_info">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/patron-attr-types.tt (+2 lines)
Lines 85-90 Link Here
85
</div>
85
</div>
86
[% END %]
86
[% END %]
87
<form action="[% script_name | html %]" class="validated" method="post">
87
<form action="[% script_name | html %]" class="validated" method="post">
88
    [% INCLUDE 'csrf-token.inc' %]
88
  <input type="hidden" name="op" value="[% confirm_op | html %]" />
89
  <input type="hidden" name="op" value="[% confirm_op | html %]" />
89
  <fieldset class="rows">
90
  <fieldset class="rows">
90
    <ol>
91
    <ol>
Lines 249-254 Link Here
249
    <div class="dialog alert">
250
    <div class="dialog alert">
250
        <h1>Confirm deletion of patron attribute type <span class="ex">'[% code | html %]' ([% description | html %])</span>?</h1>
251
        <h1>Confirm deletion of patron attribute type <span class="ex">'[% code | html %]' ([% description | html %])</span>?</h1>
251
        <form action="[% script_name | html %]" name="Aform" method="post">
252
        <form action="[% script_name | html %]" name="Aform" method="post">
253
            [% INCLUDE 'csrf-token.inc' %]
252
            <input type="hidden" name="op" value="[% confirm_op | html %]" />
254
            <input type="hidden" name="op" value="[% confirm_op | html %]" />
253
            <input type="hidden" name="code" value="[% code | html %]" />
255
            <input type="hidden" name="code" value="[% code | html %]" />
254
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete patron attribute type</button>
256
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete patron attribute type</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/preferences.tt (+1 lines)
Lines 58-63 Link Here
58
    <div class="prefs-tab">
58
    <div class="prefs-tab">
59
    <h2>[% TAB.tab_title | html %] preferences</h2>
59
    <h2>[% TAB.tab_title | html %] preferences</h2>
60
    <form action="/cgi-bin/koha/admin/preferences.pl" method="post">
60
    <form action="/cgi-bin/koha/admin/preferences.pl" method="post">
61
        [% INCLUDE 'csrf-token.inc' %]
61
        [% UNLESS ( searchfield ) %]<div id="toolbar"><button class="save-all btn btn-primary" type="submit">Save all [% TAB.tab_title | html %] preferences</button></div>[% END %]
62
        [% UNLESS ( searchfield ) %]<div id="toolbar"><button class="save-all btn btn-primary" type="submit">Save all [% TAB.tab_title | html %] preferences</button></div>[% END %]
62
        <input type="hidden" name="op" value="save" />
63
        <input type="hidden" name="op" value="save" />
63
        <input type="hidden" name="tab" value="[% TAB.tab_id | html %]" />
64
        <input type="hidden" name="tab" value="[% TAB.tab_id | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/restrictions.tt (+2 lines)
Lines 93-98 Link Here
93
93
94
[% IF op == 'add_form' %]
94
[% IF op == 'add_form' %]
95
    <form id="restriction_form" action="/cgi-bin/koha/admin/restrictions.pl" method="post">
95
    <form id="restriction_form" action="/cgi-bin/koha/admin/restrictions.pl" method="post">
96
        [% INCLUDE 'csrf-token.inc' %]
96
        <input type="hidden" name="op" value="add_validate" />
97
        <input type="hidden" name="op" value="add_validate" />
97
        <input type="hidden" name="checked" value="0" />
98
        <input type="hidden" name="checked" value="0" />
98
        [% IF restriction %]
99
        [% IF restriction %]
Lines 140-145 Link Here
140
        <h1>Confirm restriction type deletion</h1>
141
        <h1>Confirm restriction type deletion</h1>
141
        <p>Are you sure you want to delete '[% PROCESS restriction_type_description restriction_type=restriction %]'?</p>
142
        <p>Are you sure you want to delete '[% PROCESS restriction_type_description restriction_type=restriction %]'?</p>
142
        <form action="/cgi-bin/koha/admin/restrictions.pl" method="post">
143
        <form action="/cgi-bin/koha/admin/restrictions.pl" method="post">
144
            [% INCLUDE 'csrf-token.inc' %]
143
            <input type="hidden" name="op" value="delete_confirmed" />
145
            <input type="hidden" name="op" value="delete_confirmed" />
144
            <input type="hidden" name="code" value="[% restriction.code | html %]" />
146
            <input type="hidden" name="code" value="[% restriction.code | html %]" />
145
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
147
            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/searchengine/elasticsearch/mappings.tt (+3 lines)
Lines 92-102 a.add, a.delete { Link Here
92
        <div class="dialog alert">
92
        <div class="dialog alert">
93
            <h3>The current mappings you see on the screen will be erased and replaced by the mappings in the mappings.yaml file.</h3>
93
            <h3>The current mappings you see on the screen will be erased and replaced by the mappings in the mappings.yaml file.</h3>
94
            <form method="post">
94
            <form method="post">
95
                [% INCLUDE 'csrf-token.inc' %]
95
                <input type="hidden" name="op" value="reset_confirmed" />
96
                <input type="hidden" name="op" value="reset_confirmed" />
96
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, reset mappings</button>
97
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, reset mappings</button>
97
            </form>
98
            </form>
98
99
99
            <form method="post">
100
            <form method="post">
101
                [% INCLUDE 'csrf-token.inc' %]
100
                <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not reset mappings</button>
102
                <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not reset mappings</button>
101
            </form>
103
            </form>
102
        </div>
104
        </div>
Lines 115-120 a.add, a.delete { Link Here
115
    </div>
117
    </div>
116
118
117
    <form id="es_mappings" method="post">
119
    <form id="es_mappings" method="post">
120
        [% INCLUDE 'csrf-token.inc' %]
118
121
119
        [% WRAPPER tabs id= "tabs" %]
122
        [% WRAPPER tabs id= "tabs" %]
120
123
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/share_content.tt (+3 lines)
Lines 67-72 Link Here
67
                    [% END %]
67
                    [% END %]
68
68
69
                    <form id="mana_preference" method="post" class="clearfix">
69
                    <form id="mana_preference" method="post" class="clearfix">
70
                        [% INCLUDE 'csrf-token.inc' %]
70
                        <fieldset class="rows">
71
                        <fieldset class="rows">
71
                            <ol>
72
                            <ol>
72
                                <li>
73
                                <li>
Lines 116-121 Link Here
116
117
117
                    [% IF Koha.Preference('ManaToken') %]
118
                    [% IF Koha.Preference('ManaToken') %]
118
                        <form id="mana_token" method="post" class="clearfix">
119
                        <form id="mana_token" method="post" class="clearfix">
120
                            [% INCLUDE 'csrf-token.inc' %]
119
                            <fieldset class="rows">
121
                            <fieldset class="rows">
120
                            <legend>Mana KB token</legend>
122
                            <legend>Mana KB token</legend>
121
                                <ol>
123
                                <ol>
Lines 133-138 Link Here
133
                        </form>
135
                        </form>
134
                    [% ELSE %]
136
                    [% ELSE %]
135
                        <form id="mana_request" method="post" class="clearfix">
137
                        <form id="mana_request" method="post" class="clearfix">
138
                            [% INCLUDE 'csrf-token.inc' %]
136
                            <fieldset class="rows" id="mana_subscription">
139
                            <fieldset class="rows" id="mana_subscription">
137
                                <ol>
140
                                <ol>
138
                                    <li>
141
                                    <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/smart-rules.tt (+9 lines)
Lines 91-96 Link Here
91
                        </form>
91
                        </form>
92
                        [% IF ( definedbranch ) %]
92
                        [% IF ( definedbranch ) %]
93
                            <form action="/cgi-bin/koha/admin/clone-rules.pl" method="post">
93
                            <form action="/cgi-bin/koha/admin/clone-rules.pl" method="post">
94
                                [% INCLUDE 'csrf-token.inc' %]
94
                                <label for="tobranch"><strong>Clone these rules to:</strong></label>
95
                                <label for="tobranch"><strong>Clone these rules to:</strong></label>
95
                                <input type="hidden" name="frombranch" value="[% current_branch | html %]" />
96
                                <input type="hidden" name="frombranch" value="[% current_branch | html %]" />
96
                                <select name="tobranch" id="tobranch">
97
                                <select name="tobranch" id="tobranch">
Lines 104-109 Link Here
104
105
105
                <div class="page-section">
106
                <div class="page-section">
106
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
107
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
108
                        [% INCLUDE 'csrf-token.inc' %]
107
                        <input type="hidden" name="op" value="add" />
109
                        <input type="hidden" name="op" value="add" />
108
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
110
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
109
                        <table id="default-circulation-rules">
111
                        <table id="default-circulation-rules">
Lines 607-612 Link Here
607
                    <h2>Default checkout, hold and return policy[% IF humanbranch %] for [% Branches.GetName( humanbranch ) | html %][% END %]</h2>
609
                    <h2>Default checkout, hold and return policy[% IF humanbranch %] for [% Branches.GetName( humanbranch ) | html %][% END %]</h2>
608
                    <p>You can set a default maximum number of checkouts, hold policy and return policy that will be used if none is defined below for a particular item type or category.</p>
610
                    <p>You can set a default maximum number of checkouts, hold policy and return policy that will be used if none is defined below for a particular item type or category.</p>
609
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
611
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
612
                        [% INCLUDE 'csrf-token.inc' %]
610
                        <input type="hidden" name="op" value="set-branch-defaults" />
613
                        <input type="hidden" name="op" value="set-branch-defaults" />
611
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
614
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
612
                        <table>
615
                        <table>
Lines 794-799 Link Here
794
                       no limit applies, except possibly for a limit you define for a specific item type.
797
                       no limit applies, except possibly for a limit you define for a specific item type.
795
                    </p>
798
                    </p>
796
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
799
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
800
                        [% INCLUDE 'csrf-token.inc' %]
797
                        <input type="hidden" name="op" value="add-branch-cat" />
801
                        <input type="hidden" name="op" value="add-branch-cat" />
798
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
802
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
799
                        <table>
803
                        <table>
Lines 873-878 Link Here
873
                [% END %]
877
                [% END %]
874
                    <p>Specify if waiting holds can be cancelled for a given patron category.</p>
878
                    <p>Specify if waiting holds can be cancelled for a given patron category.</p>
875
                    <form id="set-waiting-hold-cancellation" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
879
                    <form id="set-waiting-hold-cancellation" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
880
                        [% INCLUDE 'csrf-token.inc' %]
876
                        <input type="hidden" name="op" value="set-waiting-hold-cancellation" />
881
                        <input type="hidden" name="op" value="set-waiting-hold-cancellation" />
877
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
882
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
878
                        <table>
883
                        <table>
Lines 957-962 Link Here
957
                [% END %]
962
                [% END %]
958
                    <p>Specify the maximum number simultaneous current article requests a patron of a given category can have.</p>
963
                    <p>Specify the maximum number simultaneous current article requests a patron of a given category can have.</p>
959
                    <form id="set-article-requests-daily-limit" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
964
                    <form id="set-article-requests-daily-limit" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
965
                        [% INCLUDE 'csrf-token.inc' %]
960
                        <input type="hidden" name="op" value="add-open-article-requests-limit" />
966
                        <input type="hidden" name="op" value="add-open-article-requests-limit" />
961
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
967
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
962
                        <table>
968
                        <table>
Lines 1011-1016 Link Here
1011
                [% END %]
1017
                [% END %]
1012
                    <p>Specify the article request fee for a given patron category.</p>
1018
                    <p>Specify the article request fee for a given patron category.</p>
1013
                    <form id="set-article-request-fee" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
1019
                    <form id="set-article-request-fee" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
1020
                        [% INCLUDE 'csrf-token.inc' %]
1014
                        <input type="hidden" name="op" value="set-article-request-fee" />
1021
                        <input type="hidden" name="op" value="set-article-request-fee" />
1015
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
1022
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
1016
                        <table>
1023
                        <table>
Lines 1071-1076 Link Here
1071
                [% END %]
1078
                [% END %]
1072
                    <p>Specify the default policy for lost item fees on return.</p>
1079
                    <p>Specify the default policy for lost item fees on return.</p>
1073
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
1080
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
1081
                        [% INCLUDE 'csrf-token.inc' %]
1074
                        <input type="hidden" name="op" value="mod-refund-lost-item-fee-rule" />
1082
                        <input type="hidden" name="op" value="mod-refund-lost-item-fee-rule" />
1075
                        <input type="hidden" name="branch" value="[% current_branch | html %]" />
1083
                        <input type="hidden" name="branch" value="[% current_branch | html %]" />
1076
                        <table>
1084
                        <table>
Lines 1272-1277 Link Here
1272
                    </ul>
1280
                    </ul>
1273
1281
1274
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
1282
                    <form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
1283
                        [% INCLUDE 'csrf-token.inc' %]
1275
                        <input type="hidden" name="op" value="add-branch-item" />
1284
                        <input type="hidden" name="op" value="add-branch-item" />
1276
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
1285
                        <input type="hidden" name="branch" value="[% current_branch | html %]"/>
1277
                        <table>
1286
                        <table>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/sms_providers.tt (+1 lines)
Lines 79-84 Link Here
79
79
80
                <div id="sms_add_form">
80
                <div id="sms_add_form">
81
                    <form id="sms_form" action="sms_providers.pl" method="post" class="validated">
81
                    <form id="sms_form" action="sms_providers.pl" method="post" class="validated">
82
                        [% INCLUDE 'csrf-token.inc' %]
82
                        <fieldset class="rows">
83
                        <fieldset class="rows">
83
                            <legend>Add an SMS cellular provider</legend>
84
                            <legend>Add an SMS cellular provider</legend>
84
                            <input type="hidden" id="id" name="id" value="" />
85
                            <input type="hidden" id="id" name="id" value="" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/smtp_servers.tt (+2 lines)
Lines 79-84 Link Here
79
[% IF op == 'add_form' %]
79
[% IF op == 'add_form' %]
80
    <h1>New SMTP server</h1>
80
    <h1>New SMTP server</h1>
81
    <form action="/cgi-bin/koha/admin/smtp_servers.pl" id="add" name="add" class="validated" method="post">
81
    <form action="/cgi-bin/koha/admin/smtp_servers.pl" id="add" name="add" class="validated" method="post">
82
        [% INCLUDE 'csrf-token.inc' %]
82
        <input type="hidden" name="op" value="add" />
83
        <input type="hidden" name="op" value="add" />
83
        <fieldset class="rows">
84
        <fieldset class="rows">
84
            <ol>
85
            <ol>
Lines 152-157 Link Here
152
    [% END %]
153
    [% END %]
153
154
154
    <form action="/cgi-bin/koha/admin/smtp_servers.pl" id="edit_save" name="edit_save" class="validated" method="post">
155
    <form action="/cgi-bin/koha/admin/smtp_servers.pl" id="edit_save" name="edit_save" class="validated" method="post">
156
        [% INCLUDE 'csrf-token.inc' %]
155
        <input type="hidden" name="op" value="edit_save" />
157
        <input type="hidden" name="op" value="edit_save" />
156
        <input type="hidden" name="smtp_server_id" value="[%- smtp_server.id | html -%]" />
158
        <input type="hidden" name="smtp_server_id" value="[%- smtp_server.id | html -%]" />
157
        <fieldset class="rows">
159
        <fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/sru_modmapping.tt (+1 lines)
Lines 20-25 Link Here
20
        <h1>SRU search field mapping for bibliographic records</h1>
20
        <h1>SRU search field mapping for bibliographic records</h1>
21
21
22
        <form id="form01" method="post">
22
        <form id="form01" method="post">
23
            [% INCLUDE 'csrf-token.inc' %]
23
            <fieldset class="rows">
24
            <fieldset class="rows">
24
                <div class="row">
25
                <div class="row">
25
                    <div class="col-xs-6">
26
                    <div class="col-xs-6">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/sru_modmapping_auth.tt (+1 lines)
Lines 17-22 Link Here
17
    <main>
17
    <main>
18
        <h1>SRU search field mapping for authorities</h1>
18
        <h1>SRU search field mapping for authorities</h1>
19
        <form id="form01" method="post">
19
        <form id="form01" method="post">
20
            [% INCLUDE 'csrf-token.inc' %]
20
            <fieldset class="rows">
21
            <fieldset class="rows">
21
                <div class="row">
22
                <div class="row">
22
                    <div class="col-xs-6">
23
                    <div class="col-xs-6">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/systempreferences.tt (+5 lines)
Lines 93-98 Link Here
93
            <form action="[% script_name | html %]" name="Aform" method="post" enctype="multipart/form-data">
93
            <form action="[% script_name | html %]" name="Aform" method="post" enctype="multipart/form-data">
94
        [% ELSE %]
94
        [% ELSE %]
95
            <form action="[% script_name | html %]" name="Aform" method="post">
95
            <form action="[% script_name | html %]" name="Aform" method="post">
96
                [% INCLUDE 'csrf-token.inc' %]
96
        [% END %]
97
        [% END %]
97
        <fieldset class="rows">
98
        <fieldset class="rows">
98
            <legend class="sr-only">System preference details</legend>
99
            <legend class="sr-only">System preference details</legend>
Lines 279-290 Link Here
279
                </tr>
280
                </tr>
280
            </table>
281
            </table>
281
            <form class="inline" action="[% script_name | html %]" method="post">
282
            <form class="inline" action="[% script_name | html %]" method="post">
283
                [% INCLUDE 'csrf-token.inc' %]
282
                <input type="hidden" name="op" value="delete_confirmed" />
284
                <input type="hidden" name="op" value="delete_confirmed" />
283
                <input type="hidden" name="searchfield" value="[% searchfield | html %]" />
285
                <input type="hidden" name="searchfield" value="[% searchfield | html %]" />
284
                <input type="hidden" name="Tvalue" value="[% Tvalue | html %]" />
286
                <input type="hidden" name="Tvalue" value="[% Tvalue | html %]" />
285
                <button type="submit" class="approve"><i class="fa fa-check" aria-hidden="true"></i> Yes, delete</button>
287
                <button type="submit" class="approve"><i class="fa fa-check" aria-hidden="true"></i> Yes, delete</button>
286
            </form>
288
            </form>
287
            <form class="inline" action="[% script_name | html %]" method="post">
289
            <form class="inline" action="[% script_name | html %]" method="post">
290
                [% INCLUDE 'csrf-token.inc' %]
288
                <button type="submit" class="deny"><i class="fa fa-remove" aria-hidden="true"></i> No, do not delete</button>
291
                <button type="submit" class="deny"><i class="fa fa-remove" aria-hidden="true"></i> No, do not delete</button>
289
            </form>
292
            </form>
290
        </div>
293
        </div>
Lines 294-299 Link Here
294
        <div class="dialog message">
297
        <div class="dialog message">
295
            <h1>Data deleted</h1>
298
            <h1>Data deleted</h1>
296
            <form action="[% script_name | html %]" method="post">
299
            <form action="[% script_name | html %]" method="post">
300
                [% INCLUDE 'csrf-token.inc' %]
297
                <button type="submit">Back to system preferences</button>
301
                <button type="submit">Back to system preferences</button>
298
            </form>
302
            </form>
299
        </div>
303
        </div>
Lines 332-337 Link Here
332
            <form action="/cgi-bin/koha/admin/systempreferences.pl" method="post" enctype="multipart/form-data">
336
            <form action="/cgi-bin/koha/admin/systempreferences.pl" method="post" enctype="multipart/form-data">
333
        [% ELSE %]
337
        [% ELSE %]
334
            <form action="/cgi-bin/koha/admin/systempreferences.pl" method="post">
338
            <form action="/cgi-bin/koha/admin/systempreferences.pl" method="post">
339
                [% INCLUDE 'csrf-token.inc' %]
335
        [% END %]
340
        [% END %]
336
                [% IF ( loo.type_free ) %]
341
                [% IF ( loo.type_free ) %]
337
                <input type="text" name="value" size="[% loo.fieldlength | html %]" value="[% loo.value | html %]" />
342
                <input type="text" name="value" size="[% loo.fieldlength | html %]" value="[% loo.value | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/transport-cost-matrix.tt (+1 lines)
Lines 55-60 Link Here
55
    </div>[% END %]
55
    </div>[% END %]
56
56
57
        <form method="post" action="/cgi-bin/koha/admin/transport-cost-matrix.pl" id="cost_matrix_form">
57
        <form method="post" action="/cgi-bin/koha/admin/transport-cost-matrix.pl" id="cost_matrix_form">
58
            [% INCLUDE 'csrf-token.inc' %]
58
            <input type="hidden" name="op" value="set-cost-matrix" />
59
            <input type="hidden" name="op" value="set-cost-matrix" />
59
            <fieldset id="transport-cost-matrix">
60
            <fieldset id="transport-cost-matrix">
60
                <div class="help">
61
                <div class="help">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/usage_statistics.tt (+1 lines)
Lines 64-69 Link Here
64
[% END %]
64
[% END %]
65
65
66
    <form id="category_form" action="/cgi-bin/koha/admin/usage_statistics.pl" method="post">
66
    <form id="category_form" action="/cgi-bin/koha/admin/usage_statistics.pl" method="post">
67
        [% INCLUDE 'csrf-token.inc' %]
67
        <h1>Modify the statistics you share with the Koha community</h1>
68
        <h1>Modify the statistics you share with the Koha community</h1>
68
        <div class="row">
69
        <div class="row">
69
            <div class="col-xs-12 col-sm-6">
70
            <div class="col-xs-12 col-sm-6">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/z3950servers.tt (+1 lines)
Lines 82-87 Link Here
82
82
83
[% IF ( add_form ) %]
83
[% IF ( add_form ) %]
84
    <form action="[% script_name | html %]" name="Aform" method="post" id="serverentry">
84
    <form action="[% script_name | html %]" name="Aform" method="post" id="serverentry">
85
        [% INCLUDE 'csrf-token.inc' %]
85
        [% IF op == 'edit' %]
86
        [% IF op == 'edit' %]
86
            <h1>[% tx("Modify {servertype} server '{servername}'", { servertype = servertype, servername = server.servername }) | html %]</h1>
87
            <h1>[% tx("Modify {servertype} server '{servername}'", { servertype = servertype, servername = server.servername }) | html %]</h1>
87
            <input type="hidden" name="id" value="[% server.id | html %]" />
88
            <input type="hidden" name="id" value="[% server.id | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/auth.tt (+2 lines)
Lines 103-108 Link Here
103
    [% END # /IF  identity_providers.size %]
103
    [% END # /IF  identity_providers.size %]
104
104
105
    <form action="[% script_name | html %]" method="post" name="loginform" id="loginform">
105
    <form action="[% script_name | html %]" method="post" name="loginform" id="loginform">
106
        [% INCLUDE 'csrf-token.inc' %]
106
        <input type="hidden" name="koha_login_context" value="intranet" />
107
        <input type="hidden" name="koha_login_context" value="intranet" />
107
    [% FOREACH INPUT IN INPUTS %]
108
    [% FOREACH INPUT IN INPUTS %]
108
        <input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />
109
        <input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />
Lines 176-181 Link Here
176
    [% END %]
177
    [% END %]
177
[% ELSIF TwoFA_prompt %]
178
[% ELSIF TwoFA_prompt %]
178
    <form action="[% script_name | html %]" method="post" name="loginform" id="loginform" autocomplete="off">
179
    <form action="[% script_name | html %]" method="post" name="loginform" id="loginform" autocomplete="off">
180
        [% INCLUDE 'csrf-token.inc' %]
179
        <input type="hidden" name="koha_login_context" value="intranet" />
181
        <input type="hidden" name="koha_login_context" value="intranet" />
180
        [% FOREACH INPUT IN INPUTS %]
182
        [% FOREACH INPUT IN INPUTS %]
181
            <input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />
183
            <input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/authorities/authorities.tt (+1 lines)
Lines 414-419 Link Here
414
                [% END # /IF duplicateauthid %]
414
                [% END # /IF duplicateauthid %]
415
415
416
                <form method="post" id="f" name="f" action="/cgi-bin/koha/authorities/authorities.pl">
416
                <form method="post" id="f" name="f" action="/cgi-bin/koha/authorities/authorities.pl">
417
                    [% INCLUDE 'csrf-token.inc' %]
417
                    <input type="hidden" name="op" value="add" />
418
                    <input type="hidden" name="op" value="add" />
418
                    <input type="hidden" name="addfield_field" value="" />
419
                    <input type="hidden" name="addfield_field" value="" />
419
                    <input type="hidden" name="repeat_field" value="" />
420
                    <input type="hidden" name="repeat_field" value="" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/authorities/merge.tt (+2 lines)
Lines 68-73 div#result { margin-top: 1em; } Link Here
68
68
69
<p>Please choose which record will be the reference for the merge. The record chosen as reference will be kept, and the other will be deleted.</p>
69
<p>Please choose which record will be the reference for the merge. The record chosen as reference will be kept, and the other will be deleted.</p>
70
<form id="mergeform" action="/cgi-bin/koha/authorities/merge.pl" method="post">
70
<form id="mergeform" action="/cgi-bin/koha/authorities/merge.pl" method="post">
71
    [% INCLUDE 'csrf-token.inc' %]
71
    <fieldset class="rows">
72
    <fieldset class="rows">
72
    <legend>Merge reference</legend>
73
    <legend>Merge reference</legend>
73
    <ol>
74
    <ol>
Lines 101-106 div#result { margin-top: 1em; } Link Here
101
[% ELSE %]
102
[% ELSE %]
102
103
103
<form id="mergeform" action="/cgi-bin/koha/authorities/merge.pl" method="post" onsubmit="return mergeformsubmit()">
104
<form id="mergeform" action="/cgi-bin/koha/authorities/merge.pl" method="post" onsubmit="return mergeformsubmit()">
105
    [% INCLUDE 'csrf-token.inc' %]
104
106
105
    <div class="row">
107
    <div class="row">
106
        <div class="col-sm-6">
108
        <div class="col-sm-6">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/basket/downloadcart.tt (+1 lines)
Lines 7-12 Link Here
7
    <p>Your download should begin automatically.</p>
7
    <p>Your download should begin automatically.</p>
8
[% ELSE %]
8
[% ELSE %]
9
<form method="post" action="/cgi-bin/koha/basket/downloadcart.pl">
9
<form method="post" action="/cgi-bin/koha/basket/downloadcart.pl">
10
    [% INCLUDE 'csrf-token.inc' %]
10
<fieldset class="rows">
11
<fieldset class="rows">
11
	<legend>Download cart</legend>
12
	<legend>Download cart</legend>
12
	<ol><li>
13
	<ol><li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/basket/sendbasketform.tt (+1 lines)
Lines 18-23 Link Here
18
18
19
[% INCLUDE 'blocking_errors.inc' %]
19
[% INCLUDE 'blocking_errors.inc' %]
20
<form action="/cgi-bin/koha/basket/sendbasket.pl" method="post">
20
<form action="/cgi-bin/koha/basket/sendbasket.pl" method="post">
21
    [% INCLUDE 'csrf-token.inc' %]
21
22
22
<fieldset class="rows"> 
23
<fieldset class="rows"> 
23
<legend>Sending your cart</legend>
24
<legend>Sending your cart</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/moredetail.tt (+6 lines)
Lines 193-198 Link Here
193
                                                [% IF ( CAN_user_circulate ) %]
193
                                                [% IF ( CAN_user_circulate ) %]
194
                                                    [% SET ClaimReturnedLostValue = Koha.Preference('ClaimReturnedLostValue') %]
194
                                                    [% SET ClaimReturnedLostValue = Koha.Preference('ClaimReturnedLostValue') %]
195
                                                    <form action="updateitem.pl" method="post">
195
                                                    <form action="updateitem.pl" method="post">
196
                                                        [% INCLUDE 'csrf-token.inc' %]
196
                                                        <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
197
                                                        <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
197
                                                        <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
198
                                                        <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
198
                                                        <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
199
                                                        <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
Lines 242-247 Link Here
242
                                                <span class="label">Damaged status:</span>
243
                                                <span class="label">Damaged status:</span>
243
                                                [% IF ( CAN_user_circulate ) %]
244
                                                [% IF ( CAN_user_circulate ) %]
244
                                                    <form action="updateitem.pl" method="post">
245
                                                    <form action="updateitem.pl" method="post">
246
                                                        [% INCLUDE 'csrf-token.inc' %]
245
                                                        <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
247
                                                        <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
246
                                                        <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
248
                                                        <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
247
                                                        <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
249
                                                        <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
Lines 276-281 Link Here
276
                                                <span class="label">Withdrawn status:</span>
278
                                                <span class="label">Withdrawn status:</span>
277
                                                [% IF ( CAN_user_circulate ) %]
279
                                                [% IF ( CAN_user_circulate ) %]
278
                                                    <form action="updateitem.pl" method="post">
280
                                                    <form action="updateitem.pl" method="post">
281
                                                        [% INCLUDE 'csrf-token.inc' %]
279
                                                        <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
282
                                                        <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
280
                                                        <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
283
                                                        <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
281
                                                        <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
284
                                                        <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
Lines 315-320 Link Here
315
                                        <li>
318
                                        <li>
316
                                            <span class="label">Exclude from local holds priority:</span>
319
                                            <span class="label">Exclude from local holds priority:</span>
317
                                            <form action="updateitem.pl" method="post">
320
                                            <form action="updateitem.pl" method="post">
321
                                                [% INCLUDE 'csrf-token.inc' %]
318
                                                <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
322
                                                <input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
319
                                                <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
323
                                                <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" />
320
                                                <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
324
                                                <input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
Lines 428-433 Link Here
428
                                            <span class="label">Public note:</span>
432
                                            <span class="label">Public note:</span>
429
                                            [% IF ( CAN_user_editcatalogue_edit_items ) %]
433
                                            [% IF ( CAN_user_editcatalogue_edit_items ) %]
430
                                                <form class="inline" action="updateitem.pl" method="post"><input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
434
                                                <form class="inline" action="updateitem.pl" method="post"><input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
435
                                                    [% INCLUDE 'csrf-token.inc' %]
431
                                                    <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" /><input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
436
                                                    <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" /><input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
432
                                                    <input type="hidden" name="op" value="set_public_note" />
437
                                                    <input type="hidden" name="op" value="set_public_note" />
433
                                                    <textarea name="itemnotes" rows="2" cols="30">[% ITEM_DAT.itemnotes | html %]</textarea><input type="submit" name="submit" class="btn btn-primary btn-xs" value="Update" />
438
                                                    <textarea name="itemnotes" rows="2" cols="30">[% ITEM_DAT.itemnotes | html %]</textarea><input type="submit" name="submit" class="btn btn-primary btn-xs" value="Update" />
Lines 441-446 Link Here
441
                                            <span class="label">Non-public note:</span>
446
                                            <span class="label">Non-public note:</span>
442
                                            [% IF ( CAN_user_editcatalogue_edit_items ) %]
447
                                            [% IF ( CAN_user_editcatalogue_edit_items ) %]
443
                                                <form class="inline" action="updateitem.pl" method="post"><input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
448
                                                <form class="inline" action="updateitem.pl" method="post"><input type="hidden" name="biblionumber" value="[% ITEM_DAT.biblionumber | html %]" />
449
                                                    [% INCLUDE 'csrf-token.inc' %]
444
                                                    <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" /><input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
450
                                                    <input type="hidden" name="biblioitemnumber" value="[% ITEM_DAT.biblioitemnumber | html %]" /><input type="hidden" name="itemnumber" value="[% ITEM_DAT.itemnumber | html %]" />
445
                                                    <input type="hidden" name="op" value="set_non_public_note" />
451
                                                    <input type="hidden" name="op" value="set_non_public_note" />
446
                                                    <textarea name="itemnotes_nonpublic" rows="2" cols="30">[% ITEM_DAT.itemnotes_nonpublic | html %]</textarea><input type="submit" name="submit" class="btn btn-primary btn-xs" value="Update" />
452
                                                    <textarea name="itemnotes_nonpublic" rows="2" cols="30">[% ITEM_DAT.itemnotes_nonpublic | html %]</textarea><input type="submit" name="submit" class="btn btn-primary btn-xs" value="Update" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tt (+1 lines)
Lines 341-346 Link Here
341
341
342
                [% ELSE # /IF total %]
342
                [% ELSE # /IF total %]
343
                    <form method="post" name="fz3950" class="fz3950bigrpad">
343
                    <form method="post" name="fz3950" class="fz3950bigrpad">
344
                        [% INCLUDE 'csrf-token.inc' %]
344
                        <div id="toolbar" class="btn-toolbar" style="background-color:transparent"><div>
345
                        <div id="toolbar" class="btn-toolbar" style="background-color:transparent"><div>
345
                            <button class="btn btn-default" type="button" id="z3950submit"><i class="fa fa-search"></i> Z39.50/SRU search</button>
346
                            <button class="btn btn-default" type="button" id="z3950submit"><i class="fa fa-search"></i> Z39.50/SRU search</button>
346
                        </div></div>
347
                        </div></div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/search-history.tt (+4 lines)
Lines 42-47 Link Here
42
                        [% IF ( current_biblio_searches ) %]
42
                        [% IF ( current_biblio_searches ) %]
43
                            <h2>Current session</h2>
43
                            <h2>Current session</h2>
44
                            <form id="current_cat" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
44
                            <form id="current_cat" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
45
                                [% INCLUDE 'csrf-token.inc' %]
45
                                <p class="selections-toolbar">
46
                                <p class="selections-toolbar">
46
                                    <a class="CheckAll" data-form="current_cat" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
47
                                    <a class="CheckAll" data-form="current_cat" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
47
                                    <span class="sep">|</span>
48
                                    <span class="sep">|</span>
Lines 83-88 Link Here
83
                        [% IF ( previous_biblio_searches ) %]
84
                        [% IF ( previous_biblio_searches ) %]
84
                            <h2>Previous sessions</h2>
85
                            <h2>Previous sessions</h2>
85
                            <form id="previous_cat" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
86
                            <form id="previous_cat" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
87
                                [% INCLUDE 'csrf-token.inc' %]
86
                                <p class="selections-toolbar">
88
                                <p class="selections-toolbar">
87
                                    <a class="CheckAll" data-form="previous_cat" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
89
                                    <a class="CheckAll" data-form="previous_cat" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
88
                                    <span class="sep">|</span>
90
                                    <span class="sep">|</span>
Lines 126-131 Link Here
126
                        [% IF ( current_authority_searches ) %]
128
                        [% IF ( current_authority_searches ) %]
127
                            <h2>Current session</h2>
129
                            <h2>Current session</h2>
128
                            <form id="current_auth" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
130
                            <form id="current_auth" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
131
                                [% INCLUDE 'csrf-token.inc' %]
129
                                <p class="selections-toolbar">
132
                                <p class="selections-toolbar">
130
                                    <a class="CheckAll" data-form="current_auth" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
133
                                    <a class="CheckAll" data-form="current_auth" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
131
                                    <span class="sep">|</span>
134
                                    <span class="sep">|</span>
Lines 167-172 Link Here
167
                        [% IF ( previous_authority_searches ) %]
170
                        [% IF ( previous_authority_searches ) %]
168
                            <h2>Previous sessions</h2>
171
                            <h2>Previous sessions</h2>
169
                            <form id="previous_auth" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
172
                            <form id="previous_auth" action="/cgi-bin/koha/catalogue/search-history.pl" method="post">
173
                                [% INCLUDE 'csrf-token.inc' %]
170
                                <p class="selections-toolbar">
174
                                <p class="selections-toolbar">
171
                                    <a class="CheckAll" data-form="previous_auth" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
175
                                    <a class="CheckAll" data-form="previous_auth" href="#"><i class="fa fa-check"></i> Select all visible rows</a>
172
                                    <span class="sep">|</span>
176
                                    <span class="sep">|</span>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/stockrotation.tt (+1 lines)
Lines 134-139 Link Here
134
                                        </a>
134
                                        </a>
135
                                    [% ELSE %]
135
                                    [% ELSE %]
136
                                        <form class="rota_select_form" method="post" enctype="multipart/form-data">
136
                                        <form class="rota_select_form" method="post" enctype="multipart/form-data">
137
                                            [% INCLUDE 'csrf-token.inc' %]
137
                                            <select class="item_select_rota" name="rota_id">
138
                                            <select class="item_select_rota" name="rota_id">
138
                                                [% FOREACH rota IN rotas %]
139
                                                [% FOREACH rota IN rotas %]
139
                                                    <option value="[% rota.rota_id | uri %]">[% rota.title | html %]</option>
140
                                                    <option value="[% rota.rota_id | uri %]">[% rota.title | html %]</option>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/addbiblio.tt (+1 lines)
Lines 887-892 $(document).ready(function(){ Link Here
887
                    </script>
887
                    </script>
888
                [% ELSE %]
888
                [% ELSE %]
889
                    <form method="post" name="f" id="f" action="/cgi-bin/koha/cataloguing/addbiblio.pl" onsubmit="return Check();">
889
                    <form method="post" name="f" id="f" action="/cgi-bin/koha/cataloguing/addbiblio.pl" onsubmit="return Check();">
890
                        [% INCLUDE 'csrf-token.inc' %]
890
                        <input type="hidden" value="[% IF ( biblionumber ) %]view[% ELSE %]items[% END %]" id="redirect" name="redirect" />
891
                        <input type="hidden" value="[% IF ( biblionumber ) %]view[% ELSE %]items[% END %]" id="redirect" name="redirect" />
891
                        <input type="hidden" value="" id="current_tab" name="current_tab" />
892
                        <input type="hidden" value="" id="current_tab" name="current_tab" />
892
                        <input type="hidden" value="0" id="confirm_not_duplicate" name="confirm_not_duplicate" />
893
                        <input type="hidden" value="0" id="confirm_not_duplicate" name="confirm_not_duplicate" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/additem.tt (+1 lines)
Lines 176-181 Link Here
176
176
177
<div id="cataloguing_additem_newitem" class="item_edit_form page-section">
177
<div id="cataloguing_additem_newitem" class="item_edit_form page-section">
178
    <form id="f" method="post" action="/cgi-bin/koha/cataloguing/additem.pl?biblionumber=[% biblio.biblionumber | html %]" name="f">
178
    <form id="f" method="post" action="/cgi-bin/koha/cataloguing/additem.pl?biblionumber=[% biblio.biblionumber | html %]" name="f">
179
        [% INCLUDE 'csrf-token.inc' %]
179
    <input type="hidden" name="op" value="[% op | html %]" />
180
    <input type="hidden" name="op" value="[% op | html %]" />
180
    [% IF (popup) %]
181
    [% IF (popup) %]
181
        <input type="hidden" name="popup" value="1" />
182
        <input type="hidden" name="popup" value="1" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/linkitem.tt (+3 lines)
Lines 37-42 Link Here
37
	[% IF ( errornohostitemnumber ) %]ERROR: Unable to get the item number from this barcode.[% END %]
37
	[% IF ( errornohostitemnumber ) %]ERROR: Unable to get the item number from this barcode.[% END %]
38
    </div>
38
    </div>
39
    <form action="/cgi-bin/koha/catalogue/MARCdetail.pl" method="post">
39
    <form action="/cgi-bin/koha/catalogue/MARCdetail.pl" method="post">
40
        [% INCLUDE 'csrf-token.inc' %]
40
    <input type="submit" class="btn btn-primary" value="OK" />
41
    <input type="submit" class="btn btn-primary" value="OK" />
41
	<input type="hidden" name="biblionumber" value="[% biblionumber | html %]" />
42
	<input type="hidden" name="biblionumber" value="[% biblionumber | html %]" />
42
    </form>
43
    </form>
Lines 44-55 Link Here
44
    [% IF ( success ) %]
45
    [% IF ( success ) %]
45
    <div class="dialog message">The item has successfully been linked to <em>[% bibliotitle | html %]</em>.</div>
46
    <div class="dialog message">The item has successfully been linked to <em>[% bibliotitle | html %]</em>.</div>
46
	<form action="/cgi-bin/koha/catalogue/MARCdetail.pl" method="post">
47
	<form action="/cgi-bin/koha/catalogue/MARCdetail.pl" method="post">
48
	    [% INCLUDE 'csrf-token.inc' %]
47
        <input type="submit" class="btn btn-primary" value="OK" />
49
        <input type="submit" class="btn btn-primary" value="OK" />
48
	    <input type="hidden" name="biblionumber" value="[% biblionumber | html %]" />
50
	    <input type="hidden" name="biblionumber" value="[% biblionumber | html %]" />
49
	</form>
51
	</form>
50
    [% ELSE %]
52
    [% ELSE %]
51
	[% IF ( missingparameter ) %]
53
	[% IF ( missingparameter ) %]
52
	<form method="post" action="/cgi-bin/koha/cataloguing/linkitem.pl">
54
	<form method="post" action="/cgi-bin/koha/cataloguing/linkitem.pl">
55
	    [% INCLUDE 'csrf-token.inc' %]
53
	    [% IF ( missingbiblionumber ) %]
56
	    [% IF ( missingbiblionumber ) %]
54
	    <fieldset id="biblionumber_fieldset">
57
	    <fieldset id="biblionumber_fieldset">
55
		<label for="biblionumber_fieldset">Select the biblionumber to link the item to</label>
58
		<label for="biblionumber_fieldset">Select the biblionumber to link the item to</label>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/merge.tt (+2 lines)
Lines 105-110 div#result { margin-top: 1em; } Link Here
105
[% IF ( choosereference ) %]
105
[% IF ( choosereference ) %]
106
<p>Please choose which record will be the reference for the merge. The record chosen as reference will be kept, and the other will be deleted.</p>
106
<p>Please choose which record will be the reference for the merge. The record chosen as reference will be kept, and the other will be deleted.</p>
107
<form id="mergeform" action="/cgi-bin/koha/cataloguing/merge.pl" method="post">
107
<form id="mergeform" action="/cgi-bin/koha/cataloguing/merge.pl" method="post">
108
    [% INCLUDE 'csrf-token.inc' %]
108
    <fieldset class="rows">
109
    <fieldset class="rows">
109
    <legend>Merge reference</legend>
110
    <legend>Merge reference</legend>
110
    <ol>
111
    <ol>
Lines 168-173 div#result { margin-top: 1em; } Link Here
168
    </div>
169
    </div>
169
[% ELSE %]
170
[% ELSE %]
170
<form id="mergeform" action="/cgi-bin/koha/cataloguing/merge.pl" method="post" onsubmit="return mergeformsubmit()">
171
<form id="mergeform" action="/cgi-bin/koha/cataloguing/merge.pl" method="post" onsubmit="return mergeformsubmit()">
172
    [% INCLUDE 'csrf-token.inc' %]
171
173
172
<div class="col-sm-6">
174
<div class="col-sm-6">
173
[% PROCESS mergesource sourcerecords=records %]
175
[% PROCESS mergesource sourcerecords=records %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/moveitem.tt (+2 lines)
Lines 42-47 Link Here
42
                             <form action="/cgi-bin/koha/catalogue/ISBDdetail.pl" method="post">
42
                             <form action="/cgi-bin/koha/catalogue/ISBDdetail.pl" method="post">
43
                        [% ELSE %]
43
                        [% ELSE %]
44
                             <form action="/cgi-bin/koha/catalogue/detail.pl" method="post">
44
                             <form action="/cgi-bin/koha/catalogue/detail.pl" method="post">
45
                                 [% INCLUDE 'csrf-token.inc' %]
45
                        [% END %]
46
                        [% END %]
46
[% END %]
47
[% END %]
47
48
Lines 103-108 Link Here
103
    [% ELSE %]
104
    [% ELSE %]
104
	[% IF ( missingparameter ) %]
105
	[% IF ( missingparameter ) %]
105
	<form method="post" action="/cgi-bin/koha/cataloguing/moveitem.pl">
106
	<form method="post" action="/cgi-bin/koha/cataloguing/moveitem.pl">
107
	    [% INCLUDE 'csrf-token.inc' %]
106
	    [% IF ( missingbiblionumber ) %]
108
	    [% IF ( missingbiblionumber ) %]
107
	    <fieldset id="biblionumber_fieldset">
109
	    <fieldset id="biblionumber_fieldset">
108
		<label for="biblionumber">Select the biblionumber to attach the item to</label>
110
		<label for="biblionumber">Select the biblionumber to attach the item to</label>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/marc21_linking_section.tt (+1 lines)
Lines 22-27 Link Here
22
        <div id="MARC21_Linking_section_search" class="page-section">
22
        <div id="MARC21_Linking_section_search" class="page-section">
23
            <h2>Search for</h2>
23
            <h2>Search for</h2>
24
            <form name="f" method="post" action="/cgi-bin/koha/cataloguing/plugin_launcher.pl?plugin_name=marc21_linking_section.pl">
24
            <form name="f" method="post" action="/cgi-bin/koha/cataloguing/plugin_launcher.pl?plugin_name=marc21_linking_section.pl">
25
                [% INCLUDE 'csrf-token.inc' %]
25
26
26
                <p>
27
                <p>
27
                    <input type="hidden" name="plugin_name" value="marc21_linking_section.pl" />
28
                    <input type="hidden" name="plugin_name" value="marc21_linking_section.pl" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/unimarc_field_210c.tt (+1 lines)
Lines 15-20 Link Here
15
<h1>UNIMARC field 210c builder</h1>
15
<h1>UNIMARC field 210c builder</h1>
16
    <h4>Search for authority type: EDITORS</h4>
16
    <h4>Search for authority type: EDITORS</h4>
17
        <form name="f" method="post" action="plugin_launcher.pl">
17
        <form name="f" method="post" action="plugin_launcher.pl">
18
            [% INCLUDE 'csrf-token.inc' %]
18
        <fieldset class="rows">
19
        <fieldset class="rows">
19
            <input type="hidden" name="plugin_name" value="unimarc_field_210c.pl" />
20
            <input type="hidden" name="plugin_name" value="unimarc_field_210c.pl" />
20
            <input type="hidden" name="op" value="do_search" />
21
            <input type="hidden" name="op" value="do_search" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/unimarc_field_4XX.tt (+1 lines)
Lines 19-24 Link Here
19
            <div id="UNIMARC_Field_4XX_search" class="page-section">
19
            <div id="UNIMARC_Field_4XX_search" class="page-section">
20
                <h2> Search on  </h2>
20
                <h2> Search on  </h2>
21
                <form name="f" method="post" action="/cgi-bin/koha/cataloguing/plugin_launcher.pl?plugin_name=unimarc_field_4XX.pl">
21
                <form name="f" method="post" action="/cgi-bin/koha/cataloguing/plugin_launcher.pl?plugin_name=unimarc_field_4XX.pl">
22
                    [% INCLUDE 'csrf-token.inc' %]
22
23
23
                    <p>
24
                    <p>
24
                        <input type="hidden" name="plugin_name" value="unimarc_field_4XX.pl" />
25
                        <input type="hidden" name="plugin_name" value="unimarc_field_4XX.pl" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/z3950_auth_search.tt (+2 lines)
Lines 22-27 Link Here
22
    [% IF ( opsearch ) %]
22
    [% IF ( opsearch ) %]
23
        <h1>Z39.50 authority search points</h1>
23
        <h1>Z39.50 authority search points</h1>
24
        <form method="post" action="z3950_auth_search.pl" name="f" class="checkboxed">
24
        <form method="post" action="z3950_auth_search.pl" name="f" class="checkboxed">
25
            [% INCLUDE 'csrf-token.inc' %]
25
        <input type="hidden" name="op" id="op" value="do_search" />
26
        <input type="hidden" name="op" id="op" value="do_search" />
26
        <input type="hidden" name="authid" value="[% authid | html %]" />
27
        <input type="hidden" name="authid" value="[% authid | html %]" />
27
        <input type="hidden" name="index" value="[% index | html %]" />
28
        <input type="hidden" name="index" value="[% index | html %]" />
Lines 122-127 Link Here
122
    </div>
123
    </div>
123
124
124
    <form method="post" action="z3950_auth_search.pl" id="page_form" name="page_form" class="checkboxed">
125
    <form method="post" action="z3950_auth_search.pl" id="page_form" name="page_form" class="checkboxed">
126
        [% INCLUDE 'csrf-token.inc' %]
125
        <input type="hidden" name="op" id="op" value="do_search" />
127
        <input type="hidden" name="op" id="op" value="do_search" />
126
        <input type="hidden" name="current_page" id="current_page" value="[% current_page | html %]" />
128
        <input type="hidden" name="current_page" id="current_page" value="[% current_page | html %]" />
127
        <input type="hidden" id="nameany"  name="nameany" value="[% nameany | html %]" />
129
        <input type="hidden" id="nameany"  name="nameany" value="[% nameany | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/z3950_search.tt (+2 lines)
Lines 42-47 Link Here
42
        [% IF ( opsearch ) %]
42
        [% IF ( opsearch ) %]
43
            <h1>Z39.50/SRU search</h1>
43
            <h1>Z39.50/SRU search</h1>
44
            <form method="post" action="z3950_search.pl" name="f" class="checkboxed">
44
            <form method="post" action="z3950_search.pl" name="f" class="checkboxed">
45
                [% INCLUDE 'csrf-token.inc' %]
45
                <div class="row">
46
                <div class="row">
46
                    <div class="col-xs-6">
47
                    <div class="col-xs-6">
47
                        <input type="hidden" name="op" id="op" value="do_search" />
48
                        <input type="hidden" name="op" id="op" value="do_search" />
Lines 225-230 Link Here
225
                            </div>
226
                            </div>
226
227
227
                            <form method="post" action="z3950_search.pl" id="page_form" name="page_form" class="checkboxed">
228
                            <form method="post" action="z3950_search.pl" id="page_form" name="page_form" class="checkboxed">
229
                                [% INCLUDE 'csrf-token.inc' %]
228
                                <input type="hidden" name="op" id="op" value="do_search" />
230
                                <input type="hidden" name="op" id="op" value="do_search" />
229
                                <input type="hidden" name="current_page" id="current_page" value="[% current_page | html %]" />
231
                                <input type="hidden" name="current_page" id="current_page" value="[% current_page | html %]" />
230
                                <input type="hidden" id="title"  name="title" value="[% title | html %]" />
232
                                <input type="hidden" id="title"  name="title" value="[% title | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/article-requests.tt (+1 lines)
Lines 162-167 Link Here
162
                [% PROCESS urls_modal %]
162
                [% PROCESS urls_modal %]
163
163
164
                <form id="ar-branchcode-form" method="post">
164
                <form id="ar-branchcode-form" method="post">
165
                    [% INCLUDE 'csrf-token.inc' %]
165
                    <select name="branchcode" id="branchcode">
166
                    <select name="branchcode" id="branchcode">
166
                        <option value="">All libraries</option>
167
                        <option value="">All libraries</option>
167
                        [% FOREACH b IN Branches.all( only_from_group => 1 ) %]
168
                        [% FOREACH b IN Branches.all( only_from_group => 1 ) %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchoverdues.tt (+1 lines)
Lines 40-45 Link Here
40
<h1>Circulation: Overdues at [% Branches.GetLoggedInBranchname | html %]</h1>
40
<h1>Circulation: Overdues at [% Branches.GetLoggedInBranchname | html %]</h1>
41
41
42
<form name="selectlocation" action="branchoverdues.pl" method="post">
42
<form name="selectlocation" action="branchoverdues.pl" method="post">
43
    [% INCLUDE 'csrf-token.inc' %]
43
    <label for="location">Shelving location selected: </label><select id="location" name="location">
44
    <label for="location">Shelving location selected: </label><select id="location" name="location">
44
        <option value="">All shelving locations</option>
45
        <option value="">All shelving locations</option>
45
        [% FOREACH locationsloo IN locationsloop %]
46
        [% FOREACH locationsloo IN locationsloop %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchtransfers.tt (+4 lines)
Lines 64-69 Link Here
64
                </th>
64
                </th>
65
                <td>
65
                <td>
66
                    <form method="post" name="mainform" id="mainform" action="branchtransfers.pl">
66
                    <form method="post" name="mainform" id="mainform" action="branchtransfers.pl">
67
                        [% INCLUDE 'csrf-token.inc' %]
67
                        [% FOREACH trsfitemloo IN trsfitemloop %]
68
                        [% FOREACH trsfitemloo IN trsfitemloop %]
68
                            <input type="hidden" name="bc-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.item.barcode | html %]" />
69
                            <input type="hidden" name="bc-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.item.barcode | html %]" />
69
                            <input type="hidden" name="fb-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.frombrcd | html %]" />
70
                            <input type="hidden" name="fb-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.frombrcd | html %]" />
Lines 90-95 Link Here
90
                        <th>Cancel hold and then attempt transfer:</th>
91
                        <th>Cancel hold and then attempt transfer:</th>
91
                        <td>
92
                        <td>
92
                            <form method="post" name="mainform" id="mainform" action="branchtransfers.pl">
93
                            <form method="post" name="mainform" id="mainform" action="branchtransfers.pl">
94
                                [% INCLUDE 'csrf-token.inc' %]
93
                                [% FOREACH trsfitemloo IN trsfitemloop %]
95
                                [% FOREACH trsfitemloo IN trsfitemloop %]
94
                                    <input type="hidden" name="bc-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.item.barcode | html %]" />
96
                                    <input type="hidden" name="bc-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.item.barcode | html %]" />
95
                                    <input type="hidden" name="fb-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.frombrcd | html %]" />
97
                                    <input type="hidden" name="fb-[% trsfitemloo.counter | html %]" value="[% trsfitemloo.frombrcd | html %]" />
Lines 110-115 Link Here
110
                        <th>Ignore and return to transfers: </th>
112
                        <th>Ignore and return to transfers: </th>
111
                            <td>
113
                            <td>
112
                                <form method="post" name="mainform" id="mainform" action="branchtransfers.pl">
114
                                <form method="post" name="mainform" id="mainform" action="branchtransfers.pl">
115
                                    [% INCLUDE 'csrf-token.inc' %]
113
                                    <input type="hidden" name="tobranchcd" value="[% tobranchcd | html %]" />
116
                                    <input type="hidden" name="tobranchcd" value="[% tobranchcd | html %]" />
114
                                    <input type="hidden" name="barcode" />
117
                                    <input type="hidden" name="barcode" />
115
                                    [% FOREACH trsfitemloo IN trsfitemloop %]
118
                                    [% FOREACH trsfitemloo IN trsfitemloop %]
Lines 175-180 Link Here
175
178
176
<div id="branchtransfers">
179
<div id="branchtransfers">
177
    <form method="post" name="mainform" id="mainform" action="/cgi-bin/koha/circ/branchtransfers.pl">
180
    <form method="post" name="mainform" id="mainform" action="/cgi-bin/koha/circ/branchtransfers.pl">
181
        [% INCLUDE 'csrf-token.inc' %]
178
        <fieldset class="brief">
182
        <fieldset class="brief">
179
            <legend>Transfer</legend>
183
            <legend>Transfer</legend>
180
            <ol>
184
            <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/checkout-notes.tt (+1 lines)
Lines 61-66 Link Here
61
61
62
            [% IF ( notes.count ) %]
62
            [% IF ( notes.count ) %]
63
                <form id="mark_selected" method="post" action="/cgi-bin/koha/circ/checkout-notes.pl">
63
                <form id="mark_selected" method="post" action="/cgi-bin/koha/circ/checkout-notes.pl">
64
                    [% INCLUDE 'csrf-token.inc' %]
64
                    <div id="toolbar" class="btn-toolbar">
65
                    <div id="toolbar" class="btn-toolbar">
65
                        <button type="submit" class="btn btn-default markseen" name="mark_selected-seen" value="seen" disabled="disabled"><i class="fa-solid fa-eye"></i> Mark seen</button>
66
                        <button type="submit" class="btn btn-default markseen" name="mark_selected-seen" value="seen" disabled="disabled"><i class="fa-solid fa-eye"></i> Mark seen</button>
66
                        <button type="submit" class="btn btn-default markseen" name="mark_selected-notseen" value="notseen" disabled="disabled"><i class="fa-solid fa-eye-slash"></i> Mark not seen</button>
67
                        <button type="submit" class="btn btn-default markseen" name="mark_selected-notseen" value="notseen" disabled="disabled"><i class="fa-solid fa-eye-slash"></i> Mark not seen</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt (+4 lines)
Lines 244-249 Link Here
244
244
245
                            [% IF CAN_user_circulate_force_checkout or HIGHHOLDS %]
245
                            [% IF CAN_user_circulate_force_checkout or HIGHHOLDS %]
246
                                <form method="post" action="/cgi-bin/koha/circ/circulation.pl" autocomplete="off">
246
                                <form method="post" action="/cgi-bin/koha/circ/circulation.pl" autocomplete="off">
247
                                    [% INCLUDE 'csrf-token.inc' %]
247
                                    <input type="hidden" name="restoreduedatespec" />
248
                                    <input type="hidden" name="restoreduedatespec" />
248
249
249
                                    [% IF (forceallow) %]<input type="hidden" name="forceallow" value="1">[% END %]
250
                                    [% IF (forceallow) %]<input type="hidden" name="forceallow" value="1">[% END %]
Lines 336-341 Link Here
336
337
337
                            [% IF ADDITIONAL_MATERIALS && !CAN_user_circulate_force_checkout %]
338
                            [% IF ADDITIONAL_MATERIALS && !CAN_user_circulate_force_checkout %]
338
                                <form method="post" action="/cgi-bin/koha/circ/circulation.pl" autocomplete="off">
339
                                <form method="post" action="/cgi-bin/koha/circ/circulation.pl" autocomplete="off">
340
                                    [% INCLUDE 'csrf-token.inc' %]
339
                                    <input type="hidden" name="restoreduedatespec" />
341
                                    <input type="hidden" name="restoreduedatespec" />
340
342
341
                                    [% IF (forceallow) %]<input type="hidden" name="forceallow" value="1">[% END %]
343
                                    [% IF (forceallow) %]<input type="hidden" name="forceallow" value="1">[% END %]
Lines 574-579 Link Here
574
                                                            [% END %]
576
                                                            [% END %]
575
                                                            <td>
577
                                                            <td>
576
                                                                <form method="post" action="/cgi-bin/koha/circ/circulation.pl" autocomplete="off">
578
                                                                <form method="post" action="/cgi-bin/koha/circ/circulation.pl" autocomplete="off">
579
                                                                    [% INCLUDE 'csrf-token.inc' %]
577
                                                                    [% IF (forceallow) %]
580
                                                                    [% IF (forceallow) %]
578
                                                                        <input type="hidden" name="forceallow" value="1">
581
                                                                        <input type="hidden" name="forceallow" value="1">
579
                                                                    [% END %]
582
                                                                    [% END %]
Lines 633-638 Link Here
633
                            [% IF ( !noissues ) || ( Koha.Preference('OnSiteCheckouts') && Koha.Preference('OnSiteCheckoutsForce') )%]
636
                            [% IF ( !noissues ) || ( Koha.Preference('OnSiteCheckouts') && Koha.Preference('OnSiteCheckoutsForce') )%]
634
                                <div class="col-sm-6">
637
                                <div class="col-sm-6">
635
                                    <form method="post" action="/cgi-bin/koha/circ/circulation.pl" id="mainform" name="mainform" autocomplete="off">
638
                                    <form method="post" action="/cgi-bin/koha/circ/circulation.pl" id="mainform" name="mainform" autocomplete="off">
639
                                        [% INCLUDE 'csrf-token.inc' %]
636
                                        <input type="hidden" name="restoreduedatespec" />
640
                                        <input type="hidden" name="restoreduedatespec" />
637
                                        [% IF ( issue ) %]
641
                                        [% IF ( issue ) %]
638
                                            <fieldset id="circ_circulation_issue" class="lastchecked">
642
                                            <fieldset id="circ_circulation_issue" class="lastchecked">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation_batch_checkouts.tt (+2 lines)
Lines 83-88 Link Here
83
  </div>
83
  </div>
84
[% ELSIF patron and not checkout_infos %]
84
[% ELSIF patron and not checkout_infos %]
85
  <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/circ/circulation.pl">
85
  <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/circ/circulation.pl">
86
      [% INCLUDE 'csrf-token.inc' %]
86
    <fieldset id="circ_circulation_issue">
87
    <fieldset id="circ_circulation_issue">
87
      <label for="barcode">Checking out to [% INCLUDE 'patron-title.inc' %]</label>
88
      <label for="barcode">Checking out to [% INCLUDE 'patron-title.inc' %]</label>
88
      <fieldset class="rows">
89
      <fieldset class="rows">
Lines 121-126 Link Here
121
  [% IF confirmation_needed && CAN_user_circulate_force_checkout %]
122
  [% IF confirmation_needed && CAN_user_circulate_force_checkout %]
122
    <h3>Batch checkout confirmation [% IF patron %] for [% INCLUDE 'patron-title.inc' invert_name = 1 %] [% END %]</h3>
123
    <h3>Batch checkout confirmation [% IF patron %] for [% INCLUDE 'patron-title.inc' invert_name = 1 %] [% END %]</h3>
123
    <form method="post" action="/cgi-bin/koha/circ/circulation.pl" id="mainform" name="mainform" autocomplete="off">
124
    <form method="post" action="/cgi-bin/koha/circ/circulation.pl" id="mainform" name="mainform" autocomplete="off">
125
        [% INCLUDE 'csrf-token.inc' %]
124
  [% ELSE %]
126
  [% ELSE %]
125
    <h3>Batch checkout information [% IF patron.borrowernumber %] for [% INCLUDE 'patron-title.inc' invert_name = 1 %] |[% batch | html %]|[% END %]</h3>
127
    <h3>Batch checkout information [% IF patron.borrowernumber %] for [% INCLUDE 'patron-title.inc' invert_name = 1 %] |[% batch | html %]|[% END %]</h3>
126
  [% END %]
128
  [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/curbside_pickups.tt (+10 lines)
Lines 126-131 Link Here
126
                [% END %]
126
                [% END %]
127
127
128
                <form method="post" class="refresh-form">
128
                <form method="post" class="refresh-form">
129
                    [% INCLUDE 'csrf-token.inc' %]
129
                    <p>
130
                    <p>
130
                        <input type="hidden" name="tab" id="current-tab" value="[% tab | html %]" />
131
                        <input type="hidden" name="tab" id="current-tab" value="[% tab | html %]" />
131
                        <button type="submit" class="btn btn-default"><i class="fa-solid fa-rotate" aria-hidden="true"></i> Refresh</button>
132
                        <button type="submit" class="btn btn-default"><i class="fa-solid fa-rotate" aria-hidden="true"></i> Refresh</button>
Lines 215-220 Link Here
215
                                                    </td>
216
                                                    </td>
216
                                                    <td>
217
                                                    <td>
217
                                                        <form method="post" class="form">
218
                                                        <form method="post" class="form">
219
                                                            [% INCLUDE 'csrf-token.inc' %]
218
                                                            <input type="hidden" name="op" value="mark-as-staged"/>
220
                                                            <input type="hidden" name="op" value="mark-as-staged"/>
219
                                                            <input type="hidden" name="tab" value="to-be-staged"/>
221
                                                            <input type="hidden" name="tab" value="to-be-staged"/>
220
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
222
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 224-229 Link Here
224
                                                        </form>
226
                                                        </form>
225
227
226
                                                        <form method="post" class="form">
228
                                                        <form method="post" class="form">
229
                                                            [% INCLUDE 'csrf-token.inc' %]
227
                                                            <input type="hidden" name="op" value="cancel"/>
230
                                                            <input type="hidden" name="op" value="cancel"/>
228
                                                            <input type="hidden" name="tab" value="to-be-staged"/>
231
                                                            <input type="hidden" name="tab" value="to-be-staged"/>
229
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
232
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 274-279 Link Here
274
                                                    </td>
277
                                                    </td>
275
                                                    <td>
278
                                                    <td>
276
                                                        <form method="post" class="form">
279
                                                        <form method="post" class="form">
280
                                                            [% INCLUDE 'csrf-token.inc' %]
277
                                                            <input type="hidden" name="op" value="mark-patron-has-arrived"/>
281
                                                            <input type="hidden" name="op" value="mark-patron-has-arrived"/>
278
                                                            <input type="hidden" name="tab" value="staged-and-ready"/>
282
                                                            <input type="hidden" name="tab" value="staged-and-ready"/>
279
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
283
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 283-288 Link Here
283
                                                        </form>
287
                                                        </form>
284
288
285
                                                        <form method="post" class="form">
289
                                                        <form method="post" class="form">
290
                                                            [% INCLUDE 'csrf-token.inc' %]
286
                                                            <input type="hidden" name="op" value="mark-as-delivered"/>
291
                                                            <input type="hidden" name="op" value="mark-as-delivered"/>
287
                                                            <input type="hidden" name="tab" value="staged-and-ready"/>
292
                                                            <input type="hidden" name="tab" value="staged-and-ready"/>
288
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
293
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 292-297 Link Here
292
                                                        </form>
297
                                                        </form>
293
298
294
                                                        <form method="post" class="form">
299
                                                        <form method="post" class="form">
300
                                                            [% INCLUDE 'csrf-token.inc' %]
295
                                                            <input type="hidden" name="op" value="mark-as-unstaged"/>
301
                                                            <input type="hidden" name="op" value="mark-as-unstaged"/>
296
                                                            <input type="hidden" name="tab" value="staged-and-ready"/>
302
                                                            <input type="hidden" name="tab" value="staged-and-ready"/>
297
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
303
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 342-347 Link Here
342
                                                    </td>
348
                                                    </td>
343
                                                    <td>
349
                                                    <td>
344
                                                        <form method="post" class="form">
350
                                                        <form method="post" class="form">
351
                                                            [% INCLUDE 'csrf-token.inc' %]
345
                                                            <input type="hidden" name="op" value="mark-as-delivered"/>
352
                                                            <input type="hidden" name="op" value="mark-as-delivered"/>
346
                                                            <input type="hidden" name="tab" value="patron-is-outside"/>
353
                                                            <input type="hidden" name="tab" value="patron-is-outside"/>
347
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
354
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 351-356 Link Here
351
                                                        </form>
358
                                                        </form>
352
359
353
                                                        <form method="post" class="form">
360
                                                        <form method="post" class="form">
361
                                                            [% INCLUDE 'csrf-token.inc' %]
354
                                                            <input type="hidden" name="op" value="mark-as-staged"/>
362
                                                            <input type="hidden" name="op" value="mark-as-staged"/>
355
                                                            <input type="hidden" name="tab" value="patron-is-outside"/>
363
                                                            <input type="hidden" name="tab" value="patron-is-outside"/>
356
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
364
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 360-365 Link Here
360
                                                        </form>
368
                                                        </form>
361
369
362
                                                        <form method="post" class="form">
370
                                                        <form method="post" class="form">
371
                                                            [% INCLUDE 'csrf-token.inc' %]
363
                                                            <input type="hidden" name="op" value="mark-as-unstaged"/>
372
                                                            <input type="hidden" name="op" value="mark-as-unstaged"/>
364
                                                            <input type="hidden" name="tab" value="patron-is-outside"/>
373
                                                            <input type="hidden" name="tab" value="patron-is-outside"/>
365
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
374
                                                            <input type="hidden" name="id" value="[% cp.id | html %]"/>
Lines 439-444 Link Here
439
                            [% SET waiting_holds = patron.holds.search( found => 'W', branchcode => Branches.GetLoggedInBranchcode ) %]
448
                            [% SET waiting_holds = patron.holds.search( found => 'W', branchcode => Branches.GetLoggedInBranchcode ) %]
440
                            [% IF !policy.enable_waiting_holds_only || waiting_holds.count > 0 %]
449
                            [% IF !policy.enable_waiting_holds_only || waiting_holds.count > 0 %]
441
                                <form id="create-pickup" method="post">
450
                                <form id="create-pickup" method="post">
451
                                    [% INCLUDE 'csrf-token.inc' %]
442
                                    <fieldset class="rows" style="float: none;">
452
                                    <fieldset class="rows" style="float: none;">
443
                                        <input type="hidden" name="borrowernumber" value="[% patron.id | html %]"/>
453
                                        <input type="hidden" name="borrowernumber" value="[% patron.id | html %]"/>
444
                                        <input type="hidden" name="op" value="create-pickup"/>
454
                                        <input type="hidden" name="op" value="create-pickup"/>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/overdue.tt (+1 lines)
Lines 163-168 Link Here
163
            <aside>
163
            <aside>
164
164
165
<form method="post" action="/cgi-bin/koha/circ/overdue.pl">
165
<form method="post" action="/cgi-bin/koha/circ/overdue.pl">
166
    [% INCLUDE 'csrf-token.inc' %]
166
  <fieldset class="brief">
167
  <fieldset class="brief">
167
<h4>Filter on:</h4>
168
<h4>Filter on:</h4>
168
    <fieldset><legend>Date due:</legend>
169
    <fieldset><legend>Date due:</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/pendingreserves.tt (+3 lines)
Lines 205-210 Link Here
205
        </td>
205
        </td>
206
        <td>
206
        <td>
207
            <form name="cancelReserve" action="/cgi-bin/koha/circ/pendingreserves.pl" method="post">
207
            <form name="cancelReserve" action="/cgi-bin/koha/circ/pendingreserves.pl" method="post">
208
                [% INCLUDE 'csrf-token.inc' %]
208
                <input type="hidden" name="op" value="cancel_reserve" />
209
                <input type="hidden" name="op" value="cancel_reserve" />
209
                <input type="hidden" name="reserve_id" value="[% hold.reserve_id | html %]" />
210
                <input type="hidden" name="reserve_id" value="[% hold.reserve_id | html %]" />
210
211
Lines 231-236 Link Here
231
        [% IF Koha.Preference('CanMarkHoldsToPullAsLost') != 'do_not_allow' %]
232
        [% IF Koha.Preference('CanMarkHoldsToPullAsLost') != 'do_not_allow' %]
232
            [% IF hold.itemnumber %]
233
            [% IF hold.itemnumber %]
233
                <form name="cancelReserve" action="/cgi-bin/koha/circ/pendingreserves.pl" method="post">
234
                <form name="cancelReserve" action="/cgi-bin/koha/circ/pendingreserves.pl" method="post">
235
                    [% INCLUDE 'csrf-token.inc' %]
234
                    <input type="hidden" name="reserve_id" value="[% hold.reserve_id | html %]" />
236
                    <input type="hidden" name="reserve_id" value="[% hold.reserve_id | html %]" />
235
                    [% IF Koha.Preference('CanMarkHoldsToPullAsLost') == 'allow' %]
237
                    [% IF Koha.Preference('CanMarkHoldsToPullAsLost') == 'allow' %]
236
                        <input type="hidden" name="op" value="mark_as_lost" />
238
                        <input type="hidden" name="op" value="mark_as_lost" />
Lines 285-290 Link Here
285
<div id="filters">
287
<div id="filters">
286
288
287
<form action="/cgi-bin/koha/circ/pendingreserves.pl" method="post" >
289
<form action="/cgi-bin/koha/circ/pendingreserves.pl" method="post" >
290
    [% INCLUDE 'csrf-token.inc' %]
288
<fieldset class="brief">
291
<fieldset class="brief">
289
<h4>Refine results</h4>
292
<h4>Refine results</h4>
290
<ol>
293
<ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/renew.tt (+9 lines)
Lines 61-66 Link Here
61
61
62
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
62
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
63
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
63
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
64
                                        [% INCLUDE 'csrf-token.inc' %]
64
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
65
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
65
                                        <input type="hidden" name="override_limit" value="1" />
66
                                        <input type="hidden" name="override_limit" value="1" />
66
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override limit and renew</button>
67
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override limit and renew</button>
Lines 73-78 Link Here
73
74
74
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
75
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
75
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
76
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
77
                                        [% INCLUDE 'csrf-token.inc' %]
76
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
78
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
77
                                        <input type="hidden" name="override_limit" value="1" />
79
                                        <input type="hidden" name="override_limit" value="1" />
78
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override limit and renew</button>
80
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override limit and renew</button>
Lines 85-90 Link Here
85
87
86
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
88
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
87
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
89
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
90
                                        [% INCLUDE 'csrf-token.inc' %]
88
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
91
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
89
                                        <input type="hidden" name="override_limit" value="1" />
92
                                        <input type="hidden" name="override_limit" value="1" />
90
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override and renew</button>
93
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override and renew</button>
Lines 97-102 Link Here
97
100
98
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
101
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
99
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
102
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
103
                                        [% INCLUDE 'csrf-token.inc' %]
100
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
104
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
101
                                        <input type="hidden" name="override_limit" value="1" />
105
                                        <input type="hidden" name="override_limit" value="1" />
102
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override and renew</button>
106
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override and renew</button>
Lines 109-114 Link Here
109
113
110
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
114
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
111
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
115
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
116
                                        [% INCLUDE 'csrf-token.inc' %]
112
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
117
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
113
                                        <input type="hidden" name="override_limit" value="1" />
118
                                        <input type="hidden" name="override_limit" value="1" />
114
                                        <input type="submit" class="approve" value="Override and renew" />
119
                                        <input type="submit" class="approve" value="Override and renew" />
Lines 121-126 Link Here
121
126
122
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
127
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
123
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
128
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
129
                                        [% INCLUDE 'csrf-token.inc' %]
124
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
130
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
125
                                        <input type="hidden" name="override_limit" value="1" />
131
                                        <input type="hidden" name="override_limit" value="1" />
126
                                        <input type="submit" class="approve" value="Override and renew" />
132
                                        <input type="submit" class="approve" value="Override and renew" />
Lines 133-138 Link Here
133
139
134
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
140
                                [% IF Koha.Preference('AllowRenewalLimitOverride') %]
135
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
141
                                    <form method="post" action="/cgi-bin/koha/circ/renew.pl">
142
                                        [% INCLUDE 'csrf-token.inc' %]
136
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
143
                                        <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
137
                                        <input type="hidden" name="override_limit" value="1" />
144
                                        <input type="hidden" name="override_limit" value="1" />
138
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override limit and renew</button>
145
                                        <button type="submit" class="approve"><i class="fa fa-check"></i> Override limit and renew</button>
Lines 144-149 Link Here
144
                                <p>[% INCLUDE 'biblio-title.inc' biblio=item.biblio link = 1 %] ( [% item.barcode | html %] ): This item is on hold for another patron.</p>
151
                                <p>[% INCLUDE 'biblio-title.inc' biblio=item.biblio link = 1 %] ( [% item.barcode | html %] ): This item is on hold for another patron.</p>
145
152
146
                                <form method="post" action="/cgi-bin/koha/circ/renew.pl">
153
                                <form method="post" action="/cgi-bin/koha/circ/renew.pl">
154
                                    [% INCLUDE 'csrf-token.inc' %]
147
                                    <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
155
                                    <input type="hidden" name="barcode" value="[% item.barcode | html %]"/>
148
                                    <input type="hidden" name="override_limit" value="1" />
156
                                    <input type="hidden" name="override_limit" value="1" />
149
                                    <input type="hidden" name="override_holds" value="1" />
157
                                    <input type="hidden" name="override_holds" value="1" />
Lines 196-201 Link Here
196
204
197
            [% UNLESS error %]
205
            [% UNLESS error %]
198
                <form method="post" action="/cgi-bin/koha/circ/renew.pl" autocomplete="off" >
206
                <form method="post" action="/cgi-bin/koha/circ/renew.pl" autocomplete="off" >
207
                    [% INCLUDE 'csrf-token.inc' %]
199
208
200
                    <fieldset>
209
                    <fieldset>
201
                        <h1>Renew</h1>
210
                        <h1>Renew</h1>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/request-article.tt (+1 lines)
Lines 117-122 Link Here
117
                                </div>
117
                                </div>
118
                            [% END %]
118
                            [% END %]
119
                            <form id="place-article-request" method="post" action="/cgi-bin/koha/circ/request-article.pl">
119
                            <form id="place-article-request" method="post" action="/cgi-bin/koha/circ/request-article.pl">
120
                                [% INCLUDE 'csrf-token.inc' %]
120
                                <input type="hidden" name="action" value="create" />
121
                                <input type="hidden" name="action" value="create" />
121
                                <input type="hidden" name="biblionumber" id="biblionumber" value="[% biblio.biblionumber | html %]" />
122
                                <input type="hidden" name="biblionumber" id="biblionumber" value="[% biblio.biblionumber | html %]" />
122
                                <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.id | html %]" />
123
                                <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.id | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/reserveratios.tt (+1 lines)
Lines 137-142 Link Here
137
            <aside>
137
            <aside>
138
138
139
<form action="/cgi-bin/koha/circ/reserveratios.pl" method="post" >
139
<form action="/cgi-bin/koha/circ/reserveratios.pl" method="post" >
140
    [% INCLUDE 'csrf-token.inc' %]
140
<fieldset class="brief">
141
<fieldset class="brief">
141
<h4>Refine results:</h4>
142
<h4>Refine results:</h4>
142
<ol>
143
<ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/returns.tt (+10 lines)
Lines 416-421 Link Here
416
                                        </div>
416
                                        </div>
417
                                        <div class="modal-footer">
417
                                        <div class="modal-footer">
418
                                            <form method="post" action="/cgi-bin/koha/circ/returns.pl" autocomplete="off">
418
                                            <form method="post" action="/cgi-bin/koha/circ/returns.pl" autocomplete="off">
419
                                                [% INCLUDE 'csrf-token.inc' %]
419
                                                <input type="hidden" name="barcode" value="[% item.barcode | html %]" />
420
                                                <input type="hidden" name="barcode" value="[% item.barcode | html %]" />
420
                                                <input type="hidden" name="return_date_override" value="[% return_date_override | html %]" />
421
                                                <input type="hidden" name="return_date_override" value="[% return_date_override | html %]" />
421
                                                <input type="hidden" name="return_date_override_remember" value="[% return_date_override_remember | html %]" />
422
                                                <input type="hidden" name="return_date_override_remember" value="[% return_date_override_remember | html %]" />
Lines 440-445 Link Here
440
                            <div class="modal-dialog modal-wide">
441
                            <div class="modal-dialog modal-wide">
441
                                <div class="modal-content">
442
                                <div class="modal-content">
442
                                    <form method="post">
443
                                    <form method="post">
444
                                        [% INCLUDE 'csrf-token.inc' %]
443
                                        <div class="modal-header">
445
                                        <div class="modal-header">
444
                                            <h3>Please confirm bundle contents for [% item.barcode | html %]</h3>
446
                                            <h3>Please confirm bundle contents for [% item.barcode | html %]</h3>
445
                                        </div>
447
                                        </div>
Lines 526-531 Link Here
526
                                <div class="modal-dialog">
528
                                <div class="modal-dialog">
527
                                    <div class="modal-content">
529
                                    <div class="modal-content">
528
                                        <form method="post" action="returns.pl" name="mainform" id="mainform">
530
                                        <form method="post" action="returns.pl" name="mainform" id="mainform">
531
                                            [% INCLUDE 'csrf-token.inc' %]
529
                                            <div class="modal-header">
532
                                            <div class="modal-header">
530
                                                <h3>
533
                                                <h3>
531
                                                    Cannot check in
534
                                                    Cannot check in
Lines 570-575 Link Here
570
                                    <div class="modal-dialog">
573
                                    <div class="modal-dialog">
571
                                        <div class="modal-content">
574
                                        <div class="modal-content">
572
                                            <form method="post" action="returns.pl" name="wrongtransferform" id="wrongtransferform">
575
                                            <form method="post" action="returns.pl" name="wrongtransferform" id="wrongtransferform">
576
                                                [% INCLUDE 'csrf-token.inc' %]
573
                                                <input type="hidden" name="return_date_override" value="[% return_date_override | html %]" />
577
                                                <input type="hidden" name="return_date_override" value="[% return_date_override | html %]" />
574
                                                <input type="hidden" name="return_date_override_remember" value="[% return_date_override_remember | html %]" />
578
                                                <input type="hidden" name="return_date_override_remember" value="[% return_date_override_remember | html %]" />
575
                                                <input type="hidden" name="itemnumber" value="[% itemnumber | html %]" />
579
                                                <input type="hidden" name="itemnumber" value="[% itemnumber | html %]" />
Lines 615-620 Link Here
615
                                    <div class="modal-dialog">
619
                                    <div class="modal-dialog">
616
                                        <div class="modal-content">
620
                                        <div class="modal-content">
617
                                            <form method="post" action="returns.pl" class="confirm">
621
                                            <form method="post" action="returns.pl" class="confirm">
622
                                                [% INCLUDE 'csrf-token.inc' %]
618
                                                <div class="modal-header">
623
                                                <div class="modal-header">
619
                                                    <h3>
624
                                                    <h3>
620
                                                        Hold found (item is already waiting):
625
                                                        Hold found (item is already waiting):
Lines 716-721 Link Here
716
                                    <div class="modal-dialog">
721
                                    <div class="modal-dialog">
717
                                        <div class="modal-content">
722
                                        <div class="modal-content">
718
                                            <form method="post" action="returns.pl" name="mainform" id="mainform">
723
                                            <form method="post" action="returns.pl" name="mainform" id="mainform">
724
                                                [% INCLUDE 'csrf-token.inc' %]
719
725
720
                                                <input type="hidden" name="print_slip" value="0" />
726
                                                <input type="hidden" name="print_slip" value="0" />
721
727
Lines 774-779 Link Here
774
                                    <div class="modal-dialog">
780
                                    <div class="modal-dialog">
775
                                        <div class="modal-content">
781
                                        <div class="modal-content">
776
                                            <form method="post" action="returns.pl" class="confirm">
782
                                            <form method="post" action="returns.pl" class="confirm">
783
                                                [% INCLUDE 'csrf-token.inc' %]
777
784
778
                                                <input type="hidden" name="print_slip" value="0" />
785
                                                <input type="hidden" name="print_slip" value="0" />
779
786
Lines 890-895 Link Here
890
                                    <div class="modal-dialog">
897
                                    <div class="modal-dialog">
891
                                        <div class="modal-content">
898
                                        <div class="modal-content">
892
                                            <form method="post" action="/cgi-bin/koha/circ/returns.pl" class="confirm">
899
                                            <form method="post" action="/cgi-bin/koha/circ/returns.pl" class="confirm">
900
                                                [% INCLUDE 'csrf-token.inc' %]
893
901
894
                                                <div class="modal-header">
902
                                                <div class="modal-header">
895
                                                    <h3>
903
                                                    <h3>
Lines 991-996 Link Here
991
                                    <div class="modal-dialog">
999
                                    <div class="modal-dialog">
992
                                        <div class="modal-content">
1000
                                        <div class="modal-content">
993
                                            <form method="post" action="/cgi-bin/koha/circ/returns.pl" class="confirm">
1001
                                            <form method="post" action="/cgi-bin/koha/circ/returns.pl" class="confirm">
1002
                                                [% INCLUDE 'csrf-token.inc' %]
994
1003
995
                                                <div class="modal-header">
1004
                                                <div class="modal-header">
996
                                                    <h3>
1005
                                                    <h3>
Lines 1083-1088 Link Here
1083
                        </div>
1092
                        </div>
1084
1093
1085
                        <form id="checkin-form" method="post" action="/cgi-bin/koha/circ/returns.pl" autocomplete="off" >
1094
                        <form id="checkin-form" method="post" action="/cgi-bin/koha/circ/returns.pl" autocomplete="off" >
1095
                            [% INCLUDE 'csrf-token.inc' %]
1086
                            <fieldset id="circ_returns_checkin">
1096
                            <fieldset id="circ_returns_checkin">
1087
                                <div class="show_checkin_dialog" style="float:right;display:none"><button type="button" class="btn btn-default btn-sm" data-toggle="tooltip" title="Show the last checkin message"><i class="fa fa-info"></i></button></div>
1097
                                <div class="show_checkin_dialog" style="float:right;display:none"><button type="button" class="btn btn-default btn-sm" data-toggle="tooltip" title="Show the last checkin message"><i class="fa fa-info"></i></button></div>
1088
                                <h1>Check in</h1>
1098
                                <h1>Check in</h1>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt (+2 lines)
Lines 73-78 Updated:<ul> Link Here
73
    [% END %]
73
    [% END %]
74
    </ul>
74
    </ul>
75
<form method="post" action="[% referer or "/cgi-bin/koha/circ/circulation.pl" %]">
75
<form method="post" action="[% referer or "/cgi-bin/koha/circ/circulation.pl" %]">
76
    [% INCLUDE 'csrf-token.inc' %]
76
    <div class="noshow">
77
    <div class="noshow">
77
        [% FOREACH recycle_loo IN recycle_loop %]
78
        [% FOREACH recycle_loo IN recycle_loop %]
78
        <input type="text" name="[% recycle_loo.param | html %]" value="[% recycle_loo.value | html %]" />
79
        <input type="text" name="[% recycle_loo.param | html %]" value="[% recycle_loo.value | html %]" />
Lines 84-89 Updated:<ul> Link Here
84
[% ELSE %]
85
[% ELSE %]
85
86
86
<form method="post" action="set-library.pl">
87
<form method="post" action="set-library.pl">
88
    [% INCLUDE 'csrf-token.inc' %]
87
[% IF ( CAN_user_superlibrarian || CAN_user_loggedinlibrary ) %]
89
[% IF ( CAN_user_superlibrarian || CAN_user_loggedinlibrary ) %]
88
<fieldset class="rows">
90
<fieldset class="rows">
89
    <legend>Set library</legend>
91
    <legend>Set library</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/waitingreserves.tt (+3 lines)
Lines 69-74 Link Here
69
                                        Please retain this item and check it in to process the hold.
69
                                        Please retain this item and check it in to process the hold.
70
                                        </p>
70
                                        </p>
71
                                        <form name="cancelReservewithtransfert" action="waitingreserves.pl#[% tab | html %]" method="post">
71
                                        <form name="cancelReservewithtransfert" action="waitingreserves.pl#[% tab | html %]" method="post">
72
                                            [% INCLUDE 'csrf-token.inc' %]
72
                                            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
73
                                            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
73
                                        </form>
74
                                        </form>
74
                                    </div>
75
                                    </div>
Lines 80-85 Link Here
80
                                        Please retain this item and check it in to process the hold.
81
                                        Please retain this item and check it in to process the hold.
81
                                        </p>
82
                                        </p>
82
                                        <form name="cancelReservewithwaiting" action="waitingreserves.pl#[% tab | html %]" method="post">
83
                                        <form name="cancelReservewithwaiting" action="waitingreserves.pl#[% tab | html %]" method="post">
84
                                            [% INCLUDE 'csrf-token.inc' %]
83
                                            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
85
                                            <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
84
                                        </form>
86
                                        </form>
85
                                    </div>
87
                                    </div>
Lines 126-131 Link Here
126
                                            <span id="holdsover-cancel-all">
128
                                            <span id="holdsover-cancel-all">
127
                                                <button class="cancel_selected_holds" data-bulk="true"></button>
129
                                                <button class="cancel_selected_holds" data-bulk="true"></button>
128
                                                <form name="cancelAllReserve" action="waitingreserves.pl" method="post">
130
                                                <form name="cancelAllReserve" action="waitingreserves.pl" method="post">
131
                                                    [% INCLUDE 'csrf-token.inc' %]
129
                                                    <input type="hidden" name="cancelall" value="1" />
132
                                                    <input type="hidden" name="cancelall" value="1" />
130
                                                    <input type="hidden" name="allbranches" value="[% allbranches | html %]" />
133
                                                    <input type="hidden" name="allbranches" value="[% allbranches | html %]" />
131
                                                    <input type="hidden" name="tab" value="holdsover">
134
                                                    <input type="hidden" name="tab" value="holdsover">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/clubs/clubs-add-modify.tt (+1 lines)
Lines 43-48 Link Here
43
        <div class="col-md-8 col-md-offset-2">
43
        <div class="col-md-8 col-md-offset-2">
44
44
45
            <form method="post" class="validated">
45
            <form method="post" class="validated">
46
                [% INCLUDE 'csrf-token.inc' %]
46
                <input type="hidden" name="id" value="[% club.id | html %]" />
47
                <input type="hidden" name="id" value="[% club.id | html %]" />
47
                <input type="hidden" name="club_template_id" value="[% club_template.id | html %]" />
48
                <input type="hidden" name="club_template_id" value="[% club_template.id | html %]" />
48
49
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/clubs/templates-add-modify.tt (+1 lines)
Lines 48-53 Link Here
48
        <div class="col-md-8 col-md-offset-2">
48
        <div class="col-md-8 col-md-offset-2">
49
49
50
            <form method="post" class="validated">
50
            <form method="post" class="validated">
51
                [% INCLUDE 'csrf-token.inc' %]
51
                <input type="hidden" name="id" value="[% club_template.id | html %]" />
52
                <input type="hidden" name="id" value="[% club_template.id | html %]" />
52
53
53
                <h1>
54
                <h1>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/course_reserves/add_items-step1.tt (+1 lines)
Lines 46-51 Link Here
46
        [% END %]
46
        [% END %]
47
47
48
        <form method="post" action="/cgi-bin/koha/course_reserves/add_items.pl">
48
        <form method="post" action="/cgi-bin/koha/course_reserves/add_items.pl">
49
            [% INCLUDE 'csrf-token.inc' %]
49
            <input type="hidden" name="course_id" value="[% course.course_id | html %]" />
50
            <input type="hidden" name="course_id" value="[% course.course_id | html %]" />
50
            <input type="hidden" name="action" value="lookup" />
51
            <input type="hidden" name="action" value="lookup" />
51
52
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/course_reserves/add_items-step2.tt (+1 lines)
Lines 59-64 Link Here
59
        [% END %]
59
        [% END %]
60
60
61
        <form method="post" action="/cgi-bin/koha/course_reserves/add_items.pl">
61
        <form method="post" action="/cgi-bin/koha/course_reserves/add_items.pl">
62
            [% INCLUDE 'csrf-token.inc' %]
62
            <input type="hidden" name="course_id" value="[% course.course_id | html %]" />
63
            <input type="hidden" name="course_id" value="[% course.course_id | html %]" />
63
            <input type="hidden" name="return" value="[% return | html %]" />
64
            <input type="hidden" name="return" value="[% return | html %]" />
64
            <input type="hidden" name="action" value="add" />
65
            <input type="hidden" name="action" value="add" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/course_reserves/batch_add_items.tt (+1 lines)
Lines 44-49 Link Here
44
44
45
        [% IF action == 'display_form' %]
45
        [% IF action == 'display_form' %]
46
            <form method="post" action="/cgi-bin/koha/course_reserves/batch_add_items.pl">
46
            <form method="post" action="/cgi-bin/koha/course_reserves/batch_add_items.pl">
47
                [% INCLUDE 'csrf-token.inc' %]
47
                <input type="hidden" name="course_id" value="[% course.course_id | html %]" />
48
                <input type="hidden" name="course_id" value="[% course.course_id | html %]" />
48
                <input type="hidden" name="action" value="add" />
49
                <input type="hidden" name="action" value="add" />
49
50
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/course_reserves/batch_rm_items.tt (+1 lines)
Lines 33-38 Link Here
33
            <h1>Batch remove reserves</h1>
33
            <h1>Batch remove reserves</h1>
34
        [% IF action == 'display_form' %]
34
        [% IF action == 'display_form' %]
35
            <form method="post" action="/cgi-bin/koha/course_reserves/batch_rm_items.pl">
35
            <form method="post" action="/cgi-bin/koha/course_reserves/batch_rm_items.pl">
36
                [% INCLUDE 'csrf-token.inc' %]
36
                <input type="hidden" name="action" value="batch_rm" />
37
                <input type="hidden" name="action" value="batch_rm" />
37
                <fieldset class="rows">
38
                <fieldset class="rows">
38
                    <legend>Remove items: scan barcodes</legend>
39
                    <legend>Remove items: scan barcodes</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/course_reserves/course.tt (+1 lines)
Lines 58-63 Link Here
58
                </h1>
58
                </h1>
59
59
60
            <form method="post" action="/cgi-bin/koha/course_reserves/mod_course.pl" class="validated">
60
            <form method="post" action="/cgi-bin/koha/course_reserves/mod_course.pl" class="validated">
61
                [% INCLUDE 'csrf-token.inc' %]
61
                [% IF course_id %]<input type="hidden" name="course_id" value="[% course_id | html %]" />[% END %]
62
                [% IF course_id %]<input type="hidden" name="course_id" value="[% course_id | html %]" />[% END %]
62
                <fieldset class="rows">
63
                <fieldset class="rows">
63
                    <legend>[% IF course_id %]Edit course[% ELSE %]Create course[% END %]</legend>
64
                    <legend>[% IF course_id %]Edit course[% ELSE %]Create course[% END %]</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt (+7 lines)
Lines 178-183 Link Here
178
                        [% END %]
178
                        [% END %]
179
                        [% IF request.biblio_id && request.biblio_id.length > 0  && !whole.value.check_out_errors.error.STATS %]
179
                        [% IF request.biblio_id && request.biblio_id.length > 0  && !whole.value.check_out_errors.error.STATS %]
180
                            <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
180
                            <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
181
                                [% INCLUDE 'csrf-token.inc' %]
181
                                <fieldset class="rows">
182
                                <fieldset class="rows">
182
                                    <legend>Check out details</legend>
183
                                    <legend>Check out details</legend>
183
                                    [% items = whole.value.biblio.items.unblessed %]
184
                                    [% items = whole.value.biblio.items.unblessed %]
Lines 318-323 Link Here
318
                    [% IF whole.value.partners %]
319
                    [% IF whole.value.partners %]
319
                       [% ill_url = "/cgi-bin/koha/ill/ill-requests.pl?method=illview&illrequest_id=" _ request.illrequest_id %]
320
                       [% ill_url = "/cgi-bin/koha/ill/ill-requests.pl?method=illview&illrequest_id=" _ request.illrequest_id %]
320
                        <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
321
                        <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
322
                            [% INCLUDE 'csrf-token.inc' %]
321
                            <fieldset class="rows">
323
                            <fieldset class="rows">
322
                                <legend>Interlibrary loan request details</legend>
324
                                <legend>Interlibrary loan request details</legend>
323
                                <ol>
325
                                <ol>
Lines 396-401 Link Here
396
398
397
                [% ELSIF query_type == 'edit_action' %]
399
                [% ELSIF query_type == 'edit_action' %]
398
                    <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
400
                    <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
401
                        [% INCLUDE 'csrf-token.inc' %]
399
                        <fieldset class="rows">
402
                        <fieldset class="rows">
400
                            <legend>Request details</legend>
403
                            <legend>Request details</legend>
401
                            <ol>
404
                            <ol>
Lines 481-486 Link Here
481
                    <div class="dialog alert">
484
                    <div class="dialog alert">
482
                        <h3>Are you sure you wish to delete this request?</h3>
485
                        <h3>Are you sure you wish to delete this request?</h3>
483
                        <form action="/cgi-bin/koha/ill/ill-requests.pl" method="post">
486
                        <form action="/cgi-bin/koha/ill/ill-requests.pl" method="post">
487
                            [% INCLUDE 'csrf-token.inc' %]
484
                            <input type="hidden" name="method" value="delete" />
488
                            <input type="hidden" name="method" value="delete" />
485
                            <input type="hidden" name="confirmed" value="1" />
489
                            <input type="hidden" name="confirmed" value="1" />
486
                            <input type="hidden" name="illrequest_id" value="[% request.id | html %]" />
490
                            <input type="hidden" name="illrequest_id" value="[% request.id | html %]" />
Lines 757-762 Link Here
757
                                <h3><a id="toggle_addcomment" href="#">Add comment</a></h3>
761
                                <h3><a id="toggle_addcomment" href="#">Add comment</a></h3>
758
                                <div id="addcomment" class="content_hidden">
762
                                <div id="addcomment" class="content_hidden">
759
                                    <form class="validated" method="post" action="/cgi-bin/koha/ill/ill-requests.pl">
763
                                    <form class="validated" method="post" action="/cgi-bin/koha/ill/ill-requests.pl">
764
                                        [% INCLUDE 'csrf-token.inc' %]
760
                                        <input type="hidden" value="save_comment" name="method">
765
                                        <input type="hidden" value="save_comment" name="method">
761
                                        [% INCLUDE 'csrf-token.inc' %]
766
                                        [% INCLUDE 'csrf-token.inc' %]
762
                                        <input type="hidden" value="[% request.illrequest_id | html %]" name="illrequest_id">
767
                                        <input type="hidden" value="[% request.illrequest_id | html %]" name="illrequest_id">
Lines 790-795 Link Here
790
                    <div id="results" class="page-section">
795
                    <div id="results" class="page-section">
791
                        <h3>Displaying availability results</h3>
796
                        <h3>Displaying availability results</h3>
792
                        <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
797
                        <form method="POST" action="/cgi-bin/koha/ill/ill-requests.pl">
798
                            [% INCLUDE 'csrf-token.inc' %]
793
                            [% FOREACH key IN whole.keys %]
799
                            [% FOREACH key IN whole.keys %]
794
                                [% value = whole.$key %]
800
                                [% value = whole.$key %]
795
                                [% IF key != 'method' && key != 'custom_key' && key != 'custom_value' %]
801
                                [% IF key != 'method' && key != 'custom_key' && key != 'custom_value' %]
Lines 823-828 Link Here
823
                    <h1>Request type disclaimer</h1>
829
                    <h1>Request type disclaimer</h1>
824
                    <div id="results" class="page-section">
830
                    <div id="results" class="page-section">
825
                        <form method="post" id="typedisclaimer-form">
831
                        <form method="post" id="typedisclaimer-form">
832
                            [% INCLUDE 'csrf-token.inc' %]
826
                            <fieldset class="rows">
833
                            <fieldset class="rows">
827
                                [% disclaimer.text | $raw %]
834
                                [% disclaimer.text | $raw %]
828
                                [% SET disc_av_category_code = AuthorisedValues.GetAuthValueDropbox(disclaimer.av_cat) %]
835
                                [% SET disc_av_category_code = AuthorisedValues.GetAuthValueDropbox(disclaimer.av_cat) %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/installer/auth.tt (+1 lines)
Lines 52-57 Link Here
52
                    <p>Before we begin, please verify you have the correct credentials to continue. Please log in with the username and password given to you by your systems administrator and located in your <code>koha-conf.xml</code> configuration file.</p>
52
                    <p>Before we begin, please verify you have the correct credentials to continue. Please log in with the username and password given to you by your systems administrator and located in your <code>koha-conf.xml</code> configuration file.</p>
53
53
54
                    <form action="[% url | html %]" method="post" id="mainform">
54
                    <form action="[% url | html %]" method="post" id="mainform">
55
                        [% INCLUDE 'csrf-token.inc' %]
55
                        [% FOREACH INPUT IN INPUTS %]
56
                        [% FOREACH INPUT IN INPUTS %]
56
                            <input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />
57
                            <input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />
57
                        [% END %]
58
                        [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/installer/step1.tt (+1 lines)
Lines 45-50 Link Here
45
                    <p>Please pick your language from the following list. If your language is not listed, please inform your system administrator.</p>
45
                    <p>Please pick your language from the following list. If your language is not listed, please inform your system administrator.</p>
46
46
47
                    <form name="language" method="post" action="install.pl">
47
                    <form name="language" method="post" action="install.pl">
48
                        [% INCLUDE 'csrf-token.inc' %]
48
                        <div class="form-group">
49
                        <div class="form-group">
49
                            <label for="language">Select a language: </label>
50
                            <label for="language">Select a language: </label>
50
                            <select id="language" name="language">
51
                            <select id="language" name="language">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/installer/step2.tt (+2 lines)
Lines 41-46 Link Here
41
41
42
                [% IF ( dbconnection ) %]
42
                [% IF ( dbconnection ) %]
43
                    <form name="checkdbparameters" method="post" action="install.pl">
43
                    <form name="checkdbparameters" method="post" action="install.pl">
44
                        [% INCLUDE 'csrf-token.inc' %]
44
                        [% IF ( checkdatabaseaccess ) %]
45
                        [% IF ( checkdatabaseaccess ) %]
45
                            <div class="alert alert-success" role="alert"><p>Connection established.</p></div>
46
                            <div class="alert alert-success" role="alert"><p>Connection established.</p></div>
46
                            [% IF ( checkdatabasecreated ) %]
47
                            [% IF ( checkdatabasecreated ) %]
Lines 87-92 Link Here
87
                    </form>
88
                    </form>
88
                [% ELSE %]
89
                [% ELSE %]
89
                    <form name="checkinformation" method="post" action="install.pl">
90
                    <form name="checkinformation" method="post" action="install.pl">
91
                        [% INCLUDE 'csrf-token.inc' %]
90
                        <input type="hidden" name="step" value="2" />
92
                        <input type="hidden" name="step" value="2" />
91
                        <input type="hidden" name="checkdb" value="1" />
93
                        <input type="hidden" name="checkdb" value="1" />
92
                        <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /> </p>
94
                        <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /> </p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/installer/step3.tt (+6 lines)
Lines 81-86 Link Here
81
                    </div>
81
                    </div>
82
82
83
                    <form name="frameworkselection" method="post" action="install.pl">
83
                    <form name="frameworkselection" method="post" action="install.pl">
84
                        [% INCLUDE 'csrf-token.inc' %]
84
                        <input type="hidden" name="step" value="3" />
85
                        <input type="hidden" name="step" value="3" />
85
                        <input type="hidden" name="op" value="selectframeworks" />
86
                        <input type="hidden" name="op" value="selectframeworks" />
86
87
Lines 120-125 Link Here
120
                    </div>
121
                    </div>
121
122
122
                    <form name="frameworkselection" method="post" action="install.pl">
123
                    <form name="frameworkselection" method="post" action="install.pl">
124
                        [% INCLUDE 'csrf-token.inc' %]
123
                        <input type="hidden" name="step" value="3" />
125
                        <input type="hidden" name="step" value="3" />
124
                        <input type="hidden" name="op" value="addframeworks" />
126
                        <input type="hidden" name="op" value="addframeworks" />
125
                        [% IF ( frameworksloop ) %]
127
                        [% IF ( frameworksloop ) %]
Lines 249-254 Link Here
249
                    <p>In the next steps you will be guided through some basic requirements like defining Koha user with all administrative privileges (superlibrarian).</p>
251
                    <p>In the next steps you will be guided through some basic requirements like defining Koha user with all administrative privileges (superlibrarian).</p>
250
252
251
                    <form action="/cgi-bin/koha/installer/install.pl" method="post" name="finish">
253
                    <form action="/cgi-bin/koha/installer/install.pl" method="post" name="finish">
254
                        [% INCLUDE 'csrf-token.inc' %]
252
                        <h4>
255
                        <h4>
253
                            You can help the Koha community by sharing your statistics with us.
256
                            You can help the Koha community by sharing your statistics with us.
254
                        </h4>
257
                        </h4>
Lines 286-291 Link Here
286
                        </div>
289
                        </div>
287
290
288
                        <form action="install.pl" method="post">
291
                        <form action="install.pl" method="post">
292
                            [% INCLUDE 'csrf-token.inc' %]
289
                            <input type="hidden" name="step" value="3" />
293
                            <input type="hidden" name="step" value="3" />
290
                            <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /></p>
294
                            <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /></p>
291
                        </form>
295
                        </form>
Lines 308-313 Link Here
308
312
309
                    <p>Now we're ready to create the database tables and fill them with some default data.</p>
313
                    <p>Now we're ready to create the database tables and fill them with some default data.</p>
310
                    <form action="install.pl" method="post">
314
                    <form action="install.pl" method="post">
315
                        [% INCLUDE 'csrf-token.inc' %]
311
                        <input type="hidden" name="step" value="3" />
316
                        <input type="hidden" name="step" value="3" />
312
                        <input type="hidden" name="op" value="importdatastructure" />
317
                        <input type="hidden" name="op" value="importdatastructure" />
313
                        <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /></p>
318
                        <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /></p>
Lines 335-340 Link Here
335
340
336
                        <p>We are ready to do some basic configuration.</p>
341
                        <p>We are ready to do some basic configuration.</p>
337
                        <form action="install.pl" method="post">
342
                        <form action="install.pl" method="post">
343
                            [% INCLUDE 'csrf-token.inc' %]
338
                            <input type="hidden" name="step" value="3" />
344
                            <input type="hidden" name="step" value="3" />
339
                            <input type="hidden" name="op" value="choosemarc" />
345
                            <input type="hidden" name="op" value="choosemarc" />
340
                            <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /></p>
346
                            <p><input value="Continue to the next step" class="btn btn-primary" type="submit" /></p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/barcode-print.tt (+1 lines)
Lines 62-67 Link Here
62
                <h2>Barcode image generator</h2>
62
                <h2>Barcode image generator</h2>
63
63
64
                <form action="/cgi-bin/koha/svc/barcode" method="post" id="barcodegen">
64
                <form action="/cgi-bin/koha/svc/barcode" method="post" id="barcodegen">
65
                    [% INCLUDE 'csrf-token.inc' %]
65
                    <fieldset class="brief">
66
                    <fieldset class="brief">
66
                        <div class="row">
67
                        <div class="row">
67
                            <div class="col-sm-6">
68
                            <div class="col-sm-6">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/label-bib-search.tt (+1 lines)
Lines 6-11 Link Here
6
<h1>Search</h1>
6
<h1>Search</h1>
7
7
8
<form name="f" method="post">
8
<form name="f" method="post">
9
    [% INCLUDE 'csrf-token.inc' %]
9
	<input type="hidden" name="op" value="do_search" />
10
	<input type="hidden" name="op" value="do_search" />
10
	<input type="hidden" name="type" value="intranet" />
11
	<input type="hidden" name="type" value="intranet" />
11
	<div class="details">
12
	<div class="details">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/label-edit-batch.tt (+1 lines)
Lines 78-83 Link Here
78
78
79
                        <div id="manage-label-batches">
79
                        <div id="manage-label-batches">
80
                            <form name="add_by_number" action="/cgi-bin/koha/labels/label-edit-batch.pl" method="post">
80
                            <form name="add_by_number" action="/cgi-bin/koha/labels/label-edit-batch.pl" method="post">
81
                                [% INCLUDE 'csrf-token.inc' %]
81
                                <div>
82
                                <div>
82
                                    <fieldset class="rows" style="border-bottom: 0px; border: 0px;">
83
                                    <fieldset class="rows" style="border-bottom: 0px; border: 0px;">
83
                                    <ol><li id="description">
84
                                    <ol><li id="description">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/label-edit-range.tt (+1 lines)
Lines 31-36 Link Here
31
                    [% INCLUDE 'labels-toolbar.inc' %]
31
                    [% INCLUDE 'labels-toolbar.inc' %]
32
                    <h1>Print barcode range</h1>
32
                    <h1>Print barcode range</h1>
33
                    <form name="add_by_number" action="/cgi-bin/koha/labels/label-edit-batch.pl" method="post">
33
                    <form name="add_by_number" action="/cgi-bin/koha/labels/label-edit-batch.pl" method="post">
34
                        [% INCLUDE 'csrf-token.inc' %]
34
                        <input type="hidden" name="op" value="add" />
35
                        <input type="hidden" name="op" value="add" />
35
                        <fieldset class="rows">
36
                        <fieldset class="rows">
36
                            <ol>
37
                            <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/label-print.tt (+1 lines)
Lines 66-71 Link Here
66
                [% END %]
66
                [% END %]
67
            </h3>
67
            </h3>
68
            <form name="exporting" method="post" action="/cgi-bin/koha/labels/label-print.pl">
68
            <form name="exporting" method="post" action="/cgi-bin/koha/labels/label-print.pl">
69
                [% INCLUDE 'csrf-token.inc' %]
69
                <input type="hidden" name="op" value="export" />
70
                <input type="hidden" name="op" value="export" />
70
                <input type="hidden" name="referer" value="[% referer | html %]" />
71
                <input type="hidden" name="referer" value="[% referer | html %]" />
71
                [% FOREACH batch_id IN batch_ids %]
72
                [% FOREACH batch_id IN batch_ids %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/search.tt (+1 lines)
Lines 14-19 to add to Batch [% batch_id | html %] Link Here
14
</h1>
14
</h1>
15
15
16
<form name="f" method="post" action="/cgi-bin/koha/labels/label-item-search.pl">
16
<form name="f" method="post" action="/cgi-bin/koha/labels/label-item-search.pl">
17
    [% INCLUDE 'csrf-token.inc' %]
17
	<input type="hidden" name="op" value="do_search" />
18
	<input type="hidden" name="op" value="do_search" />
18
	<input type="hidden" name="batch_id" value="[% batch_id | html %]" />
19
	<input type="hidden" name="batch_id" value="[% batch_id | html %]" />
19
	<input type="hidden" name="type" value="[% type | html %]" />
20
	<input type="hidden" name="type" value="[% type | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/spinelabel-home.tt (+1 lines)
Lines 28-33 Link Here
28
28
29
<h1>Quick spine label creator</h1>
29
<h1>Quick spine label creator</h1>
30
                <form action="/cgi-bin/koha/labels/spinelabel-print.pl" method="post" id="spinelabelprint">
30
                <form action="/cgi-bin/koha/labels/spinelabel-print.pl" method="post" id="spinelabelprint">
31
                    [% INCLUDE 'csrf-token.inc' %]
31
				<fieldset class="brief">
32
				<fieldset class="brief">
32
				<ol>
33
				<ol>
33
					<li><label for="barcode">Barcode: </label>
34
					<li><label for="barcode">Barcode: </label>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/apikeys.tt (+3 lines)
Lines 61-66 Link Here
61
            [% END %]
61
            [% END %]
62
62
63
                <form id="add-api-key" action="/cgi-bin/koha/members/apikeys.pl" method="post" style="display:none">
63
                <form id="add-api-key" action="/cgi-bin/koha/members/apikeys.pl" method="post" style="display:none">
64
                    [% INCLUDE 'csrf-token.inc' %]
64
                    <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
65
                    <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
65
                    [% INCLUDE 'csrf-token.inc' %]
66
                    [% INCLUDE 'csrf-token.inc' %]
66
                    <input type="hidden" name="op" value="generate" />
67
                    <input type="hidden" name="op" value="generate" />
Lines 99-104 Link Here
99
                                        <td>[% IF key.active %]Yes[% ELSE %]No[% END %]</td>
100
                                        <td>[% IF key.active %]Yes[% ELSE %]No[% END %]</td>
100
                                        <td>
101
                                        <td>
101
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
102
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
103
                                                [% INCLUDE 'csrf-token.inc' %]
102
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
104
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
103
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
105
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
104
                                                [% INCLUDE 'csrf-token.inc' %]
106
                                                [% INCLUDE 'csrf-token.inc' %]
Lines 106-111 Link Here
106
                                                <button class="btn btn-default btn-xs delete" type="submit"><i class="fa fa-trash-can"></i> Delete</button>
108
                                                <button class="btn btn-default btn-xs delete" type="submit"><i class="fa fa-trash-can"></i> Delete</button>
107
                                            </form>
109
                                            </form>
108
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
110
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
111
                                                [% INCLUDE 'csrf-token.inc' %]
109
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
112
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
110
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
113
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
111
                                                [% INCLUDE 'csrf-token.inc' %]
114
                                                [% INCLUDE 'csrf-token.inc' %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt (+1 lines)
Lines 159-164 Link Here
159
        [% END %]
159
        [% END %]
160
        [% IF account.is_debit && account.amount == account.amountoutstanding && account.status != 'CANCELLED' && !(account.debit_type_code == 'PAYOUT') %]
160
        [% IF account.is_debit && account.amount == account.amountoutstanding && account.status != 'CANCELLED' && !(account.debit_type_code == 'PAYOUT') %]
161
          <form method="post" action="/cgi-bin/koha/members/cancel-charge.pl">
161
          <form method="post" action="/cgi-bin/koha/members/cancel-charge.pl">
162
              [% INCLUDE 'csrf-token.inc' %]
162
            [% INCLUDE 'csrf-token.inc' %]
163
            [% INCLUDE 'csrf-token.inc' %]
163
            <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]">
164
            <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]">
164
            <input type="hidden" name="accountlines_id" value="[% account.accountlines_id | html %]">
165
            <input type="hidden" name="accountlines_id" value="[% account.accountlines_id | html %]">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/discharge.tt (+1 lines)
Lines 58-63 Link Here
58
    [% END %]
58
    [% END %]
59
    <div class="btn-toolbar">
59
    <div class="btn-toolbar">
60
        <form method="post">
60
        <form method="post">
61
            [% INCLUDE 'csrf-token.inc' %]
61
            <input type="submit" name="discharge" class="btn btn-primary" value="Generate discharge" />
62
            <input type="submit" name="discharge" class="btn btn-primary" value="Generate discharge" />
62
            <input type="hidden" value="[% patron.borrowernumber | html %]" name="borrowernumber" />
63
            <input type="hidden" value="[% patron.borrowernumber | html %]" name="borrowernumber" />
63
        </form>
64
        </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/files.tt (+1 lines)
Lines 82-87 Link Here
82
                [% END %]
82
                [% END %]
83
83
84
                <form method="post" action="/cgi-bin/koha/members/files.pl" enctype="multipart/form-data">
84
                <form method="post" action="/cgi-bin/koha/members/files.pl" enctype="multipart/form-data">
85
                    [% INCLUDE 'csrf-token.inc' %]
85
                    <fieldset class="rows">
86
                    <fieldset class="rows">
86
                        <legend>Upload new file</legend>
87
                        <legend>Upload new file</legend>
87
                        <ol>
88
                        <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/housebound.tt (+2 lines)
Lines 112-117 Link Here
112
            <!-- Create or edit housebound_profile -->
112
            <!-- Create or edit housebound_profile -->
113
            [% IF ( method == 'update_or_create' ) %]
113
            [% IF ( method == 'update_or_create' ) %]
114
              <form id="editform" method="post" name="editform"
114
              <form id="editform" method="post" name="editform"
115
                  [% INCLUDE 'csrf-token.inc' %]
115
                    action="/cgi-bin/koha/members/housebound.pl">
116
                    action="/cgi-bin/koha/members/housebound.pl">
116
                <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
117
                <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
117
                [% IF ( housebound_profile ) %]
118
                [% IF ( housebound_profile ) %]
Lines 249-254 Link Here
249
            [% ELSIF ( method == 'visit_update_or_create' ) %]
250
            [% ELSIF ( method == 'visit_update_or_create' ) %]
250
              <h4>Manage housebound deliveries</h4>
251
              <h4>Manage housebound deliveries</h4>
251
              <form name="form" id="instance_form" method="post"
252
              <form name="form" id="instance_form" method="post"
253
                  [% INCLUDE 'csrf-token.inc' %]
252
                    action="/cgi-bin/koha/members/housebound.pl">
254
                    action="/cgi-bin/koha/members/housebound.pl">
253
                [% IF ( visit ) %]
255
                [% IF ( visit ) %]
254
                  <input type="hidden" name="method" value="editvisitconfirm" />
256
                  <input type="hidden" name="method" value="editvisitconfirm" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/mancredit.tt (+1 lines)
Lines 65-70 Link Here
65
                <div class="tab-content">
65
                <div class="tab-content">
66
                    <div role="tabpanel" class="tab-pane active">
66
                    <div role="tabpanel" class="tab-pane active">
67
                        <form action="/cgi-bin/koha/members/mancredit.pl" method="post" id="mancredit">
67
                        <form action="/cgi-bin/koha/members/mancredit.pl" method="post" id="mancredit">
68
                            [% INCLUDE 'csrf-token.inc' %]
68
                            <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
69
                            <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
69
                            [% INCLUDE 'csrf-token.inc' %]
70
                            [% INCLUDE 'csrf-token.inc' %]
70
71
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/maninvoice.tt (+1 lines)
Lines 74-79 Link Here
74
                    </div>
74
                    </div>
75
                [% END %]
75
                [% END %]
76
                <form action="/cgi-bin/koha/members/maninvoice.pl" method="post" id="maninvoice">
76
                <form action="/cgi-bin/koha/members/maninvoice.pl" method="post" id="maninvoice">
77
                    [% INCLUDE 'csrf-token.inc' %]
77
                    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
78
                    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
78
                    [% INCLUDE 'csrf-token.inc' %]
79
                    [% INCLUDE 'csrf-token.inc' %]
79
                    <fieldset class="rows">
80
                    <fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/member-password.tt (+1 lines)
Lines 53-58 Link Here
53
[% ELSE %]
53
[% ELSE %]
54
54
55
<form method="post" id="changepasswordf" action="/cgi-bin/koha/members/member-password.pl">
55
<form method="post" id="changepasswordf" action="/cgi-bin/koha/members/member-password.pl">
56
    [% INCLUDE 'csrf-token.inc' %]
56
<input type="hidden" name="destination" value="[% destination | html %]" />
57
<input type="hidden" name="destination" value="[% destination | html %]" />
57
<input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
58
<input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
58
	[% IF ( errormsg ) %]
59
	[% IF ( errormsg ) %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/member.tt (+1 lines)
Lines 112-117 Link Here
112
          </div>
112
          </div>
113
        [% IF CAN_user_tools_edit_patrons %]
113
        [% IF CAN_user_tools_edit_patrons %]
114
            <form id="patron_batchmod_form" method="post" action="/cgi-bin/koha/tools/modborrowers.pl">
114
            <form id="patron_batchmod_form" method="post" action="/cgi-bin/koha/tools/modborrowers.pl">
115
                [% INCLUDE 'csrf-token.inc' %]
115
                <input type="hidden" name="op" value="show" />
116
                <input type="hidden" name="op" value="show" />
116
                <textarea style="display:none" id="borrowernumberlist" name="borrowernumberlist"></textarea>
117
                <textarea style="display:none" id="borrowernumberlist" name="borrowernumberlist"></textarea>
117
            </form>
118
            </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/memberentrygen.tt (+1 lines)
Lines 229-234 legend:hover { Link Here
229
                        [% END %]
229
                        [% END %]
230
230
231
                        <form name="form" id="entryform" action="/cgi-bin/koha/members/memberentry.pl" method="post" autocomplete="off" class="toggler">
231
                        <form name="form" id="entryform" action="/cgi-bin/koha/members/memberentry.pl" method="post" autocomplete="off" class="toggler">
232
                            [% INCLUDE 'csrf-token.inc' %]
232
                            [% UNLESS ( check_member ) %]
233
                            [% UNLESS ( check_member ) %]
233
                                <input type="hidden" name="nodouble"  value="[% nodouble | html %]" />
234
                                <input type="hidden" name="nodouble"  value="[% nodouble | html %]" />
234
                            [% END %]
235
                            [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/members-update.tt (+1 lines)
Lines 114-119 Link Here
114
            <h1>Update patron records</h1>
114
            <h1>Update patron records</h1>
115
            [% IF PendingModifications %]
115
            [% IF PendingModifications %]
116
                <form method="post" action="members-update-do.pl">
116
                <form method="post" action="members-update-do.pl">
117
                    [% INCLUDE 'csrf-token.inc' %]
117
                    <div id="pending_updates" class="panel-group" role="tablist" aria-multiselectable="true">
118
                    <div id="pending_updates" class="panel-group" role="tablist" aria-multiselectable="true">
118
                        [% FOREACH pm IN PendingModifications %]
119
                        [% FOREACH pm IN PendingModifications %]
119
                            [% SET borrowernumber = pm.borrowernumber %]
120
                            [% SET borrowernumber = pm.borrowernumber %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/notices.tt (+1 lines)
Lines 83-88 Link Here
83
                                                [% IF ( QUEUED_MESSAGE.status != 'pending' ) %]
83
                                                [% IF ( QUEUED_MESSAGE.status != 'pending' ) %]
84
                                                    <div class="notice">
84
                                                    <div class="notice">
85
                                                        <form id="resend_notice[% QUEUED_MESSAGE.message_id | html %]" action="/cgi-bin/koha/members/notices.pl?borrowernumber=[% borrowernumber | html %]" method="POST">
85
                                                        <form id="resend_notice[% QUEUED_MESSAGE.message_id | html %]" action="/cgi-bin/koha/members/notices.pl?borrowernumber=[% borrowernumber | html %]" method="POST">
86
                                                            [% INCLUDE 'csrf-token.inc' %]
86
                                                            <input type="hidden" name="op" value="resend_notice" />
87
                                                            <input type="hidden" name="op" value="resend_notice" />
87
                                                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
88
                                                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
88
                                                            <input type="hidden" name="message_id" value="[% QUEUED_MESSAGE.message_id | html %]" />
89
                                                            <input type="hidden" name="message_id" value="[% QUEUED_MESSAGE.message_id | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/pay.tt (+1 lines)
Lines 74-79 Link Here
74
[% INCLUDE 'renew_results.inc' renew_results=renew_results %]
74
[% INCLUDE 'renew_results.inc' renew_results=renew_results %]
75
[% IF ( accounts ) %]
75
[% IF ( accounts ) %]
76
    <form action="/cgi-bin/koha/members/pay.pl" method="post" id="pay-fines-form">
76
    <form action="/cgi-bin/koha/members/pay.pl" method="post" id="pay-fines-form">
77
        [% INCLUDE 'csrf-token.inc' %]
77
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
78
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
78
    [% INCLUDE 'csrf-token.inc' %]
79
    [% INCLUDE 'csrf-token.inc' %]
79
<p><span class="checkall"><a id="CheckAll" href="#"><i class="fa fa-check"></i> Select all</a></span> | <span class="clearall"><a id="CheckNone" href="#"><i class="fa fa-times"></i> Clear all</a></span></p>
80
<p><span class="checkall"><a id="CheckAll" href="#"><i class="fa fa-check"></i> Select all</a></span> | <span class="clearall"><a id="CheckNone" href="#"><i class="fa fa-times"></i> Clear all</a></span></p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/paycollect.tt (-3 / +3 lines)
Lines 135-141 Link Here
135
    </ul>
135
    </ul>
136
136
137
    <form name="payindivfine" id="payindivfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
137
    <form name="payindivfine" id="payindivfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
138
    [% INCLUDE 'csrf-token.inc' %]
138
        [% INCLUDE 'csrf-token.inc' %]
139
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
139
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
140
    <input type="hidden" name="pay_individual" id="pay_individual" value="[% pay_individual | html %]" />
140
    <input type="hidden" name="pay_individual" id="pay_individual" value="[% pay_individual | html %]" />
141
    <input type="hidden" name="itemnumber" id="itemnumber" value="[% itemnumber | html %]" />
141
    <input type="hidden" name="itemnumber" id="itemnumber" value="[% itemnumber | html %]" />
Lines 231-237 Link Here
231
    </ul>
231
    </ul>
232
232
233
    <form name="woindivfine" id="woindivfine" action="/cgi-bin/koha/members/pay.pl" method="post" >
233
    <form name="woindivfine" id="woindivfine" action="/cgi-bin/koha/members/pay.pl" method="post" >
234
    [% INCLUDE 'csrf-token.inc' %]
234
        [% INCLUDE 'csrf-token.inc' %]
235
    <fieldset class="rows">
235
    <fieldset class="rows">
236
    <legend>Write off an individual charge</legend>
236
    <legend>Write off an individual charge</legend>
237
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
237
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
Lines 298-304 Link Here
298
    [% END %]
298
    [% END %]
299
299
300
    <form name="payfine" id="payfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
300
    <form name="payfine" id="payfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
301
    [% INCLUDE 'csrf-token.inc' %]
301
        [% INCLUDE 'csrf-token.inc' %]
302
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
302
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
303
    <input type="hidden" name="selected_accts" id="selected_accts" value="[% selected_accts | html %]" />
303
    <input type="hidden" name="selected_accts" id="selected_accts" value="[% selected_accts | html %]" />
304
    <input type="hidden" name="total" id="total" value="[% total | html %]" />
304
    <input type="hidden" name="total" id="total" value="[% total | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/update-child.tt (+1 lines)
Lines 20-25 Link Here
20
20
21
    [% IF patron_categories %]
21
    [% IF patron_categories %]
22
        <form method="post" action="update-child.pl">
22
        <form method="post" action="update-child.pl">
23
            [% INCLUDE 'csrf-token.inc' %]
23
            <fieldset>
24
            <fieldset>
24
                <table id="catst">
25
                <table id="catst">
25
                    <thead>
26
                    <thead>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/offline_circ/process_koc.tt (+3 lines)
Lines 70-75 Link Here
70
70
71
   <div id="fileuploadform">
71
   <div id="fileuploadform">
72
     <form method="post" action="/cgi-bin/koha/offline_circ/process_koc.pl" enctype="multipart/form-data" class="validated">
72
     <form method="post" action="/cgi-bin/koha/offline_circ/process_koc.pl" enctype="multipart/form-data" class="validated">
73
         [% INCLUDE 'csrf-token.inc' %]
73
		<fieldset class="brief">
74
		<fieldset class="brief">
74
       <ol><li><label for="fileToUpload">Choose .koc file: </label>
75
       <ol><li><label for="fileToUpload">Choose .koc file: </label>
75
            <input class="required" required="required" type="file" id="fileToUpload" size="50" name="fileToUpload" />
76
            <input class="required" required="required" type="file" id="fileToUpload" size="50" name="fileToUpload" />
Lines 85-96 Link Here
85
   </div>
86
   </div>
86
87
87
   <form action="enqueue_koc.pl" id="processfile" method="post" enctype="multipart/form-data">
88
   <form action="enqueue_koc.pl" id="processfile" method="post" enctype="multipart/form-data">
89
       [% INCLUDE 'csrf-token.inc' %]
88
     <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
90
     <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
89
     <input type="hidden" name="action" value="add_to_queue" />
91
     <input type="hidden" name="action" value="add_to_queue" />
90
     <input type="submit" value="Add to offline circulation queue" id="queueformsubmit" />
92
     <input type="submit" value="Add to offline circulation queue" id="queueformsubmit" />
91
   </form>
93
   </form>
92
94
93
   <form action="process_koc.pl" id="enqueuefile" method="post" enctype="multipart/form-data">
95
   <form action="process_koc.pl" id="enqueuefile" method="post" enctype="multipart/form-data">
96
       [% INCLUDE 'csrf-token.inc' %]
94
     <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
97
     <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
95
     <!-- <input type="submit" value="Apply directly" id="mainformsubmit" /> -->
98
     <!-- <input type="submit" value="Apply directly" id="mainformsubmit" /> -->
96
   </form>
99
   </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/onboarding/onboardingstep1.tt (+1 lines)
Lines 35-40 Link Here
35
                </div>
35
                </div>
36
36
37
                <form name="LibraryCreation" method="post" action="onboarding.pl">
37
                <form name="LibraryCreation" method="post" action="onboarding.pl">
38
                    [% INCLUDE 'csrf-token.inc' %]
38
                    <fieldset class="rows" >
39
                    <fieldset class="rows" >
39
                        <input type="hidden" name="step" value="1"/>
40
                        <input type="hidden" name="step" value="1"/>
40
                        <input type="hidden" name="op" value="add_validate_library"/>
41
                        <input type="hidden" name="op" value="add_validate_library"/>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/onboarding/onboardingstep2.tt (+1 lines)
Lines 47-52 Link Here
47
                <p> The patron category you create will be used by the <span class="bg-info">administrator account</span>.</p>
47
                <p> The patron category you create will be used by the <span class="bg-info">administrator account</span>.</p>
48
48
49
                <form id="category_form" method="post" action="onboarding.pl">
49
                <form id="category_form" method="post" action="onboarding.pl">
50
                    [% INCLUDE 'csrf-token.inc' %]
50
                    <fieldset class="rows">
51
                    <fieldset class="rows">
51
                        <input type="hidden" name="step" value="2" />
52
                        <input type="hidden" name="step" value="2" />
52
                        <input type="hidden" name="op" value="add_validate_category" />
53
                        <input type="hidden" name="op" value="add_validate_category" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/onboarding/onboardingstep3.tt (+1 lines)
Lines 39-44 Link Here
39
                Now we will create a patron with superlibrarian permissions. Log in with this to access Koha as a staff member with all permissions.
39
                Now we will create a patron with superlibrarian permissions. Log in with this to access Koha as a staff member with all permissions.
40
                </p>
40
                </p>
41
                <form name="createpatron" id="createpatron" method="post" action="onboarding.pl">
41
                <form name="createpatron" id="createpatron" method="post" action="onboarding.pl">
42
                    [% INCLUDE 'csrf-token.inc' %]
42
                    <fieldset class="rows">
43
                    <fieldset class="rows">
43
                        <input type="hidden" name="step" value="3" />
44
                        <input type="hidden" name="step" value="3" />
44
                        <input type="hidden" name="op" value="add_validate_patron" />
45
                        <input type="hidden" name="op" value="add_validate_patron" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/onboarding/onboardingstep4.tt (+1 lines)
Lines 40-45 Link Here
40
                    <p> Important: Item types are what you apply circulation rules to. Circulation rules govern how your institution will lend its items: Checkout length, renewal policy, hold policy, etc. For example a circulation rule applied to the DVD item type may enforce a payment of $1.00 for checking out any DVD.</p>
40
                    <p> Important: Item types are what you apply circulation rules to. Circulation rules govern how your institution will lend its items: Checkout length, renewal policy, hold policy, etc. For example a circulation rule applied to the DVD item type may enforce a payment of $1.00 for checking out any DVD.</p>
41
41
42
                    <form id="createitemform" method="post" action="onboarding.pl">
42
                    <form id="createitemform" method="post" action="onboarding.pl">
43
                        [% INCLUDE 'csrf-token.inc' %]
43
                    <fieldset class="rows">
44
                    <fieldset class="rows">
44
                        <input type="hidden" name="step" value="4" />
45
                        <input type="hidden" name="step" value="4" />
45
                        <input type="hidden" name="op" value="add_validate_itemtype" />
46
                        <input type="hidden" name="op" value="add_validate_itemtype" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/onboarding/onboardingstep5.tt (+1 lines)
Lines 56-61 Link Here
56
                    </div>
56
                    </div>
57
57
58
                    <form name="createcirculationrule" method="post" action="onboarding.pl">
58
                    <form name="createcirculationrule" method="post" action="onboarding.pl">
59
                        [% INCLUDE 'csrf-token.inc' %]
59
                        <fieldset class="rows">
60
                        <fieldset class="rows">
60
                            <input type="hidden" name="step" value="5"/>
61
                            <input type="hidden" name="step" value="5"/>
61
                            <input type="hidden" name="op" value="add_validate_circ_rule" />
62
                            <input type="hidden" name="op" value="add_validate_circ_rule" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patron_lists/add-modify.tt (+1 lines)
Lines 51-56 Link Here
51
        </h1>
51
        </h1>
52
52
53
        <form method="post" action="/cgi-bin/koha/patron_lists/add-modify.pl" class="validated">
53
        <form method="post" action="/cgi-bin/koha/patron_lists/add-modify.pl" class="validated">
54
            [% INCLUDE 'csrf-token.inc' %]
54
            <fieldset class="rows">
55
            <fieldset class="rows">
55
56
56
                <legend>
57
                <legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patron_lists/list.tt (+2 lines)
Lines 105-110 Link Here
105
        [% END %]
105
        [% END %]
106
106
107
        <form action="list.pl" id="add_patrons" method="post" class="clearfix">
107
        <form action="list.pl" id="add_patrons" method="post" class="clearfix">
108
            [% INCLUDE 'csrf-token.inc' %]
108
            <fieldset class="rows">
109
            <fieldset class="rows">
109
                <legend>Add patrons</legend>
110
                <legend>Add patrons</legend>
110
                <ol>
111
                <ol>
Lines 156-161 Link Here
156
        </form>
157
        </form>
157
158
158
        <form action="list.pl" id="remove_patrons" method="post">
159
        <form action="list.pl" id="remove_patrons" method="post">
160
            [% INCLUDE 'csrf-token.inc' %]
159
161
160
            <div class="searchheader" id="searchheader">
162
            <div class="searchheader" id="searchheader">
161
                <span class="checkall"><a id="CheckAll" href="#"><i class="fa fa-check"></i> Select all</a></span> |
163
                <span class="checkall"><a id="CheckAll" href="#"><i class="fa fa-check"></i> Select all</a></span> |
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/edit-batch.tt (+1 lines)
Lines 55-60 Link Here
55
                    [% INCLUDE 'patroncards-errors.inc' %]
55
                    [% INCLUDE 'patroncards-errors.inc' %]
56
                    <div id="manage-patroncard-batches">
56
                    <div id="manage-patroncard-batches">
57
                            <form name="add_by_bor_num" action="/cgi-bin/koha/patroncards/edit-batch.pl" method="post">
57
                            <form name="add_by_bor_num" action="/cgi-bin/koha/patroncards/edit-batch.pl" method="post">
58
                                [% INCLUDE 'csrf-token.inc' %]
58
                                <div>
59
                                <div>
59
                                    <fieldset class="rows" style="border-bottom: 0px; border: 0px;">
60
                                    <fieldset class="rows" style="border-bottom: 0px; border: 0px;">
60
                                    <ol><li id="description">
61
                                    <ol><li id="description">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/edit-layout.tt (+1 lines)
Lines 44-49 Link Here
44
44
45
                <!-- NOTE: The order of the elements on this form is crictical to correct processing. You've been warned...  -->
45
                <!-- NOTE: The order of the elements on this form is crictical to correct processing. You've been warned...  -->
46
                <form name="input" action="/cgi-bin/koha/patroncards/edit-layout.pl" method="post">
46
                <form name="input" action="/cgi-bin/koha/patroncards/edit-layout.pl" method="post">
47
                    [% INCLUDE 'csrf-token.inc' %]
47
                <div class="row">
48
                <div class="row">
48
                <div class="col-sm-6">
49
                <div class="col-sm-6">
49
                        <fieldset class="rows">
50
                        <fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/edit-profile.tt (+1 lines)
Lines 47-52 Link Here
47
                                [% IF (profile_id) %] ([% profile_id | html %])[% END %]
47
                                [% IF (profile_id) %] ([% profile_id | html %])[% END %]
48
                            </h1>
48
                            </h1>
49
                                    <form name="input" action="/cgi-bin/koha/patroncards/edit-profile.pl" method="post">
49
                                    <form name="input" action="/cgi-bin/koha/patroncards/edit-profile.pl" method="post">
50
                                        [% INCLUDE 'csrf-token.inc' %]
50
                                    <fieldset class="rows"><legend>Profile settings</legend>
51
                                    <fieldset class="rows"><legend>Profile settings</legend>
51
                                        <ol>
52
                                        <ol>
52
                                            <li>
53
                                            <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/edit-template.tt (+1 lines)
Lines 47-52 Link Here
47
                        [% IF (template_id) %] ([% template_id | html %])[% END %]
47
                        [% IF (template_id) %] ([% template_id | html %])[% END %]
48
                    </h1>
48
                    </h1>
49
                    <form name="input" action="/cgi-bin/koha/patroncards/edit-template.pl" method="post">
49
                    <form name="input" action="/cgi-bin/koha/patroncards/edit-template.pl" method="post">
50
                        [% INCLUDE 'csrf-token.inc' %]
50
                        <div class="row">
51
                        <div class="row">
51
                        <div class="col-sm-6">
52
                        <div class="col-sm-6">
52
                            <fieldset class="rows">
53
                            <fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/image-manage.tt (+2 lines)
Lines 38-43 Link Here
38
                        <h2>Upload additional images for patron cards</h2>
38
                        <h2>Upload additional images for patron cards</h2>
39
                        <p>Manage additional images to use as logo, decoration or background on a patron card layout.</p>
39
                        <p>Manage additional images to use as logo, decoration or background on a patron card layout.</p>
40
                        <form name="upload_images" method="post" action="/cgi-bin/koha/patroncards/image-manage.pl" enctype="multipart/form-data">
40
                        <form name="upload_images" method="post" action="/cgi-bin/koha/patroncards/image-manage.pl" enctype="multipart/form-data">
41
                            [% INCLUDE 'csrf-token.inc' %]
41
                            <fieldset class="brief">
42
                            <fieldset class="brief">
42
                                <div class="hint">Only PNG, GIF, JPEG, XPM formats are supported. Maximum image size is 2MB.</div>
43
                                <div class="hint">Only PNG, GIF, JPEG, XPM formats are supported. Maximum image size is 2MB.</div>
43
                                <ol>
44
                                <ol>
Lines 76-81 Link Here
76
                    <h2>Delete images</h2>
77
                    <h2>Delete images</h2>
77
                        [% IF ( TABLE ) %]
78
                        [% IF ( TABLE ) %]
78
                        <form name="delete_images" method="post" action="/cgi-bin/koha/patroncards/image-manage.pl" enctype="multipart/form-data">
79
                        <form name="delete_images" method="post" action="/cgi-bin/koha/patroncards/image-manage.pl" enctype="multipart/form-data">
80
                            [% INCLUDE 'csrf-token.inc' %]
79
                            <fieldset class="brief">
81
                            <fieldset class="brief">
80
                                <div class="hint">
82
                                <div class="hint">
81
                                    Select one or more images to delete.
83
                                    Select one or more images to delete.
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/print.tt (+1 lines)
Lines 55-60 Link Here
55
                    [% END %]
55
                    [% END %]
56
            </h3>
56
            </h3>
57
            <form id="exportingf" name="exporting" method="post" action="/cgi-bin/koha/patroncards/print.pl">
57
            <form id="exportingf" name="exporting" method="post" action="/cgi-bin/koha/patroncards/print.pl">
58
                [% INCLUDE 'csrf-token.inc' %]
58
                <input type="hidden" name="op" value="export" />
59
                <input type="hidden" name="op" value="export" />
59
                <input type="hidden" name="referer" value="[% referer | html %]" />
60
                <input type="hidden" name="referer" value="[% referer | html %]" />
60
                [% FOREACH batch_id IN batch_ids %]
61
                [% FOREACH batch_id IN batch_ids %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/plugins/plugins-upload.tt (+1 lines)
Lines 44-49 Link Here
44
                </div>
44
                </div>
45
                [% END %]
45
                [% END %]
46
                <form method="post" action="/cgi-bin/koha/plugins/plugins-upload.pl" enctype="multipart/form-data">
46
                <form method="post" action="/cgi-bin/koha/plugins/plugins-upload.pl" enctype="multipart/form-data">
47
                    [% INCLUDE 'csrf-token.inc' %]
47
                    <fieldset class="brief">
48
                    <fieldset class="brief">
48
                         <div class="hint"><strong>NOTE:</strong> Only KPZ file format is supported.</div>
49
                         <div class="hint"><strong>NOTE:</strong> Only KPZ file format is supported.</div>
49
                        <ol>
50
                        <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/pos/pay.tt (+2 lines)
Lines 42-47 Link Here
42
                </p>
42
                </p>
43
                [% IF ( CAN_user_parameters_manage_cash_registers ) %]
43
                [% IF ( CAN_user_parameters_manage_cash_registers ) %]
44
                    <form action="/cgi-bin/koha/admin/cash_registers.pl" method="post">
44
                    <form action="/cgi-bin/koha/admin/cash_registers.pl" method="post">
45
                        [% INCLUDE 'csrf-token.inc' %]
45
                        <input type="hidden" name="op" value="add_form" />
46
                        <input type="hidden" name="op" value="add_form" />
46
                        <button class="new" type="submit"><i class="fa fa-plus"></i> Create a new cash register</button>
47
                        <button class="new" type="submit"><i class="fa fa-plus"></i> Create a new cash register</button>
47
                    </form>
48
                    </form>
Lines 56-61 Link Here
56
        [% END %]
57
        [% END %]
57
58
58
        <form name="payForm" id="payForm" method="post" action="/cgi-bin/koha/pos/pay.pl">
59
        <form name="payForm" id="payForm" method="post" action="/cgi-bin/koha/pos/pay.pl">
60
            [% INCLUDE 'csrf-token.inc' %]
59
            <div class="row">
61
            <div class="row">
60
62
61
                <div class="col-md-6">
63
                <div class="col-md-6">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/pos/register.tt (+2 lines)
Lines 40-45 Link Here
40
                    </p>
40
                    </p>
41
                    [% IF ( CAN_user_parameters_manage_cash_registers ) %]
41
                    [% IF ( CAN_user_parameters_manage_cash_registers ) %]
42
                        <form action="/cgi-bin/koha/admin/cash_registers.pl" method="post">
42
                        <form action="/cgi-bin/koha/admin/cash_registers.pl" method="post">
43
                            [% INCLUDE 'csrf-token.inc' %]
43
                            <input type="hidden" name="op" value="add_form" />
44
                            <input type="hidden" name="op" value="add_form" />
44
                            <button class="new" type="submit"><i class="fa fa-plus"></i> Create a new cash register</button>
45
                            <button class="new" type="submit"><i class="fa fa-plus"></i> Create a new cash register</button>
45
                        </form>
46
                        </form>
Lines 308-313 Link Here
308
    <!-- Issue refund modal -->
309
    <!-- Issue refund modal -->
309
    <div class="modal" id="issueRefundModal" tabindex="-1" role="dialog" aria-labelledby="issueRefundLabel">
310
    <div class="modal" id="issueRefundModal" tabindex="-1" role="dialog" aria-labelledby="issueRefundLabel">
310
        <form id="refund_form" method="post" enctype="multipart/form-data" class="validated">
311
        <form id="refund_form" method="post" enctype="multipart/form-data" class="validated">
312
            [% INCLUDE 'csrf-token.inc' %]
311
            <input type="hidden" name="accountline" value="" id="refundline">
313
            <input type="hidden" name="accountline" value="" id="refundline">
312
            <div class="modal-dialog" role="document">
314
            <div class="modal-dialog" role="document">
313
                <div class="modal-content">
315
                <div class="modal-content">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/pos/registers.tt (+1 lines)
Lines 37-42 Link Here
37
                            </p>
37
                            </p>
38
                            [% IF ( CAN_user_parameters_manage_cash_registers ) %]
38
                            [% IF ( CAN_user_parameters_manage_cash_registers ) %]
39
                                <form action="/cgi-bin/koha/admin/cash_registers.pl" method="post">
39
                                <form action="/cgi-bin/koha/admin/cash_registers.pl" method="post">
40
                                    [% INCLUDE 'csrf-token.inc' %]
40
                                    <input type="hidden" name="op" value="add_form" />
41
                                    <input type="hidden" name="op" value="add_form" />
41
                                    <button class="new" type="submit"><i class="fa fa-plus"></i> Create a new cash register</button>
42
                                    <button class="new" type="submit"><i class="fa fa-plus"></i> Create a new cash register</button>
42
                                </form>
43
                                </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/recalls/recalls_overdue.tt (+1 lines)
Lines 42-47 Link Here
42
            [% IF recalls.count %]
42
            [% IF recalls.count %]
43
                <div class="page-section">
43
                <div class="page-section">
44
                    <form method="post" action="/cgi-bin/koha/recalls/recalls_overdue.pl">
44
                    <form method="post" action="/cgi-bin/koha/recalls/recalls_overdue.pl">
45
                        [% INCLUDE 'csrf-token.inc' %]
45
                        <input type="hidden" name="op" value="cancel_multiple_recalls">
46
                        <input type="hidden" name="op" value="cancel_multiple_recalls">
46
                        <input type="checkbox" id="select_all"> <span id="select_all_text">Select all</span>
47
                        <input type="checkbox" id="select_all"> <span id="select_all_text">Select all</span>
47
                        [% INCLUDE 'recalls.inc' %]
48
                        [% INCLUDE 'recalls.inc' %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/recalls/recalls_queue.tt (+1 lines)
Lines 42-47 Link Here
42
            [% IF recalls.count %]
42
            [% IF recalls.count %]
43
                <div class="page-section">
43
                <div class="page-section">
44
                    <form method="post" action="/cgi-bin/koha/recalls/recalls_queue.pl">
44
                    <form method="post" action="/cgi-bin/koha/recalls/recalls_queue.pl">
45
                        [% INCLUDE 'csrf-token.inc' %]
45
                        <input type="hidden" name="op" value="cancel_multiple_recalls">
46
                        <input type="hidden" name="op" value="cancel_multiple_recalls">
46
                        <input type="checkbox" id="select_all"> <span id="select_all_text">Select all</span>
47
                        <input type="checkbox" id="select_all"> <span id="select_all_text">Select all</span>
47
                        [% INCLUDE 'recalls.inc' %]
48
                        [% INCLUDE 'recalls.inc' %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/recalls/recalls_to_pull.tt (+1 lines)
Lines 124-129 Link Here
124
                                </td>
124
                                </td>
125
                                <td class="recall-action">
125
                                <td class="recall-action">
126
                                    <form action="/cgi-bin/koha/recalls/recalls_to_pull.pl" method="post">
126
                                    <form action="/cgi-bin/koha/recalls/recalls_to_pull.pl" method="post">
127
                                        [% INCLUDE 'csrf-token.inc' %]
127
                                        <input type="hidden" name="recall_id" value="[% recall.first_recall.id | html %]">
128
                                        <input type="hidden" name="recall_id" value="[% recall.first_recall.id | html %]">
128
                                        <input type="hidden" name="op" value="cancel">
129
                                        <input type="hidden" name="op" value="cancel">
129
                                        [% IF recall.first_recall.in_transit %]
130
                                        [% IF recall.first_recall.in_transit %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/recalls/recalls_waiting.tt (+2 lines)
Lines 78-83 Link Here
78
                                                <td class="recall-library">[% recall.library.branchname | html %]</td>
78
                                                <td class="recall-library">[% recall.library.branchname | html %]</td>
79
                                                <td class="recall-action actions">
79
                                                <td class="recall-action actions">
80
                                                    <form action="/cgi-bin/koha/recalls/recalls_waiting.pl" method="post">
80
                                                    <form action="/cgi-bin/koha/recalls/recalls_waiting.pl" method="post">
81
                                                        [% INCLUDE 'csrf-token.inc' %]
81
                                                        <input type="hidden" name="recall_id" value="[% recall.id | html %]">
82
                                                        <input type="hidden" name="recall_id" value="[% recall.id | html %]">
82
                                                        <input type="hidden" name="op" value="modify">
83
                                                        <input type="hidden" name="op" value="modify">
83
                                                        <fieldset class="action">
84
                                                        <fieldset class="action">
Lines 122-127 Link Here
122
                                                    <td class="recall-library">[% recall.library.branchname | html %]</td>
123
                                                    <td class="recall-library">[% recall.library.branchname | html %]</td>
123
                                                    <td class="recall-action actions">
124
                                                    <td class="recall-action actions">
124
                                                        <form action="/cgi-bin/koha/recalls/recalls_waiting.pl" method="post">
125
                                                        <form action="/cgi-bin/koha/recalls/recalls_waiting.pl" method="post">
126
                                                            [% INCLUDE 'csrf-token.inc' %]
125
                                                            <input type="hidden" name="recall_id" value="[% recall.id | html %]">
127
                                                            <input type="hidden" name="recall_id" value="[% recall.id | html %]">
126
                                                            <input type="hidden" name="op" value="modify">
128
                                                            <input type="hidden" name="op" value="modify">
127
                                                            <fieldset class="action">
129
                                                            <fieldset class="action">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/recalls/request.tt (+1 lines)
Lines 42-47 Link Here
42
        [% IF recalls.count %]
42
        [% IF recalls.count %]
43
            <div class="page-section">
43
            <div class="page-section">
44
                <form method="post" action="/cgi-bin/koha/recalls/request.pl">
44
                <form method="post" action="/cgi-bin/koha/recalls/request.pl">
45
                    [% INCLUDE 'csrf-token.inc' %]
45
                    <input type="hidden" name="op" value="cancel_multiple_recalls">
46
                    <input type="hidden" name="op" value="cancel_multiple_recalls">
46
                    <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]">
47
                    <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]">
47
                    <input type="checkbox" id="select_all"> <span id="select_all_text">Select all</span>
48
                    <input type="checkbox" id="select_all"> <span id="select_all_text">Select all</span>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/acquisitions_stats.tt (+1 lines)
Lines 106-111 Link Here
106
	[% END %]
106
	[% END %]
107
[% ELSE %]
107
[% ELSE %]
108
	<form method="post" action="/cgi-bin/koha/reports/acquisitions_stats.pl">
108
	<form method="post" action="/cgi-bin/koha/reports/acquisitions_stats.pl">
109
	    [% INCLUDE 'csrf-token.inc' %]
109
	<fieldset class="rows">
110
	<fieldset class="rows">
110
	<legend>Acquisitions statistics</legend>
111
	<legend>Acquisitions statistics</legend>
111
	<table>
112
	<table>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/bor_issues_top.tt (+1 lines)
Lines 116-121 Link Here
116
[% ELSE %]
116
[% ELSE %]
117
    <h1>Patrons with the most checkouts</h1>
117
    <h1>Patrons with the most checkouts</h1>
118
	<form method="post" action="/cgi-bin/koha/reports/bor_issues_top.pl">
118
	<form method="post" action="/cgi-bin/koha/reports/bor_issues_top.pl">
119
	    [% INCLUDE 'csrf-token.inc' %]
119
	<fieldset class="rows">
120
	<fieldset class="rows">
120
        <ol>
121
        <ol>
121
            <li>
122
            <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/borrowers_out.tt (+1 lines)
Lines 71-76 Link Here
71
[% ELSE %]
71
[% ELSE %]
72
    <h1>Patrons with no checkouts</h1>
72
    <h1>Patrons with no checkouts</h1>
73
    <form method="post" action="/cgi-bin/koha/reports/borrowers_out.pl">
73
    <form method="post" action="/cgi-bin/koha/reports/borrowers_out.pl">
74
        [% INCLUDE 'csrf-token.inc' %]
74
    <fieldset class="rows">
75
    <fieldset class="rows">
75
		<ol>
76
		<ol>
76
            <li><label for="patroncategory">Patron category: </label> <select name="Filter" id="patroncategory"><option value="" > Any category code</option>
77
            <li><label for="patroncategory">Patron category: </label> <select name="Filter" id="patroncategory"><option value="" > Any category code</option>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/borrowers_stats.tt (+1 lines)
Lines 94-99 Link Here
94
[% ELSE %]
94
[% ELSE %]
95
95
96
	<form method="post" action="/cgi-bin/koha/reports/borrowers_stats.pl">
96
	<form method="post" action="/cgi-bin/koha/reports/borrowers_stats.pl">
97
	    [% INCLUDE 'csrf-token.inc' %]
97
	<fieldset class="rows"><legend>Patrons statistics</legend>
98
	<fieldset class="rows"><legend>Patrons statistics</legend>
98
	<table>
99
	<table>
99
		<thead>
100
		<thead>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/cash_register_stats.tt (+1 lines)
Lines 63-68 Link Here
63
63
64
    <h1>Cash register statistics</h1>
64
    <h1>Cash register statistics</h1>
65
    <form method="post" action="/cgi-bin/koha/reports/cash_register_stats.pl" id="frmCashRegister">
65
    <form method="post" action="/cgi-bin/koha/reports/cash_register_stats.pl" id="frmCashRegister">
66
        [% INCLUDE 'csrf-token.inc' %]
66
        <fieldset class="rows">
67
        <fieldset class="rows">
67
            <legend>Cash register statistics [% beginDate | $KohaDates %] to [% endDate | $KohaDates %]</legend>
68
            <legend>Cash register statistics [% beginDate | $KohaDates %] to [% endDate | $KohaDates %]</legend>
68
            <ol>
69
            <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/cat_issues_top.tt (+1 lines)
Lines 90-95 Link Here
90
[% ELSE %]
90
[% ELSE %]
91
    <h1>Most-circulated items</h1>
91
    <h1>Most-circulated items</h1>
92
	<form method="post" action="/cgi-bin/koha/reports/cat_issues_top.pl">
92
	<form method="post" action="/cgi-bin/koha/reports/cat_issues_top.pl">
93
	    [% INCLUDE 'csrf-token.inc' %]
93
	<fieldset class="rows">
94
	<fieldset class="rows">
94
	<ol>
95
	<ol>
95
        <li>
96
        <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/catalogue_out.tt (+1 lines)
Lines 163-168 Link Here
163
                    <h1>Items with no checkouts</h1>
163
                    <h1>Items with no checkouts</h1>
164
164
165
                    <form method="post" action="/cgi-bin/koha/reports/catalogue_out.pl">
165
                    <form method="post" action="/cgi-bin/koha/reports/catalogue_out.pl">
166
                        [% INCLUDE 'csrf-token.inc' %]
166
                        <fieldset class="rows">
167
                        <fieldset class="rows">
167
                            <ol>
168
                            <ol>
168
                                <li>
169
                                <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/catalogue_stats.tt (+1 lines)
Lines 98-103 Link Here
98
[% ELSE %]
98
[% ELSE %]
99
99
100
	<form method="post" action="/cgi-bin/koha/reports/catalogue_stats.pl">
100
	<form method="post" action="/cgi-bin/koha/reports/catalogue_stats.pl">
101
	    [% INCLUDE 'csrf-token.inc' %]
101
	<fieldset class="rows">
102
	<fieldset class="rows">
102
	<legend>Catalog statistics</legend>
103
	<legend>Catalog statistics</legend>
103
	<table>
104
	<table>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/dictionary.tt (+6 lines)
Lines 87-92 Link Here
87
            <div class="page-section">
87
            <div class="page-section">
88
                <h2>Current terms</h2>
88
                <h2>Current terms</h2>
89
                <form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
89
                <form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
90
                    [% INCLUDE 'csrf-token.inc' %]
90
                    <input type="hidden" name="phase" value="View Dictionary" />
91
                    <input type="hidden" name="phase" value="View Dictionary" />
91
                    [% IF ( areas ) %]
92
                    [% IF ( areas ) %]
92
                        Filter by area
93
                        Filter by area
Lines 135-140 Link Here
135
[% IF ( new_dictionary ) %]
136
[% IF ( new_dictionary ) %]
136
<h3>Add new definition</h3>
137
<h3>Add new definition</h3>
137
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
138
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
139
    [% INCLUDE 'csrf-token.inc' %]
138
<fieldset class="rows"><legend>Step 1 of 5: Name the new definition</legend><ol>
140
<fieldset class="rows"><legend>Step 1 of 5: Name the new definition</legend><ol>
139
<li>
141
<li>
140
<label for="definition_name">Definition name:</label>
142
<label for="definition_name">Definition name:</label>
Lines 154-159 Link Here
154
[%- IF ( step_2 ) -%]
156
[%- IF ( step_2 ) -%]
155
<h3>Add new definition</h3>
157
<h3>Add new definition</h3>
156
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
158
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
159
    [% INCLUDE 'csrf-token.inc' %]
157
  <fieldset class="rows">
160
  <fieldset class="rows">
158
    <legend>Step 2 of 5: Choose the area</legend>
161
    <legend>Step 2 of 5: Choose the area</legend>
159
    <ol>
162
    <ol>
Lines 176-181 Link Here
176
[% IF ( step_3 ) %]
179
[% IF ( step_3 ) %]
177
<h3>Add new definition</h3>
180
<h3>Add new definition</h3>
178
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">      
181
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">      
182
    [% INCLUDE 'csrf-token.inc' %]
179
<fieldset class="rows">
183
<fieldset class="rows">
180
<legend>Step 3 of 5: Choose a column</legend>
184
<legend>Step 3 of 5: Choose a column</legend>
181
<input type="hidden" name="area" value="[% area | html %]" />
185
<input type="hidden" name="area" value="[% area | html %]" />
Lines 212-217 Link Here
212
[% IF ( step_4 ) %]
216
[% IF ( step_4 ) %]
213
<h3>Add new definition</h3>
217
<h3>Add new definition</h3>
214
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
218
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
219
    [% INCLUDE 'csrf-token.inc' %]
215
<fieldset class="rows">
220
<fieldset class="rows">
216
<legend>Step 4 of 5: Specify a value</legend>
221
<legend>Step 4 of 5: Specify a value</legend>
217
<input type="hidden" name="area" value="[% area | html %]" />
222
<input type="hidden" name="area" value="[% area | html %]" />
Lines 261-266 Link Here
261
266
262
[% IF ( step_5 ) %]
267
[% IF ( step_5 ) %]
263
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
268
<form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
269
    [% INCLUDE 'csrf-token.inc' %]
264
<input type="hidden" name="area" value="[% area | html %]" />
270
<input type="hidden" name="area" value="[% area | html %]" />
265
<input type="hidden" name="definition_name" value="[% definition_name | html %]" />
271
<input type="hidden" name="definition_name" value="[% definition_name | html %]" />
266
<input type="hidden" name="definition_description" value="[% definition_description | html %]" />
272
<input type="hidden" name="definition_description" value="[% definition_description | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/guided_reports_start.tt (+16 lines)
Lines 266-271 Link Here
266
                                    [% END %]
266
                                    [% END %]
267
267
268
                                    <form action="/cgi-bin/koha/reports/guided_reports.pl" id="reports_form" method="post">
268
                                    <form action="/cgi-bin/koha/reports/guided_reports.pl" id="reports_form" method="post">
269
                                        [% INCLUDE 'csrf-token.inc' %]
269
                                        <input type="hidden" name="phase" value="Delete Multiple" />
270
                                        <input type="hidden" name="phase" value="Delete Multiple" />
270
                                        <table id="table_reports">
271
                                        <table id="table_reports">
271
                                            <thead>
272
                                            <thead>
Lines 514-519 Link Here
514
                [% IF ( build2 ) %]
515
                [% IF ( build2 ) %]
515
                    <h1>Build a report</h1>
516
                    <h1>Build a report</h1>
516
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
517
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
518
                        [% INCLUDE 'csrf-token.inc' %]
517
                        <input type="hidden" name="area" value="[% area | html %]" />
519
                        <input type="hidden" name="area" value="[% area | html %]" />
518
                        <input type="hidden" name="public" value="[% public | html %]" />
520
                        <input type="hidden" name="public" value="[% public | html %]" />
519
                        <input type="hidden" name="cache_expiry" value="[% cache_expiry | html %]" />
521
                        <input type="hidden" name="cache_expiry" value="[% cache_expiry | html %]" />
Lines 545-550 Link Here
545
                    <p>Note: Be careful selecting when selecting columns. If your choice is too broad it could result in a very large report that will either not complete, or slow your system down.</p>
547
                    <p>Note: Be careful selecting when selecting columns. If your choice is too broad it could result in a very large report that will either not complete, or slow your system down.</p>
546
548
547
                    <form id="column_submit" action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
549
                    <form id="column_submit" action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
550
                        [% INCLUDE 'csrf-token.inc' %]
548
                        <input type="hidden" name="area" value="[% area | html %]" />
551
                        <input type="hidden" name="area" value="[% area | html %]" />
549
                        <input type="hidden" name="type" value="[% type | html %]" />
552
                        <input type="hidden" name="type" value="[% type | html %]" />
550
                        <input type="hidden" name="public" value="[% public | html %]" />
553
                        <input type="hidden" name="public" value="[% public | html %]" />
Lines 597-602 Link Here
597
                [% IF ( build4 ) %]
600
                [% IF ( build4 ) %]
598
                    <h1>Build a report</h1>
601
                    <h1>Build a report</h1>
599
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" >
602
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" >
603
                        [% INCLUDE 'csrf-token.inc' %]
600
                        <input type="hidden" name="area" value="[% area | html %]" />
604
                        <input type="hidden" name="area" value="[% area | html %]" />
601
                        <input type="hidden" name="type" value="[% type | html %]" />
605
                        <input type="hidden" name="type" value="[% type | html %]" />
602
                        <input type="hidden" name="column" value="[% column | html %]" />
606
                        <input type="hidden" name="column" value="[% column | html %]" />
Lines 685-690 Link Here
685
                    <h1>Build a report</h1>
689
                    <h1>Build a report</h1>
686
                    <h3>Step 5 of 6: Pick which columns to total</h3>
690
                    <h3>Step 5 of 6: Pick which columns to total</h3>
687
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
691
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
692
                        [% INCLUDE 'csrf-token.inc' %]
688
                        <input type="hidden" name="area" value="[% area | html %]" />
693
                        <input type="hidden" name="area" value="[% area | html %]" />
689
                        <input type="hidden" name="type" value="[% type | html %]" />
694
                        <input type="hidden" name="type" value="[% type | html %]" />
690
                        <input type="hidden" name="column" value="[% column | html %]" />
695
                        <input type="hidden" name="column" value="[% column | html %]" />
Lines 723-728 Link Here
723
                    <h1>Build a report</h1>
728
                    <h1>Build a report</h1>
724
                    <h3>Step 6 of 6: Choose how you want the report ordered</h3>
729
                    <h3>Step 6 of 6: Choose how you want the report ordered</h3>
725
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
730
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
731
                        [% INCLUDE 'csrf-token.inc' %]
726
                        <input type="hidden" name="area" value="[% area | html %]" />
732
                        <input type="hidden" name="area" value="[% area | html %]" />
727
                        <input type="hidden" name="type" value="[% type | html %]" />
733
                        <input type="hidden" name="type" value="[% type | html %]" />
728
                        <input type="hidden" name="column" value="[% column | html %]" />
734
                        <input type="hidden" name="column" value="[% column | html %]" />
Lines 765-770 Link Here
765
                    </p>
771
                    </p>
766
772
767
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
773
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
774
                        [% INCLUDE 'csrf-token.inc' %]
768
                        <input type="hidden" name="sql" value="[% sql | html %]" />
775
                        <input type="hidden" name="sql" value="[% sql | html %]" />
769
                        <input type="hidden" name="type" value="[% type | html %]" />
776
                        <input type="hidden" name="type" value="[% type | html %]" />
770
                        <input type="hidden" name="public" value="[% public | html %]" />
777
                        <input type="hidden" name="public" value="[% public | html %]" />
Lines 778-783 Link Here
778
785
779
                [% IF ( save ) %]
786
                [% IF ( save ) %]
780
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" id="sql_report_form">
787
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" id="sql_report_form">
788
                        [% INCLUDE 'csrf-token.inc' %]
781
                        <input type="hidden" name="sql" value="[% sql | html %]" />
789
                        <input type="hidden" name="sql" value="[% sql | html %]" />
782
                        <input type="hidden" name="type" value="[% type | html %]" />
790
                        <input type="hidden" name="type" value="[% type | html %]" />
783
                        <input type="hidden" name="area" value="[% area | html %]" />
791
                        <input type="hidden" name="area" value="[% area | html %]" />
Lines 933-938 Link Here
933
                        [% IF ( execute ) %]
941
                        [% IF ( execute ) %]
934
                            [% UNLESS ( errors ) %]
942
                            [% UNLESS ( errors ) %]
935
                                <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batch_record_modification.pl" id="batch_record_modification" target="_blank">
943
                                <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batch_record_modification.pl" id="batch_record_modification" target="_blank">
944
                                    [% INCLUDE 'csrf-token.inc' %]
936
                                    <input type="hidden" name="recordtype" value="biblio" />
945
                                    <input type="hidden" name="recordtype" value="biblio" />
937
                                    <input type="hidden" name="op" value="list" />
946
                                    <input type="hidden" name="op" value="list" />
938
                                    [% # Preserve the whitespace of the following textarea in order to format the values correctly %]
947
                                    [% # Preserve the whitespace of the following textarea in order to format the values correctly %]
Lines 942-947 Link Here
942
                                </form>
951
                                </form>
943
952
944
                                <form method="POST" action="/cgi-bin/koha/tools/batch_delete_records.pl" id="batch_record_deletion" target="_blank">
953
                                <form method="POST" action="/cgi-bin/koha/tools/batch_delete_records.pl" id="batch_record_deletion" target="_blank">
954
                                    [% INCLUDE 'csrf-token.inc' %]
945
                                    <input type="hidden" name="recordtype" value="biblio" />
955
                                    <input type="hidden" name="recordtype" value="biblio" />
946
                                    <input type="hidden" name="op" value="list" />
956
                                    <input type="hidden" name="op" value="list" />
947
                                    [% # Preserve the whitespace of the following textarea in order to format the values correctly %]
957
                                    [% # Preserve the whitespace of the following textarea in order to format the values correctly %]
Lines 951-956 Link Here
951
                                </form>
961
                                </form>
952
962
953
                                <form method="POST" action="/cgi-bin/koha/tools/batchMod.pl" id="batch_item_modification" target="_blank">
963
                                <form method="POST" action="/cgi-bin/koha/tools/batchMod.pl" id="batch_item_modification" target="_blank">
964
                                    [% INCLUDE 'csrf-token.inc' %]
954
                                    <input type="hidden" name="op" value="show" />
965
                                    <input type="hidden" name="op" value="show" />
955
                                    [% FOREACH result IN results %]
966
                                    [% FOREACH result IN results %]
956
                                        [% FOREACH cells IN result.cells %]
967
                                        [% FOREACH cells IN result.cells %]
Lines 966-971 Link Here
966
                                </form>
977
                                </form>
967
978
968
                                <form method="POST" action="/cgi-bin/koha/tools/batchMod.pl" id="batch_item_deletion" target="_blank">
979
                                <form method="POST" action="/cgi-bin/koha/tools/batchMod.pl" id="batch_item_deletion" target="_blank">
980
                                    [% INCLUDE 'csrf-token.inc' %]
969
                                    <input type="hidden" name="op" value="show" />
981
                                    <input type="hidden" name="op" value="show" />
970
                                    <input type="hidden" name="del" value="1" />
982
                                    <input type="hidden" name="del" value="1" />
971
                                    [% FOREACH result IN results %]
983
                                    [% FOREACH result IN results %]
Lines 996-1001 Link Here
996
                                </form>
1008
                                </form>
997
1009
998
                                <form method="POST" action="/cgi-bin/koha/tools/modborrowers.pl" id="batch_patron_modification" target="_blank">
1010
                                <form method="POST" action="/cgi-bin/koha/tools/modborrowers.pl" id="batch_patron_modification" target="_blank">
1011
                                    [% INCLUDE 'csrf-token.inc' %]
999
                                    <input type="hidden" name="op" value="show" />
1012
                                    <input type="hidden" name="op" value="show" />
1000
                                    [% # Preserve the whitespace of the following textarea in order to format the values correctly %]
1013
                                    [% # Preserve the whitespace of the following textarea in order to format the values correctly %]
1001
                                    <textarea style="display:none" name="cardnumberlist" id="cardnumberlist">
1014
                                    <textarea style="display:none" name="cardnumberlist" id="cardnumberlist">
Lines 1201-1206 Link Here
1201
                [% IF ( create ) %]
1214
                [% IF ( create ) %]
1202
                    <h1>Create from SQL</h1>
1215
                    <h1>Create from SQL</h1>
1203
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" id="sql_report_form">
1216
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" id="sql_report_form">
1217
                        [% INCLUDE 'csrf-token.inc' %]
1204
                        <fieldset class="rows">
1218
                        <fieldset class="rows">
1205
                            <legend>Create report from SQL</legend>
1219
                            <legend>Create report from SQL</legend>
1206
                            <ol>
1220
                            <ol>
Lines 1319-1324 Link Here
1319
1333
1320
                [% IF ( editsql ) %]
1334
                [% IF ( editsql ) %]
1321
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" id="sql_report_form">
1335
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" id="sql_report_form">
1336
                        [% INCLUDE 'csrf-token.inc' %]
1322
                        <input type="hidden" name="id" value="[% id | html %]"/>
1337
                        <input type="hidden" name="id" value="[% id | html %]"/>
1323
                        <fieldset class="rows">
1338
                        <fieldset class="rows">
1324
                            <legend><h1>Edit SQL report</h1></legend>
1339
                            <legend><h1>Edit SQL report</h1></legend>
Lines 1385-1390 Link Here
1385
1400
1386
                [% IF ( errors ) %]
1401
                [% IF ( errors ) %]
1387
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
1402
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
1403
                        [% INCLUDE 'csrf-token.inc' %]
1388
                        <div class="dialog alert">
1404
                        <div class="dialog alert">
1389
                            <strong>The following error was encountered:</strong><br />
1405
                            <strong>The following error was encountered:</strong><br />
1390
                            [% FOREACH error IN errors %]
1406
                            [% FOREACH error IN errors %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/issues_avg_stats.tt (+1 lines)
Lines 87-92 Link Here
87
[% ELSE %]
87
[% ELSE %]
88
88
89
	<form method="post" action="/cgi-bin/koha/reports/issues_avg_stats.pl">
89
	<form method="post" action="/cgi-bin/koha/reports/issues_avg_stats.pl">
90
	    [% INCLUDE 'csrf-token.inc' %]
90
	<fieldset class="rows">
91
	<fieldset class="rows">
91
	<legend>Average checkout period statistics</legend>
92
	<legend>Average checkout period statistics</legend>
92
	<table>
93
	<table>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/issues_stats.tt (+1 lines)
Lines 113-118 Link Here
113
[% ELSE %]
113
[% ELSE %]
114
114
115
    <form method="post" action="/cgi-bin/koha/reports/issues_stats.pl">
115
    <form method="post" action="/cgi-bin/koha/reports/issues_stats.pl">
116
        [% INCLUDE 'csrf-token.inc' %]
116
    <fieldset class="rows">
117
    <fieldset class="rows">
117
	<legend>Circulation statistics</legend><table>
118
	<legend>Circulation statistics</legend><table>
118
        <thead>
119
        <thead>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/itemslost.tt (+1 lines)
Lines 142-147 Link Here
142
	[% ELSE %]
142
	[% ELSE %]
143
	
143
	
144
	<form name="f" action="/cgi-bin/koha/reports/itemslost.pl" method="post">
144
	<form name="f" action="/cgi-bin/koha/reports/itemslost.pl" method="post">
145
	    [% INCLUDE 'csrf-token.inc' %]
145
    <fieldset class="rows">
146
    <fieldset class="rows">
146
        <ol>
147
        <ol>
147
148
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/itemtypes.tt (+1 lines)
Lines 75-80 Link Here
75
[% ELSE %]
75
[% ELSE %]
76
        <h1>View a count of items held at your library grouped by item type</h1>
76
        <h1>View a count of items held at your library grouped by item type</h1>
77
        <form method="post" action="/cgi-bin/koha/reports/manager.pl?report_name=itemtypes">
77
        <form method="post" action="/cgi-bin/koha/reports/manager.pl?report_name=itemtypes">
78
            [% INCLUDE 'csrf-token.inc' %]
78
          <fieldset class="rows">
79
          <fieldset class="rows">
79
            <ol>
80
            <ol>
80
              <li>
81
              <li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/orders_by_budget.tt (+1 lines)
Lines 100-105 Link Here
100
    [% END %]
100
    [% END %]
101
    [% ELSE %]
101
    [% ELSE %]
102
        <form name="f" action="/cgi-bin/koha/reports/orders_by_fund.pl" method="post">
102
        <form name="f" action="/cgi-bin/koha/reports/orders_by_fund.pl" method="post">
103
            [% INCLUDE 'csrf-token.inc' %]
103
        <fieldset class="rows">
104
        <fieldset class="rows">
104
        <legend>Filters</legend>
105
        <legend>Filters</legend>
105
        <ol><li><label for="budgetfilter">Fund: </label>
106
        <ol><li><label for="budgetfilter">Fund: </label>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/reserves_stats.tt (+1 lines)
Lines 99-104 Link Here
99
[% ELSE %]
99
[% ELSE %]
100
100
101
    <form method="post" action="/cgi-bin/koha/reports/reserves_stats.pl">
101
    <form method="post" action="/cgi-bin/koha/reports/reserves_stats.pl">
102
        [% INCLUDE 'csrf-token.inc' %]
102
    <fieldset class="rows">
103
    <fieldset class="rows">
103
	<legend>Holds statistics</legend><table>
104
	<legend>Holds statistics</legend><table>
104
        <thead>
105
        <thead>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/serials_stats.tt (+1 lines)
Lines 86-91 Link Here
86
86
87
[% ELSE %]
87
[% ELSE %]
88
	<form method="post" action="/cgi-bin/koha/reports/serials_stats.pl">
88
	<form method="post" action="/cgi-bin/koha/reports/serials_stats.pl">
89
	    [% INCLUDE 'csrf-token.inc' %]
89
90
90
	<fieldset class="rows">
91
	<fieldset class="rows">
91
		<ol>
92
		<ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reserve/request.tt (+5 lines)
Lines 173-178 Link Here
173
                    <p>Hold placed by : <strong> [% nextreservsurname | html %] [% nextreservfirstname | html %]</strong> at : <strong> [% branchname | html %] </strong>, Please transfer this item.
173
                    <p>Hold placed by : <strong> [% nextreservsurname | html %] [% nextreservfirstname | html %]</strong> at : <strong> [% branchname | html %] </strong>, Please transfer this item.
174
                    </p>
174
                    </p>
175
                    <form name="cancelReservewithtransfert" action="branchreserves.pl" method="post">
175
                    <form name="cancelReservewithtransfert" action="branchreserves.pl" method="post">
176
                        [% INCLUDE 'csrf-token.inc' %]
176
                        <input type="submit" class="button" />
177
                        <input type="submit" class="button" />
177
                    </form>
178
                    </form>
178
                </div>
179
                </div>
Lines 234-239 Link Here
234
                            [% IF clubcount %]
235
                            [% IF clubcount %]
235
                                [% WRAPPER tab_panel tabname="holds_clubsearch_pane" %]
236
                                [% WRAPPER tab_panel tabname="holds_clubsearch_pane" %]
236
                                    <form id="holds_clubsearch" action="request.pl" method="post">
237
                                    <form id="holds_clubsearch" action="request.pl" method="post">
238
                                        [% INCLUDE 'csrf-token.inc' %]
237
                                        <div class="hint">Enter club ID or partial name:</div>
239
                                        <div class="hint">Enter club ID or partial name:</div>
238
                                        <input type="text" size="40" id="club" class="focus" name="findclub" autocomplete="off" />
240
                                        <input type="text" size="40" id="club" class="focus" name="findclub" autocomplete="off" />
239
                                        <input type="submit" class="btn btn-primary" value="Search" />
241
                                        <input type="submit" class="btn btn-primary" value="Search" />
Lines 256-261 Link Here
256
                <fieldset class="rows">
258
                <fieldset class="rows">
257
                    <legend>Hold details</legend>
259
                    <legend>Hold details</legend>
258
                    <form action="/api/v1/clubs/[% club.id | html %]/holds" method="post" name="form" id="club-request-form">
260
                    <form action="/api/v1/clubs/[% club.id | html %]/holds" method="post" name="form" id="club-request-form">
261
                        [% INCLUDE 'csrf-token.inc' %]
259
262
260
                        [% IF ( multi_hold ) %]
263
                        [% IF ( multi_hold ) %]
261
                            <input type="hidden" name="request" value="any"/>
264
                            <input type="hidden" name="request" value="any"/>
Lines 501-506 Link Here
501
                <fieldset class="rows">
504
                <fieldset class="rows">
502
                    <legend>Hold details</legend>
505
                    <legend>Hold details</legend>
503
                    <form action="placerequest.pl" method="post" name="form" id="hold-request-form">
506
                    <form action="placerequest.pl" method="post" name="form" id="hold-request-form">
507
                        [% INCLUDE 'csrf-token.inc' %]
504
508
505
                        <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
509
                        <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
506
                        [% FOREACH biblionumber IN biblionumbers %]
510
                        [% FOREACH biblionumber IN biblionumbers %]
Lines 1056-1061 Link Here
1056
                [% END %]
1060
                [% END %]
1057
                [% IF ( reserveloop ) %]
1061
                [% IF ( reserveloop ) %]
1058
                    <form id="existing_holds" name="T[% time | html %]" action="modrequest.pl" method="post" style="display:block">
1062
                    <form id="existing_holds" name="T[% time | html %]" action="modrequest.pl" method="post" style="display:block">
1063
                        [% INCLUDE 'csrf-token.inc' %]
1059
                        [% IF ( multi_hold ) %]
1064
                        [% IF ( multi_hold ) %]
1060
                            [% FOREACH biblionumber IN biblionumbers %]
1065
                            [% FOREACH biblionumber IN biblionumbers %]
1061
                            <input type="hidden" name="biblionumber" value="[% biblionumber | html %]"/>
1066
                            <input type="hidden" name="biblionumber" value="[% biblionumber | html %]"/>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/rotating_collections/addItems.tt (+1 lines)
Lines 90-95 Link Here
90
90
91
              <div>
91
              <div>
92
                <form action="addItems.pl" method="post">
92
                <form action="addItems.pl" method="post">
93
                    [% INCLUDE 'csrf-token.inc' %]
93
                    <fieldset class="brief">
94
                    <fieldset class="brief">
94
                        <legend>Add or remove items</legend>
95
                        <legend>Add or remove items</legend>
95
                        <ol>
96
                        <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/rotating_collections/editCollections.tt (+1 lines)
Lines 123-128 Link Here
123
                    [% END %]
123
                    [% END %]
124
124
125
                    <form action="editCollections.pl" method="post" class="validated">
125
                    <form action="editCollections.pl" method="post" class="validated">
126
                        [% INCLUDE 'csrf-token.inc' %]
126
                        [% IF ( previousActionEdit ) %]
127
                        [% IF ( previousActionEdit ) %]
127
                            <input type="hidden" name="action" value="update" />
128
                            <input type="hidden" name="action" value="update" />
128
                            <input type="hidden" name="colId" value="[% editColId | html %]" />
129
                            <input type="hidden" name="colId" value="[% editColId | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/rotating_collections/transferCollection.tt (+1 lines)
Lines 71-76 Link Here
71
                [% ELSE %]
71
                [% ELSE %]
72
                    <div>
72
                    <div>
73
                        <form action="transferCollection.pl" method="post">
73
                        <form action="transferCollection.pl" method="post">
74
                            [% INCLUDE 'csrf-token.inc' %]
74
                            <input type="hidden" name="colId" value="[% colId | html %]" />
75
                            <input type="hidden" name="colId" value="[% colId | html %]" />
75
                            <fieldset class="rows">
76
                            <fieldset class="rows">
76
                                <ol>
77
                                <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/acqui-search.tt (+1 lines)
Lines 9-14 Link Here
9
9
10
<h1>Serial subscription: search for vendor </h1>
10
<h1>Serial subscription: search for vendor </h1>
11
    <form action="/cgi-bin/koha/serials/acqui-search-result.pl" method="post">
11
    <form action="/cgi-bin/koha/serials/acqui-search-result.pl" method="post">
12
        [% INCLUDE 'csrf-token.inc' %]
12
        <label for="text">Vendor name: </label>
13
        <label for="text">Vendor name: </label>
13
        <input id="text" type="text"  size="25" name="supplier" autofocus="autofocus" />
14
        <input id="text" type="text"  size="25" name="supplier" autofocus="autofocus" />
14
        <input type="submit" class="btn btn-primary" value="OK" />
15
        <input type="submit" class="btn btn-primary" value="OK" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/claims.tt (+2 lines)
Lines 77-82 Link Here
77
                [% END %]
77
                [% END %]
78
78
79
                <form id="claims" name="claims" action="claims.pl" method="post">
79
                <form id="claims" name="claims" action="claims.pl" method="post">
80
                    [% INCLUDE 'csrf-token.inc' %]
80
                    <fieldset>
81
                    <fieldset>
81
                        <label for="supplierid">Vendor: </label>
82
                        <label for="supplierid">Vendor: </label>
82
                        <select id="supplierid" name="supplierid">
83
                        <select id="supplierid" name="supplierid">
Lines 116-121 Link Here
116
117
117
                    <fieldset>
118
                    <fieldset>
118
                        <form action="claims.pl" method="post" id="claims_form">
119
                        <form action="claims.pl" method="post" id="claims_form">
120
                            [% INCLUDE 'csrf-token.inc' %]
119
                            <table id="claimst">
121
                            <table id="claimst">
120
                                <thead>
122
                                <thead>
121
                                    <tr>
123
                                    <tr>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/routing-preview.tt (+1 lines)
Lines 32-37 Link Here
32
<h1>Preview routing list for <em>[% title | html %]</em></h1>
32
<h1>Preview routing list for <em>[% title | html %]</em></h1>
33
33
34
<form method="post" action="routing-preview.pl">
34
<form method="post" action="routing-preview.pl">
35
    [% INCLUDE 'csrf-token.inc' %]
35
<input type="hidden" id="subscriptionid" name="subscriptionid" value="[% subscriptionid | html %]" />
36
<input type="hidden" id="subscriptionid" name="subscriptionid" value="[% subscriptionid | html %]" />
36
    <input type="hidden" id="issue_escaped" name="issue_escaped" value="[% issue_escaped | html %]" />
37
    <input type="hidden" id="issue_escaped" name="issue_escaped" value="[% issue_escaped | html %]" />
37
<fieldset class="rows">
38
<fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/routing.tt (+1 lines)
Lines 43-48 Link Here
43
43
44
[% INCLUDE 'blocking_errors.inc' %]
44
[% INCLUDE 'blocking_errors.inc' %]
45
<form method="post" action="routing.pl">
45
<form method="post" action="routing.pl">
46
    [% INCLUDE 'csrf-token.inc' %]
46
<input type="hidden" name="op" value="save" />
47
<input type="hidden" name="op" value="save" />
47
<input type="hidden" name="subscriptionid" value="[% subscriptionid | html %]" />
48
<input type="hidden" name="subscriptionid" value="[% subscriptionid | html %]" />
48
<fieldset class="rows">
49
<fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/serials-collection.tt (+1 lines)
Lines 143-148 Link Here
143
143
144
                [% IF ( years ) %]
144
                [% IF ( years ) %]
145
                    <form name="edition" action="/cgi-bin/koha/serials/serials-edit.pl" method="post">
145
                    <form name="edition" action="/cgi-bin/koha/serials/serials-edit.pl" method="post">
146
                        [% INCLUDE 'csrf-token.inc' %]
146
                        [% WRAPPER tabs id= "subscription_years" %]
147
                        [% WRAPPER tabs id= "subscription_years" %]
147
                            [% WRAPPER tabs_nav %]
148
                            [% WRAPPER tabs_nav %]
148
                                [% FOREACH year IN years %]
149
                                [% FOREACH year IN years %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/serials-edit.tt (+1 lines)
Lines 109-114 $(document).ready(function() { Link Here
109
109
110
[% IF internalnotes %]<p>Nonpublic note: [% internalnotes | html | html_line_break %]</p>[% END %]
110
[% IF internalnotes %]<p>Nonpublic note: [% internalnotes | html | html_line_break %]</p>[% END %]
111
<form method="post" name="f" class="noEnterSubmit" action="serials-edit.pl" id="serials_edit">
111
<form method="post" name="f" class="noEnterSubmit" action="serials-edit.pl" id="serials_edit">
112
    [% INCLUDE 'csrf-token.inc' %]
112
113
113
[% IF ( Errors ) %]
114
[% IF ( Errors ) %]
114
<div class="dialog alert">
115
<div class="dialog alert">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/serials-search.tt (+1 lines)
Lines 46-51 Link Here
46
46
47
    [% BLOCK subscriptions_table %]
47
    [% BLOCK subscriptions_table %]
48
        <form method="post">
48
        <form method="post">
49
            [% INCLUDE 'csrf-token.inc' %]
49
            [% IF closed %]
50
            [% IF closed %]
50
                [% SET tab = 'closed' %]
51
                [% SET tab = 'closed' %]
51
            [% ELSE %]
52
            [% ELSE %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-add.tt (+1 lines)
Lines 55-60 fieldset.rows table { clear: none; margin: 0; } Link Here
55
        </div>
55
        </div>
56
    </div>
56
    </div>
57
    <form method="post" id="subscription_add_form" name="f" action="/cgi-bin/koha/serials/subscription-add.pl" class="validated">
57
    <form method="post" id="subscription_add_form" name="f" action="/cgi-bin/koha/serials/subscription-add.pl" class="validated">
58
        [% INCLUDE 'csrf-token.inc' %]
58
                <div class="row" id="page_1">
59
                <div class="row" id="page_1">
59
                    <div class="col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2">
60
                    <div class="col-md-10 col-md-offset-1 col-lg-8 col-lg-offset-2">
60
                        [% IF ( modify ) %]
61
                        [% IF ( modify ) %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-batchedit.tt (+1 lines)
Lines 76-81 Link Here
76
                    </div>
76
                    </div>
77
77
78
                    <form method="post">
78
                    <form method="post">
79
                        [% INCLUDE 'csrf-token.inc' %]
79
                        [% FOREACH subscription IN subscriptions %]
80
                        [% FOREACH subscription IN subscriptions %]
80
                            <input type="hidden" name="subscriptionid" value="[% subscription.subscriptionid | html %]"/>
81
                            <input type="hidden" name="subscriptionid" value="[% subscription.subscriptionid | html %]"/>
81
                        [% END %]
82
                        [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-detail.tt (+1 lines)
Lines 61-66 Link Here
61
                        </ul>
61
                        </ul>
62
62
63
                        <form method="post" action="/cgi-bin/koha/serials/subscription-detail.pl">
63
                        <form method="post" action="/cgi-bin/koha/serials/subscription-detail.pl">
64
                            [% INCLUDE 'csrf-token.inc' %]
64
                            <input type="hidden" name="subscriptionid" value="[% subscriptionid | html %]" />
65
                            <input type="hidden" name="subscriptionid" value="[% subscriptionid | html %]" />
65
                            <input type="hidden" name="issueconfirmed" value="1" />
66
                            <input type="hidden" name="issueconfirmed" value="1" />
66
                            <input type="hidden" name="op" value="del" />
67
                            <input type="hidden" name="op" value="del" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-frequencies.tt (+1 lines)
Lines 42-47 Link Here
42
          <h1>Edit frequency: [% description | html %]</h1>
42
          <h1>Edit frequency: [% description | html %]</h1>
43
        [% END %]
43
        [% END %]
44
        <form action="/cgi-bin/koha/serials/subscription-frequencies.pl" id="add_frequency_form" method="post">
44
        <form action="/cgi-bin/koha/serials/subscription-frequencies.pl" id="add_frequency_form" method="post">
45
            [% INCLUDE 'csrf-token.inc' %]
45
          [% IF (modify) %]
46
          [% IF (modify) %]
46
            <input type="hidden" name="id" value="[% id | html %]" />
47
            <input type="hidden" name="id" value="[% id | html %]" />
47
            <input type="hidden" name="op" value="savemod" />
48
            <input type="hidden" name="op" value="savemod" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-history.tt (+1 lines)
Lines 34-39 Link Here
34
34
35
        <div id="subscription_form_history">
35
        <div id="subscription_form_history">
36
          <form method="post" action="/cgi-bin/koha/serials/subscription-history.pl">
36
          <form method="post" action="/cgi-bin/koha/serials/subscription-history.pl">
37
              [% INCLUDE 'csrf-token.inc' %]
37
            <input type="hidden" name="op" value="mod" />
38
            <input type="hidden" name="op" value="mod" />
38
            <input type="hidden" name="subscriptionid" value="[% subscriptionid | html %]" />
39
            <input type="hidden" name="subscriptionid" value="[% subscriptionid | html %]" />
39
            <p>Hint : you can update the serial history manually. This can be useful for an old subscription or to clean the existing history. Modify those fields with care, as future serial receive will continue to update them automatically.</p>
40
            <p>Hint : you can update the serial history manually. This can be useful for an old subscription or to clean the existing history. Modify those fields with care, as future serial receive will continue to update them automatically.</p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-numberpatterns.tt (+1 lines)
Lines 60-65 Link Here
60
          [% END %]
60
          [% END %]
61
61
62
          <form action="/cgi-bin/koha/serials/subscription-numberpatterns.pl" method="post">
62
          <form action="/cgi-bin/koha/serials/subscription-numberpatterns.pl" method="post">
63
              [% INCLUDE 'csrf-token.inc' %]
63
            [% IF (new) %]
64
            [% IF (new) %]
64
              <input type="hidden" name="op" value="savenew" />
65
              <input type="hidden" name="op" value="savenew" />
65
            [% ELSE %]
66
            [% ELSE %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-renew.tt (+1 lines)
Lines 30-35 Link Here
30
[% ELSE %]
30
[% ELSE %]
31
31
32
<form name="f" action="/cgi-bin/koha/serials/subscription-renew.pl" method="post">
32
<form name="f" action="/cgi-bin/koha/serials/subscription-renew.pl" method="post">
33
    [% INCLUDE 'csrf-token.inc' %]
33
		<input type="hidden" name="op" value="renew" />
34
		<input type="hidden" name="op" value="renew" />
34
		<input type="hidden" name="subscriptionid" value="[% subscription.subscriptionid | html %]" />
35
		<input type="hidden" name="subscriptionid" value="[% subscription.subscriptionid | html %]" />
35
		<fieldset class="rows"><legend>Subscription renewal for [% subscription.bibliotitle | html %]</legend>
36
		<fieldset class="rows"><legend>Subscription renewal for [% subscription.bibliotitle | html %]</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/suggestion/suggestion.tt (+2 lines)
Lines 338-343 Link Here
338
            [% END %]
338
            [% END %]
339
339
340
            <form id="add_edit" action="suggestion.pl" method="post" class="validated">
340
            <form id="add_edit" action="suggestion.pl" method="post" class="validated">
341
                [% INCLUDE 'csrf-token.inc' %]
341
                [% INCLUDE 'csrf-token.inc' %]
342
                [% INCLUDE 'csrf-token.inc' %]
342
                <input type="hidden" name="redirect" id="redirect" value="[% redirect | html %]" />
343
                <input type="hidden" name="redirect" id="redirect" value="[% redirect | html %]" />
343
                <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% borrowernumber | html %]" />
344
                <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% borrowernumber | html %]" />
Lines 711-716 Link Here
711
                    [% FOREACH suggestion IN suggestions %]
712
                    [% FOREACH suggestion IN suggestions %]
712
                        [% WRAPPER tab_panel tabname= suggestion.suggestiontype %]
713
                        [% WRAPPER tab_panel tabname= suggestion.suggestiontype %]
713
                            <form class="update_suggestions" name="f" method="post" action="/cgi-bin/koha/suggestion/suggestion.pl#[% suggestion.suggestiontype| uri %]">
714
                            <form class="update_suggestions" name="f" method="post" action="/cgi-bin/koha/suggestion/suggestion.pl#[% suggestion.suggestiontype| uri %]">
715
                                [% INCLUDE 'csrf-token.inc' %]
714
                            [% INCLUDE 'csrf-token.inc' %]
716
                            [% INCLUDE 'csrf-token.inc' %]
715
717
716
                                [% IF suggestion.suggestions.size %]
718
                                [% IF suggestion.suggestions.size %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tags/review.tt (+3 lines)
Lines 40-45 tr > td input,td input[type="submit"] { font-size: 85%; padding: 1px; } Link Here
40
<div class="col-sm-8 col-sm-push-2">
40
<div class="col-sm-8 col-sm-push-2">
41
<h1>Tags</h1>
41
<h1>Tags</h1>
42
<form method="post" action="/cgi-bin/koha/tags/review.pl">
42
<form method="post" action="/cgi-bin/koha/tags/review.pl">
43
    [% INCLUDE 'csrf-token.inc' %]
43
    <h4>
44
    <h4>
44
    [% IF ( filter_approved_all ) %]<span>Displaying all terms</span>[% END %]
45
    [% IF ( filter_approved_all ) %]<span>Displaying all terms</span>[% END %]
45
    [% IF ( filter_approved_ok ) %]<span>Displaying approved terms</span>[% END %]
46
    [% IF ( filter_approved_ok ) %]<span>Displaying approved terms</span>[% END %]
Lines 186-191 tr > td input,td input[type="submit"] { font-size: 85%; padding: 1px; } Link Here
186
   <h4>Check lists</h4>
187
   <h4>Check lists</h4>
187
   <div class="description">Enter a word or phrase to check against approved/rejected lists: </div>
188
   <div class="description">Enter a word or phrase to check against approved/rejected lists: </div>
188
   <form method="post" action="/cgi-bin/koha/tags/review.pl">
189
   <form method="post" action="/cgi-bin/koha/tags/review.pl">
190
       [% INCLUDE 'csrf-token.inc' %]
189
   <input type="text" size="14" name="test" id="test" />
191
   <input type="text" size="14" name="test" id="test" />
190
   <fieldset class="action"><button type="submit" value="Test" class="approval_btn btn btn-default btn-sm" id="test_button" name="op-test"><i class="fas fa-check-square" aria-hidden="true"></i> Test</button></fieldset>
192
   <fieldset class="action"><button type="submit" value="Test" class="approval_btn btn btn-default btn-sm" id="test_button" name="op-test"><i class="fas fa-check-square" aria-hidden="true"></i> Test</button></fieldset>
191
   <div id="verdict">
193
   <div id="verdict">
Lines 206-211 tr > td input,td input[type="submit"] { font-size: 85%; padding: 1px; } Link Here
206
<div class="col-sm-2 col-sm-pull-10">
208
<div class="col-sm-2 col-sm-pull-10">
207
    <aside>
209
    <aside>
208
<form method="post" action="/cgi-bin/koha/tags/review.pl">
210
<form method="post" action="/cgi-bin/koha/tags/review.pl">
211
    [% INCLUDE 'csrf-token.inc' %]
209
<fieldset class="brief">
212
<fieldset class="brief">
210
  <h4>Filters</h4>
213
  <h4>Filters</h4>
211
	<ol>
214
	<ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/additional-contents.tt (+3 lines)
Lines 201-206 Link Here
201
    </div>
201
    </div>
202
202
203
    <form id="add_additional_content" method="post" action="/cgi-bin/koha/tools/additional-contents.pl" class="validate">
203
    <form id="add_additional_content" method="post" action="/cgi-bin/koha/tools/additional-contents.pl" class="validate">
204
        [% INCLUDE 'csrf-token.inc' %]
204
        [% INCLUDE 'csrf-token.inc' %]
205
        [% INCLUDE 'csrf-token.inc' %]
205
        <input type="hidden" name="op" value="add_validate" />
206
        <input type="hidden" name="op" value="add_validate" />
206
        <input type="hidden" name="category" value="[% category | html %]" />
207
        <input type="hidden" name="category" value="[% category | html %]" />
Lines 342-347 Link Here
342
    [% IF additional_contents.count %]
343
    [% IF additional_contents.count %]
343
        <div class="page-section">
344
        <div class="page-section">
344
            <form id="del_form" method="post" action="/cgi-bin/koha/tools/additional-contents.pl">
345
            <form id="del_form" method="post" action="/cgi-bin/koha/tools/additional-contents.pl">
346
                [% INCLUDE 'csrf-token.inc' %]
345
                <table id="table_additional_contents">
347
                <table id="table_additional_contents">
346
                    <thead>
348
                    <thead>
347
                        <tr>
349
                        <tr>
Lines 455-460 Link Here
455
                <fieldset class="action"><input type="submit" class="btn btn-primary" value="Delete selected" /></fieldset>
457
                <fieldset class="action"><input type="submit" class="btn btn-primary" value="Delete selected" /></fieldset>
456
            </form>
458
            </form>
457
            <form action="/cgi-bin/koha/tools/additional-contents.pl" method="post" id="delete_single">
459
            <form action="/cgi-bin/koha/tools/additional-contents.pl" method="post" id="delete_single">
460
                [% INCLUDE 'csrf-token.inc' %]
458
                [% INCLUDE 'csrf-token.inc' %]
461
                [% INCLUDE 'csrf-token.inc' %]
459
                <input type="hidden" id="del_op" name="op" value="delete_confirmed" />
462
                <input type="hidden" id="del_op" name="op" value="delete_confirmed" />
460
                <input type="hidden" id="del_category" name="category" value="[% category | html %]" />
463
                <input type="hidden" id="del_category" name="category" value="[% category | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/automatic_item_modification_by_age.tt (+1 lines)
Lines 39-44 Link Here
39
39
40
        [% IF ( op == 'edit_form' ) %]
40
        [% IF ( op == 'edit_form' ) %]
41
          <form method="post" id="rules_form" action="/cgi-bin/koha/tools/automatic_item_modification_by_age.pl">
41
          <form method="post" id="rules_form" action="/cgi-bin/koha/tools/automatic_item_modification_by_age.pl">
42
              [% INCLUDE 'csrf-token.inc' %]
42
            <h1>Rules for automatic item modifications by age</h1>
43
            <h1>Rules for automatic item modifications by age</h1>
43
            <div id="toolbar" class="btn-toolbar">
44
            <div id="toolbar" class="btn-toolbar">
44
                <div class="btn-group">
45
                <div class="btn-group">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batchMod-del.tt (+1 lines)
Lines 105-110 Link Here
105
105
106
106
107
<form name="f" action="batchMod.pl" method="post">
107
<form name="f" action="batchMod.pl" method="post">
108
    [% INCLUDE 'csrf-token.inc' %]
108
     <input type="hidden" name="biblionumber" id="biblionumber" value="[% biblionumber | html %]" />
109
     <input type="hidden" name="biblionumber" id="biblionumber" value="[% biblionumber | html %]" />
109
     <input type="hidden" name="op" value="[% op | html %]" />
110
     <input type="hidden" name="op" value="[% op | html %]" />
110
     <input type="hidden" name="searchid" value="[% searchid | html %]" />
111
     <input type="hidden" name="searchid" value="[% searchid | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batchMod-edit.tt (+1 lines)
Lines 128-133 Link Here
128
128
129
129
130
        <form name="f" action="batchMod.pl" method="post">
130
        <form name="f" action="batchMod.pl" method="post">
131
            [% INCLUDE 'csrf-token.inc' %]
131
            <input type="hidden" name="op" value="[% op | html %]" />
132
            <input type="hidden" name="op" value="[% op | html %]" />
132
            <input type="hidden" name="searchid" value="[% searchid | html %]" />
133
            <input type="hidden" name="searchid" value="[% searchid | html %]" />
133
            <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
134
            <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batchMod.tt (+1 lines)
Lines 35-40 Link Here
35
35
36
                <h1>Batch item [% IF ( del ) %]deletion[% ELSE %]modification[% END %]</h1>
36
                <h1>Batch item [% IF ( del ) %]deletion[% ELSE %]modification[% END %]</h1>
37
                        <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batchMod.pl">
37
                        <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batchMod.pl">
38
                            [% INCLUDE 'csrf-token.inc' %]
38
                            <fieldset class="rows">
39
                            <fieldset class="rows">
39
                                <legend>Use a file</legend>
40
                                <legend>Use a file</legend>
40
                                  <ol>
41
                                  <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batch_delete_records.tt (+2 lines)
Lines 56-61 Link Here
56
  [% END %]
56
  [% END %]
57
  [% IF op == 'form' %]
57
  [% IF op == 'form' %]
58
    <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batch_delete_records.pl" id="record_ids_selection">
58
    <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batch_delete_records.pl" id="record_ids_selection">
59
        [% INCLUDE 'csrf-token.inc' %]
59
      <fieldset class="rows">
60
      <fieldset class="rows">
60
        <legend>Record type</legend>
61
        <legend>Record type</legend>
61
        <ol>
62
        <ol>
Lines 165-170 Link Here
165
          | <a id="clearlinkedtobiblio" href="#">Clear used authorities</a>
166
          | <a id="clearlinkedtobiblio" href="#">Clear used authorities</a>
166
        </div>
167
        </div>
167
        <form action="/cgi-bin/koha/tools/batch_delete_records.pl" method="post" id="selectauths">
168
        <form action="/cgi-bin/koha/tools/batch_delete_records.pl" method="post" id="selectauths">
169
            [% INCLUDE 'csrf-token.inc' %]
168
          <table id="authorities" class="records">
170
          <table id="authorities" class="records">
169
            <thead>
171
            <thead>
170
              <tr>
172
              <tr>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batch_extend_due_dates.tt (+2 lines)
Lines 58-63 Link Here
58
58
59
                    [% IF view == 'form' %]
59
                    [% IF view == 'form' %]
60
                        <form method="post" action="/cgi-bin/koha/tools/batch_extend_due_dates.pl" id="extend_due_dates_form">
60
                        <form method="post" action="/cgi-bin/koha/tools/batch_extend_due_dates.pl" id="extend_due_dates_form">
61
                            [% INCLUDE 'csrf-token.inc' %]
61
                            <fieldset class="rows">
62
                            <fieldset class="rows">
62
                                <legend>Checkout criteria:</legend>
63
                                <legend>Checkout criteria:</legend>
63
                                <ol>
64
                                <ol>
Lines 122-127 Link Here
122
                    [% ELSIF view == 'list' %]
123
                    [% ELSIF view == 'list' %]
123
                        [% IF checkouts.count %]
124
                        [% IF checkouts.count %]
124
                            <form action="/cgi-bin/koha/tools/batch_extend_due_dates.pl" method="post" id="process">
125
                            <form action="/cgi-bin/koha/tools/batch_extend_due_dates.pl" method="post" id="process">
126
                                [% INCLUDE 'csrf-token.inc' %]
125
                                <div class="page-section">
127
                                <div class="page-section">
126
                                    <div class="btn-toolbar selections-toolbar">
128
                                    <div class="btn-toolbar selections-toolbar">
127
                                        <a id="selectall" href="#"><i class="fa fa-check"></i> Select all</a>
129
                                        <a id="selectall" href="#"><i class="fa fa-check"></i> Select all</a>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batch_record_modification.tt (+2 lines)
Lines 71-76 Link Here
71
71
72
                    [% IF view == 'form' %]
72
                    [% IF view == 'form' %]
73
                        <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batch_record_modification.pl" id="record_ids_selection">
73
                        <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/batch_record_modification.pl" id="record_ids_selection">
74
                            [% INCLUDE 'csrf-token.inc' %]
74
                            <fieldset class="rows">
75
                            <fieldset class="rows">
75
                                <legend>Record type</legend>
76
                                <legend>Record type</legend>
76
                                <ol class="radio">
77
                                <ol class="radio">
Lines 153-158 Link Here
153
                    [% ELSIF view == 'list' %]
154
                    [% ELSIF view == 'list' %]
154
                        [% IF records %]
155
                        [% IF records %]
155
                            <form action="/cgi-bin/koha/tools/batch_record_modification.pl" method="post">
156
                            <form action="/cgi-bin/koha/tools/batch_record_modification.pl" method="post">
157
                                [% INCLUDE 'csrf-token.inc' %]
156
                                <label for="marc_modification_template_id" class="required">Modify record using the following template: </label>
158
                                <label for="marc_modification_template_id" class="required">Modify record using the following template: </label>
157
                                <select name="marc_modification_template_id" id="marc_modification_template_id" required="required">
159
                                <select name="marc_modification_template_id" id="marc_modification_template_id" required="required">
158
                                    <option value="">Select a template</option>
160
                                    <option value="">Select a template</option>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/cleanborrowers.tt (+2 lines)
Lines 95-100 Link Here
95
</div>
95
</div>
96
<div id="step1">
96
<div id="step1">
97
    <form name="f1" id="delete_patrons_form" action="/cgi-bin/koha/tools/cleanborrowers.pl" method="post">
97
    <form name="f1" id="delete_patrons_form" action="/cgi-bin/koha/tools/cleanborrowers.pl" method="post">
98
        [% INCLUDE 'csrf-token.inc' %]
98
    <fieldset>
99
    <fieldset>
99
    <legend>Delete patrons</legend>
100
    <legend>Delete patrons</legend>
100
        <h3><input id="checkborrower" type="checkbox" name="checkbox" value="borrower" /><label for="checkborrower"> Verify you want to delete patrons</label></h3>
101
        <h3><input id="checkborrower" type="checkbox" name="checkbox" value="borrower" /><label for="checkborrower"> Verify you want to delete patrons</label></h3>
Lines 172-177 Link Here
172
<!-- STEP 2 START -->
173
<!-- STEP 2 START -->
173
<div id="step2">
174
<div id="step2">
174
        <form name="f2" action="/cgi-bin/koha/tools/cleanborrowers.pl" method="post">
175
        <form name="f2" action="/cgi-bin/koha/tools/cleanborrowers.pl" method="post">
176
            [% INCLUDE 'csrf-token.inc' %]
175
177
176
        <div class="dialog alert">
178
        <div class="dialog alert">
177
            <h3>Warning</h3>
179
            <h3>Warning</h3>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/csv-profiles.tt (+2 lines)
Lines 137-142 Link Here
137
    [% END %]
137
    [% END %]
138
138
139
    <form action="/cgi-bin/koha/tools/csv-profiles.pl" class="validated" method="post">
139
    <form action="/cgi-bin/koha/tools/csv-profiles.pl" class="validated" method="post">
140
        [% INCLUDE 'csrf-token.inc' %]
140
        <input type="hidden" name="op" value="add_validate" />
141
        <input type="hidden" name="op" value="add_validate" />
141
        <input type="hidden" name="export_format_id" value="[% csv_profile.export_format_id | html %]" />
142
        <input type="hidden" name="export_format_id" value="[% csv_profile.export_format_id | html %]" />
142
        <fieldset class="rows">
143
        <fieldset class="rows">
Lines 265-270 Link Here
265
        [% IF csv_profile %]
266
        [% IF csv_profile %]
266
            <h1>Delete CSV Profile "[% csv_profile.profile | html %]?"</h1>
267
            <h1>Delete CSV Profile "[% csv_profile.profile | html %]?"</h1>
267
            <form action="/cgi-bin/koha/tools/csv-profiles.pl" method="post">
268
            <form action="/cgi-bin/koha/tools/csv-profiles.pl" method="post">
269
                [% INCLUDE 'csrf-token.inc' %]
268
                <input type="hidden" name="op" value="delete_confirmed" />
270
                <input type="hidden" name="op" value="delete_confirmed" />
269
                <input type="hidden" name="export_format_id" value="[% csv_profile.export_format_id | html %]" />
271
                <input type="hidden" name="export_format_id" value="[% csv_profile.export_format_id | html %]" />
270
                <input type="submit" class="approve" value="Yes, delete" />
272
                <input type="submit" class="approve" value="Yes, delete" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/export.tt (+4 lines)
Lines 63-68 Link Here
63
            </p>
63
            </p>
64
64
65
            <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/export.pl">
65
            <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/export.pl">
66
                [% INCLUDE 'csrf-token.inc' %]
66
                <fieldset class="rows">
67
                <fieldset class="rows">
67
                    <legend> Select records to export </legend>
68
                    <legend> Select records to export </legend>
68
                    <ol>
69
                    <ol>
Lines 193-198 Link Here
193
194
194
        [% WRAPPER tab_panel tabname="auths" %]
195
        [% WRAPPER tab_panel tabname="auths" %]
195
            <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/export.pl">
196
            <form method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/export.pl">
197
                [% INCLUDE 'csrf-token.inc' %]
196
                <fieldset class="rows">
198
                <fieldset class="rows">
197
                    <legend> Select records to export </legend>
199
                    <legend> Select records to export </legend>
198
                    <ol>
200
                    <ol>
Lines 268-273 Link Here
268
        [% IF ( allow_db_export ) %]
270
        [% IF ( allow_db_export ) %]
269
            [% WRAPPER tab_panel tabname="db" %]
271
            [% WRAPPER tab_panel tabname="db" %]
270
                <form method="post" class="clearfix" action="/cgi-bin/koha/tools/export.pl">
272
                <form method="post" class="clearfix" action="/cgi-bin/koha/tools/export.pl">
273
                    [% INCLUDE 'csrf-token.inc' %]
271
                    <p><strong>Note : This export file will be very large, and is generated nightly.</strong></p>
274
                    <p><strong>Note : This export file will be very large, and is generated nightly.</strong></p>
272
                    <fieldset class="rows">
275
                    <fieldset class="rows">
273
                        <legend> Choose a file </legend>
276
                        <legend> Choose a file </legend>
Lines 294-299 Link Here
294
        [% IF ( allow_conf_export ) %]
297
        [% IF ( allow_conf_export ) %]
295
            [% WRAPPER tab_panel tabname="conf" %]
298
            [% WRAPPER tab_panel tabname="conf" %]
296
                <form method="post" class="clearfix" action="/cgi-bin/koha/tools/export.pl">
299
                <form method="post" class="clearfix" action="/cgi-bin/koha/tools/export.pl">
300
                    [% INCLUDE 'csrf-token.inc' %]
297
                    <p><strong>Note : This export file will be very large, and is generated nightly.</strong></p>
301
                    <p><strong>Note : This export file will be very large, and is generated nightly.</strong></p>
298
                    <fieldset class="rows">
302
                    <fieldset class="rows">
299
                        <legend> Choose a file </legend>
303
                        <legend> Choose a file </legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/holidays.tt (+3 lines)
Lines 41-46 Link Here
41
41
42
                            <div class="panel" id="showHoliday">
42
                            <div class="panel" id="showHoliday">
43
                                <form action="/cgi-bin/koha/tools/exceptionHolidays.pl" method="post">
43
                                <form action="/cgi-bin/koha/tools/exceptionHolidays.pl" method="post">
44
                                    [% INCLUDE 'csrf-token.inc' %]
44
                                    <input type="hidden" id="showHolidayType" name="showHolidayType" value="" />
45
                                    <input type="hidden" id="showHolidayType" name="showHolidayType" value="" />
45
                                    <fieldset class="brief">
46
                                    <fieldset class="brief">
46
                                        <h3>Edit this holiday</h3>
47
                                        <h3>Edit this holiday</h3>
Lines 137-142 Link Here
137
                            <!-- Panel to deal with new holidays -->
138
                            <!-- Panel to deal with new holidays -->
138
                            <div class="panel" id="newHoliday">
139
                            <div class="panel" id="newHoliday">
139
                                <form action="/cgi-bin/koha/tools/newHolidays.pl" method="post">
140
                                <form action="/cgi-bin/koha/tools/newHolidays.pl" method="post">
141
                                    [% INCLUDE 'csrf-token.inc' %]
140
                                    <fieldset class="brief">
142
                                    <fieldset class="brief">
141
                                        <h3>Add new holiday</h3>
143
                                        <h3>Add new holiday</h3>
142
                                        <ol>
144
                                        <ol>
Lines 228-233 Link Here
228
                            </div>
230
                            </div>
229
                            <div style="margin-top: 2em;">
231
                            <div style="margin-top: 2em;">
230
                                <form action="copy-holidays.pl" method="post">
232
                                <form action="copy-holidays.pl" method="post">
233
                                    [% INCLUDE 'csrf-token.inc' %]
231
                                    <input type="hidden" name="from_branchcode" value="[% branch | html %]" />
234
                                    <input type="hidden" name="from_branchcode" value="[% branch | html %]" />
232
                                    <label for="branchcode">Copy holidays to:</label>
235
                                    <label for="branchcode">Copy holidays to:</label>
233
                                    <select id="branchcode" name="branchcode">
236
                                    <select id="branchcode" name="branchcode">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/import_borrowers.tt (+1 lines)
Lines 200-205 Link Here
200
    </ul>
200
    </ul>
201
201
202
    <form method="post" action="[% SCRIPT_NAME | html %]" enctype="multipart/form-data">
202
    <form method="post" action="[% SCRIPT_NAME | html %]" enctype="multipart/form-data">
203
        [% INCLUDE 'csrf-token.inc' %]
203
        <fieldset class="rows">
204
        <fieldset class="rows">
204
            <legend>Import into the borrowers table</legend>
205
            <legend>Import into the borrowers table</legend>
205
206
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/inventory.tt (+2 lines)
Lines 60-65 Link Here
60
       [% UNLESS op %]
60
       [% UNLESS op %]
61
61
62
    <form method="post" id="inventory_form" action="/cgi-bin/koha/tools/inventory.pl" enctype="multipart/form-data">
62
    <form method="post" id="inventory_form" action="/cgi-bin/koha/tools/inventory.pl" enctype="multipart/form-data">
63
        [% INCLUDE 'csrf-token.inc' %]
63
        <fieldset class="rows">
64
        <fieldset class="rows">
64
          <legend>Use a barcode file</legend>
65
          <legend>Use a barcode file</legend>
65
          <ol>
66
          <ol>
Lines 235-240 Link Here
235
    [% END %]
236
    [% END %]
236
    [% IF (op) %]
237
    [% IF (op) %]
237
    <form method="post" action="/cgi-bin/koha/tools/inventory.pl">
238
    <form method="post" action="/cgi-bin/koha/tools/inventory.pl">
239
        [% INCLUDE 'csrf-token.inc' %]
238
    <input type="hidden" name="minlocation" value="[% minlocation | html %]" />
240
    <input type="hidden" name="minlocation" value="[% minlocation | html %]" />
239
    <input type="hidden" name="maxlocation" value="[% maxlocation | html %]" />
241
    <input type="hidden" name="maxlocation" value="[% maxlocation | html %]" />
240
    <input type="hidden" name="location" value="[% location | html %]" />
242
    <input type="hidden" name="location" value="[% location | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/letter.tt (+5 lines)
Lines 224-229 Link Here
224
                                            <td class="actions">
224
                                            <td class="actions">
225
                                                [% IF !independant_branch || !lette.branchcode %]
225
                                                [% IF !independant_branch || !lette.branchcode %]
226
                                                    <form method="post" action="/cgi-bin/koha/tools/letter.pl">
226
                                                    <form method="post" action="/cgi-bin/koha/tools/letter.pl">
227
                                                        [% INCLUDE 'csrf-token.inc' %]
227
                                                        <input type="hidden" name="op" value="copy_form" />
228
                                                        <input type="hidden" name="op" value="copy_form" />
228
                                                        <input type="hidden" name="oldbranchcode" value="[% lette.branchcode | html %]" />
229
                                                        <input type="hidden" name="oldbranchcode" value="[% lette.branchcode | html %]" />
229
                                                        <input type="hidden" name="module" value="[% lette.module | html %]" />
230
                                                        <input type="hidden" name="module" value="[% lette.module | html %]" />
Lines 284-289 Link Here
284
                    </div> <!-- /#toolbar -->
285
                    </div> <!-- /#toolbar -->
285
286
286
                    <form id="add_notice" name="Aform" method="post" enctype="multipart/form-data" class="validate">
287
                    <form id="add_notice" name="Aform" method="post" enctype="multipart/form-data" class="validate">
288
                        [% INCLUDE 'csrf-token.inc' %]
287
                        [% IF add_form %]
289
                        [% IF add_form %]
288
                            <input type="hidden" name="op" id="op" value="add_validate" />
290
                            <input type="hidden" name="op" id="op" value="add_validate" />
289
                        [% ELSE %]
291
                        [% ELSE %]
Lines 468-473 Link Here
468
                [% IF ( add_validate or copy_validate) %]
470
                [% IF ( add_validate or copy_validate) %]
469
                    Data recorded
471
                    Data recorded
470
                    <form action="[% action | html %]" method="post">
472
                    <form action="[% action | html %]" method="post">
473
                        [% INCLUDE 'csrf-token.inc' %]
471
                        <input type="submit" class="btn btn-primary" value="OK" />
474
                        <input type="submit" class="btn btn-primary" value="OK" />
472
                    </form>
475
                    </form>
473
                [% END %]
476
                [% END %]
Lines 492-497 Link Here
492
                            </tr>
495
                            </tr>
493
                        </table>
496
                        </table>
494
                        <form action="[% action | html %]" method="post">
497
                        <form action="[% action | html %]" method="post">
498
                            [% INCLUDE 'csrf-token.inc' %]
495
                            <input type="hidden" name="op" value="delete_confirmed">
499
                            <input type="hidden" name="op" value="delete_confirmed">
496
                            <input type="hidden" name="branchcode" value="[% letter.branchcode | html %]" />
500
                            <input type="hidden" name="branchcode" value="[% letter.branchcode | html %]" />
497
                            <input type="hidden" name="code" value="[% letter.code | html %]" />
501
                            <input type="hidden" name="code" value="[% letter.code | html %]" />
Lines 508-513 Link Here
508
                [% IF ( delete_confirmed ) %]
512
                [% IF ( delete_confirmed ) %]
509
                    <span>Data deleted</span>
513
                    <span>Data deleted</span>
510
                    <form action="[% action | html %]" method="post">
514
                    <form action="[% action | html %]" method="post">
515
                        [% INCLUDE 'csrf-token.inc' %]
511
                    <input type="submit" class="btn btn-primary" value="OK" />
516
                    <input type="submit" class="btn btn-primary" value="OK" />
512
                    </form>
517
                    </form>
513
                [% END %]
518
                [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/manage-marc-import.tt (+5 lines)
Lines 107-112 Link Here
107
                    [% IF ( batch_info ) %]
107
                    [% IF ( batch_info ) %]
108
                        [% IF ( can_commit ) %]
108
                        [% IF ( can_commit ) %]
109
                            <form method="post">
109
                            <form method="post">
110
                                [% INCLUDE 'csrf-token.inc' %]
110
                                <input type="hidden" name="op" value="redo-matching" />
111
                                <input type="hidden" name="op" value="redo-matching" />
111
                                <input type="hidden" name="import_batch_id" value="[% import_batch_id | html %]" />
112
                                <input type="hidden" name="import_batch_id" value="[% import_batch_id | html %]" />
112
                                <input type="hidden" name="current_matcher_id" value="[% current_matcher_id | html %]" />
113
                                <input type="hidden" name="current_matcher_id" value="[% current_matcher_id | html %]" />
Lines 255-260 Link Here
255
                        <div>
256
                        <div>
256
                            [% IF ( can_commit ) %]
257
                            [% IF ( can_commit ) %]
257
                                <form method="post" id="import_batch_form">
258
                                <form method="post" id="import_batch_form">
259
                                    [% INCLUDE 'csrf-token.inc' %]
258
                                    <input type="hidden" name="op" value="commit-batch" />
260
                                    <input type="hidden" name="op" value="commit-batch" />
259
                                    <input type="hidden" name="import_batch_id" value="[% import_batch_id | html %]" />
261
                                    <input type="hidden" name="import_batch_id" value="[% import_batch_id | html %]" />
260
                                    [% IF ( record_type != 'auth' ) %]
262
                                    [% IF ( record_type != 'auth' ) %]
Lines 291-296 Link Here
291
                            [% END # /IF can_commit %]
293
                            [% END # /IF can_commit %]
292
                            [% IF ( can_revert ) %]
294
                            [% IF ( can_revert ) %]
293
                                <form method="post" id="revert_batch_form">
295
                                <form method="post" id="revert_batch_form">
296
                                    [% INCLUDE 'csrf-token.inc' %]
294
                                    <input type="hidden" name="op" value="revert-batch" />
297
                                    <input type="hidden" name="op" value="revert-batch" />
295
                                    <input type="hidden" name="import_batch_id" value="[% import_batch_id | html %]" />
298
                                    <input type="hidden" name="import_batch_id" value="[% import_batch_id | html %]" />
296
                                    <fieldset class="action"><input type="submit" class="button" name="mainformsubmit" value="Undo import into catalog" /></fieldset>
299
                                    <fieldset class="action"><input type="submit" class="button" name="mainformsubmit" value="Undo import into catalog" /></fieldset>
Lines 358-369 Link Here
358
                                            <td class="actions">
361
                                            <td class="actions">
359
                                                [% IF ( batch_lis.can_clean ) %]
362
                                                [% IF ( batch_lis.can_clean ) %]
360
                                                    <form method="post" name="clean_batch_[% batch_lis.import_batch_id | html %]" id="clean_batch_[% batch_lis.import_batch_id | html %]" class="batch_form batch_clean">
363
                                                    <form method="post" name="clean_batch_[% batch_lis.import_batch_id | html %]" id="clean_batch_[% batch_lis.import_batch_id | html %]" class="batch_form batch_clean">
364
                                                        [% INCLUDE 'csrf-token.inc' %]
361
                                                        <input type="hidden" name="import_batch_id" value="[% batch_lis.import_batch_id | html %]" />
365
                                                        <input type="hidden" name="import_batch_id" value="[% batch_lis.import_batch_id | html %]" />
362
                                                        <input type="hidden" name="op" value="clean-batch" />
366
                                                        <input type="hidden" name="op" value="clean-batch" />
363
                                                        <button type="submit" class="btn btn-default btn-xs"><i class="fa fa-eraser"></i> Clean</button>
367
                                                        <button type="submit" class="btn btn-default btn-xs"><i class="fa fa-eraser"></i> Clean</button>
364
                                                    </form>
368
                                                    </form>
365
                                                [% ELSIF ( batch_lis.import_status == 'cleaned' ) %]
369
                                                [% ELSIF ( batch_lis.import_status == 'cleaned' ) %]
366
                                                    <form method="post" action="/cgi-bin/koha/tools/manage-marc-import.pl" name="delete_batch_[% batch_lis.import_batch_id | html %]" id="delete_batch_[% batch_lis.import_batch_id | html %]" class="batch_form batch_delete">
370
                                                    <form method="post" action="/cgi-bin/koha/tools/manage-marc-import.pl" name="delete_batch_[% batch_lis.import_batch_id | html %]" id="delete_batch_[% batch_lis.import_batch_id | html %]" class="batch_form batch_delete">
371
                                                        [% INCLUDE 'csrf-token.inc' %]
367
                                                        <input type="hidden" name="import_batch_id" value="[% batch_lis.import_batch_id | html %]" />
372
                                                        <input type="hidden" name="import_batch_id" value="[% batch_lis.import_batch_id | html %]" />
368
                                                        <input type="hidden" name="op" value="delete-batch" />
373
                                                        <input type="hidden" name="op" value="delete-batch" />
369
                                                        <button type="submit" class="btn btn-default btn-xs"><i class="fa fa-trash-can"></i> Delete</button>
374
                                                        <button type="submit" class="btn btn-default btn-xs"><i class="fa fa-trash-can"></i> Delete</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/marc_modification_templates.tt (+2 lines)
Lines 206-211 Link Here
206
                    [% END # /IF ActionsLoop %]
206
                    [% END # /IF ActionsLoop %]
207
207
208
                    <form method="post" action="/cgi-bin/koha/tools/marc_modification_templates.pl" id="add_action" >
208
                    <form method="post" action="/cgi-bin/koha/tools/marc_modification_templates.pl" id="add_action" >
209
                        [% INCLUDE 'csrf-token.inc' %]
209
                        <a name="modaction"></a>
210
                        <a name="modaction"></a>
210
                        <fieldset>
211
                        <fieldset>
211
                            <legend id="modaction_legend">Add a new action</legend>
212
                            <legend id="modaction_legend">Add a new action</legend>
Lines 316-321 Link Here
316
                    <h2 id="LabelcreateTemplate">Create a new template</h2>
317
                    <h2 id="LabelcreateTemplate">Create a new template</h2>
317
                </div>
318
                </div>
318
                <form method="post" action="/cgi-bin/koha/tools/marc_modification_templates.pl" id="add_template" class="validated">
319
                <form method="post" action="/cgi-bin/koha/tools/marc_modification_templates.pl" id="add_template" class="validated">
320
                    [% INCLUDE 'csrf-token.inc' %]
319
                    <div class="modal-body">
321
                    <div class="modal-body">
320
                        <fieldset>
322
                        <fieldset>
321
                            <p>
323
                            <p>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/modborrowers.tt (+2 lines)
Lines 35-40 Link Here
35
                [% IF ( op == 'show_form' ) %]
35
                [% IF ( op == 'show_form' ) %]
36
                    <h1>Batch patron modification</h1>
36
                    <h1>Batch patron modification</h1>
37
                    <form id="patron_batchmod_form" method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/modborrowers.pl">
37
                    <form id="patron_batchmod_form" method="post" enctype="multipart/form-data" action="/cgi-bin/koha/tools/modborrowers.pl">
38
                        [% INCLUDE 'csrf-token.inc' %]
38
                        <input type="hidden" name="op" value="show" />
39
                        <input type="hidden" name="op" value="show" />
39
40
40
                        [% WRAPPER tabs id= "batch_patron_options" %]
41
                        [% WRAPPER tabs id= "batch_patron_options" %]
Lines 194-199 Link Here
194
195
195
                    [% IF ( op == 'show' ) %]
196
                    [% IF ( op == 'show' ) %]
196
                    <form name="f" action="modborrowers.pl" method="post">
197
                    <form name="f" action="modborrowers.pl" method="post">
198
                        [% INCLUDE 'csrf-token.inc' %]
197
                        <input type="hidden" name="op" value="do" />
199
                        <input type="hidden" name="op" value="do" />
198
                        [% IF ( borrowers ) %]
200
                        [% IF ( borrowers ) %]
199
                            <div class="btn-toolbar selections-toolbar"><a id="selectallbutton" href="#"><i class="fa fa-check"></i> Select all</a> | <a id="clearallbutton" href="#"><i class="fa fa-times"></i> Clear all</a></div>
201
                            <div class="btn-toolbar selections-toolbar"><a id="selectallbutton" href="#"><i class="fa fa-check"></i> Select all</a> | <a id="clearallbutton" href="#"><i class="fa fa-times"></i> Clear all</a></div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/overduerules.tt (+2 lines)
Lines 37-42 Link Here
37
            <p>Columns must be filled left to right: if the first column is blank, other columns will be ignored. </p>
37
            <p>Columns must be filled left to right: if the first column is blank, other columns will be ignored. </p>
38
        </div>
38
        </div>
39
            <form method="post" action="/cgi-bin/koha/tools/overduerules.pl" id="selectlibrary">
39
            <form method="post" action="/cgi-bin/koha/tools/overduerules.pl" id="selectlibrary">
40
                [% INCLUDE 'csrf-token.inc' %]
40
            <label for="branch">Select a library:</label>
41
            <label for="branch">Select a library:</label>
41
                <select id="branch" name="branch">
42
                <select id="branch" name="branch">
42
                    <option value="">Default</option>
43
                    <option value="">Default</option>
Lines 63-68 Link Here
63
            [% END %]
64
            [% END %]
64
            [% IF ( table ) %]
65
            [% IF ( table ) %]
65
                <form method="post" action="/cgi-bin/koha/tools/overduerules.pl">
66
                <form method="post" action="/cgi-bin/koha/tools/overduerules.pl">
67
                    [% INCLUDE 'csrf-token.inc' %]
66
                    <input type="hidden" name="op" value="save" />
68
                    <input type="hidden" name="op" value="save" />
67
                    <input type="hidden" name="branch" value="[% branch | html %]" />
69
                    <input type="hidden" name="branch" value="[% branch | html %]" />
68
                    <h3>Rules for overdue actions: [% IF ( branch ) %][% Branches.GetName( branch ) | html %][% ELSE %] default library [% END %]</h3>
70
                    <h3>Rules for overdue actions: [% IF ( branch ) %][% Branches.GetName( branch ) | html %][% ELSE %] default library [% END %]</h3>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/picture-upload.tt (+1 lines)
Lines 122-127 Link Here
122
                </div>
122
                </div>
123
                [% END %]
123
                [% END %]
124
            <form method="post" action="/cgi-bin/koha/tools/picture-upload.pl" enctype="multipart/form-data" id="upload_form">
124
            <form method="post" action="/cgi-bin/koha/tools/picture-upload.pl" enctype="multipart/form-data" id="upload_form">
125
                [% INCLUDE 'csrf-token.inc' %]
125
                <fieldset class="rows">
126
                <fieldset class="rows">
126
                    <p><strong>NOTE:</strong> Only PNG, GIF, JPEG, XPM formats are supported. Maximum image size is 2MB.</p>
127
                    <p><strong>NOTE:</strong> Only PNG, GIF, JPEG, XPM formats are supported. Maximum image size is 2MB.</p>
127
                        <ol class="radio">
128
                        <ol class="radio">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/problem-reports.tt (+1 lines)
Lines 50-55 Link Here
50
50
51
            [% IF ( problem_reports.count ) %]
51
            [% IF ( problem_reports.count ) %]
52
                <form id="mark_selected" method="post" action="/cgi-bin/koha/tools/problem-reports.pl">
52
                <form id="mark_selected" method="post" action="/cgi-bin/koha/tools/problem-reports.pl">
53
                    [% INCLUDE 'csrf-token.inc' %]
53
                    <div id="toolbar" class="btn-toolbar">
54
                    <div id="toolbar" class="btn-toolbar">
54
                        <button type="submit" class="btn btn-default markviewed" name="mark_selected-viewed" value="viewed" disabled="disabled"><i class="fa-solid fa-eye"></i> Mark viewed</button>
55
                        <button type="submit" class="btn btn-default markviewed" name="mark_selected-viewed" value="viewed" disabled="disabled"><i class="fa-solid fa-eye"></i> Mark viewed</button>
55
                        <button type="submit" class="btn btn-default markclosed" name="mark_selected-closed" value="closed" disabled="disabled"><i class="fa fa-times-circle"></i> Mark closed</button>
56
                        <button type="submit" class="btn btn-default markclosed" name="mark_selected-closed" value="closed" disabled="disabled"><i class="fa fa-times-circle"></i> Mark closed</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/quotes.tt (+2 lines)
Lines 66-71 Link Here
66
[% IF op == 'add_form' %]
66
[% IF op == 'add_form' %]
67
    <h1>[% IF quote %]Modify quote[% ELSE %]New quote[% END %]</h1>
67
    <h1>[% IF quote %]Modify quote[% ELSE %]New quote[% END %]</h1>
68
    <form action="/cgi-bin/koha/tools/quotes.pl" id="Aform" name="Aform" class="validated" method="post">
68
    <form action="/cgi-bin/koha/tools/quotes.pl" id="Aform" name="Aform" class="validated" method="post">
69
        [% INCLUDE 'csrf-token.inc' %]
69
        <fieldset class="rows">
70
        <fieldset class="rows">
70
            <input type="hidden" name="op" value="add_validate" />
71
            <input type="hidden" name="op" value="add_validate" />
71
            <ol>
72
            <ol>
Lines 92-97 Link Here
92
[% IF op == 'delete_confirm' %]
93
[% IF op == 'delete_confirm' %]
93
    <div class="dialog alert">
94
    <div class="dialog alert">
94
        <form action="/cgi-bin/koha/tools/quotes.pl" method="post">
95
        <form action="/cgi-bin/koha/tools/quotes.pl" method="post">
96
            [% INCLUDE 'csrf-token.inc' %]
95
            <h1>Are you sure you want to delete the following quote?</h1>
97
            <h1>Are you sure you want to delete the following quote?</h1>
96
            [% quote.source | html %] - [% quote.text | html %]
98
            [% quote.source | html %] - [% quote.text | html %]
97
            <input type="hidden" name="op" value="delete_confirmed" />
99
            <input type="hidden" name="op" value="delete_confirmed" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/scheduler.tt (+2 lines)
Lines 34-39 Link Here
34
[% END %]
34
[% END %]
35
35
36
<form name="form1" action="scheduler.pl" method="post">
36
<form name="form1" action="scheduler.pl" method="post">
37
    [% INCLUDE 'csrf-token.inc' %]
37
<input type="hidden" name="mode" value="job_add" />
38
<input type="hidden" name="mode" value="job_add" />
38
39
39
<fieldset class="rows">
40
<fieldset class="rows">
Lines 83-88 Link Here
83
</tr>
84
</tr>
84
[% FOREACH JOB IN JOBS %]
85
[% FOREACH JOB IN JOBS %]
85
<form action="scheduler.pl" method="post">
86
<form action="scheduler.pl" method="post">
87
    [% INCLUDE 'csrf-token.inc' %]
86
<input type="hidden" name="mode" value="job_change" />
88
<input type="hidden" name="mode" value="job_change" />
87
89
88
<tr>
90
<tr>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/stage-marc-import.tt (+2 lines)
Lines 79-84 Link Here
79
    <li>You can enter a name for this import. It may be useful, when creating a record, to remember where the suggested MARC data comes from!</li>
79
    <li>You can enter a name for this import. It may be useful, when creating a record, to remember where the suggested MARC data comes from!</li>
80
</ul>
80
</ul>
81
<form method="post" id="uploadfile" enctype="multipart/form-data">
81
<form method="post" id="uploadfile" enctype="multipart/form-data">
82
    [% INCLUDE 'csrf-token.inc' %]
82
<fieldset class="rows" id="uploadform">
83
<fieldset class="rows" id="uploadform">
83
<legend>Upload a file to stage</legend>
84
<legend>Upload a file to stage</legend>
84
<ol>
85
<ol>
Lines 119-124 Link Here
119
</fieldset>
120
</fieldset>
120
121
121
    <form method="post" id="processfile" enctype="multipart/form-data">
122
    <form method="post" id="processfile" enctype="multipart/form-data">
123
        [% INCLUDE 'csrf-token.inc' %]
122
[% IF basketno && booksellerid %]
124
[% IF basketno && booksellerid %]
123
    <input type="hidden" name="basketno" id="basketno" value="[% basketno | html %]" />
125
    <input type="hidden" name="basketno" id="basketno" value="[% basketno | html %]" />
124
    <input type="hidden" name="booksellerid" id="booksellerid" value="[% booksellerid | html %]" />
126
    <input type="hidden" name="booksellerid" id="booksellerid" value="[% booksellerid | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/stockrotation.tt (+5 lines)
Lines 151-156 Link Here
151
                    [% END %]
151
                    [% END %]
152
152
153
                    <form id="rota_form" method="post" enctype="multipart/form-data" class="validated">
153
                    <form id="rota_form" method="post" enctype="multipart/form-data" class="validated">
154
                        [% INCLUDE 'csrf-token.inc' %]
154
                        <fieldset class="rows">
155
                        <fieldset class="rows">
155
                            <ol>
156
                            <ol>
156
                                <li>
157
                                <li>
Lines 212-217 Link Here
212
                    <!-- Add stage modal -->
213
                    <!-- Add stage modal -->
213
                    <div class="modal" id="addStageModal" tabindex="-1" role="dialog" aria-labelledby="addStageLabel">
214
                    <div class="modal" id="addStageModal" tabindex="-1" role="dialog" aria-labelledby="addStageLabel">
214
                        <form id="stage_form" method="post" enctype="multipart/form-data" class="validated">
215
                        <form id="stage_form" method="post" enctype="multipart/form-data" class="validated">
216
                            [% INCLUDE 'csrf-token.inc' %]
215
                            <div class="modal-dialog" role="document">
217
                            <div class="modal-dialog" role="document">
216
                                <div class="modal-content">
218
                                <div class="modal-content">
217
                                    <div class="modal-header">
219
                                    <div class="modal-header">
Lines 311-316 Link Here
311
                    [% END %]
313
                    [% END %]
312
314
313
                    <form id="stage_form" method="post" enctype="multipart/form-data" class="validated">
315
                    <form id="stage_form" method="post" enctype="multipart/form-data" class="validated">
316
                        [% INCLUDE 'csrf-token.inc' %]
314
                        <fieldset class="rows">
317
                        <fieldset class="rows">
315
                            <ol>
318
                            <ol>
316
                                <li>
319
                                <li>
Lines 402-407 Link Here
402
                    <!-- Add items modal -->
405
                    <!-- Add items modal -->
403
                    <div class="modal" id="addItemsModal" tabindex="-1" role="dialog" aria-labelledby="addItemsLabel">
406
                    <div class="modal" id="addItemsModal" tabindex="-1" role="dialog" aria-labelledby="addItemsLabel">
404
                        <form id="add_rota_item_form" method="post" enctype="multipart/form-data" class="validated">
407
                        <form id="add_rota_item_form" method="post" enctype="multipart/form-data" class="validated">
408
                            [% INCLUDE 'csrf-token.inc' %]
405
                            <div class="modal-dialog" role="document">
409
                            <div class="modal-dialog" role="document">
406
                                <div class="modal-content">
410
                                <div class="modal-content">
407
                                    <div class="modal-header">
411
                                    <div class="modal-header">
Lines 564-569 Link Here
564
568
565
                    [% IF barcode_status.on_other.size > 0 %]
569
                    [% IF barcode_status.on_other.size > 0 %]
566
                        <form id="add_rota_item_form" method="post" enctype="multipart/form-data">
570
                        <form id="add_rota_item_form" method="post" enctype="multipart/form-data">
571
                            [% INCLUDE 'csrf-token.inc' %]
567
                            <fieldset>
572
                            <fieldset>
568
                                <legend>Select items to move to this rota:</legend>
573
                                <legend>Select items to move to this rota:</legend>
569
                                [% FOREACH item_on_other IN barcode_status.on_other %]
574
                                [% FOREACH item_on_other IN barcode_status.on_other %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/upload-images.tt (+2 lines)
Lines 183-188 Link Here
183
                    [% END %]
183
                    [% END %]
184
184
185
                        <form method="post" action="/cgi-bin/koha/tools/upload-cover-image.pl" id="uploadfile" enctype="multipart/form-data">
185
                        <form method="post" action="/cgi-bin/koha/tools/upload-cover-image.pl" id="uploadfile" enctype="multipart/form-data">
186
                            [% INCLUDE 'csrf-token.inc' %]
186
                            <fieldset class="rows" >
187
                            <fieldset class="rows" >
187
                                <div id="fileuploadform">
188
                                <div id="fileuploadform">
188
                                    <label for="fileToUpload">Select the file to upload: </label>
189
                                    <label for="fileToUpload">Select the file to upload: </label>
Lines 206-211 Link Here
206
                        </form> <!-- /#uploadfile -->
207
                        </form> <!-- /#uploadfile -->
207
208
208
                        <form method="post" id="processfile" action="/cgi-bin/koha/tools/upload-cover-image.pl" enctype="multipart/form-data">
209
                        <form method="post" id="processfile" action="/cgi-bin/koha/tools/upload-cover-image.pl" enctype="multipart/form-data">
210
                            [% INCLUDE 'csrf-token.inc' %]
209
                            <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
211
                            <input type="hidden" name="uploadedfileid" id="uploadedfileid" value="" />
210
212
211
                            [% IF itemnumber %]
213
                            [% IF itemnumber %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/upload.tt (+4 lines)
Lines 23-28 Link Here
23
23
24
[% BLOCK form_new %]
24
[% BLOCK form_new %]
25
    <form method="post" action="/cgi-bin/koha/tools/upload.pl" id="uploadfile" enctype="multipart/form-data">
25
    <form method="post" action="/cgi-bin/koha/tools/upload.pl" id="uploadfile" enctype="multipart/form-data">
26
        [% INCLUDE 'csrf-token.inc' %]
26
        [% PROCESS plugin_pars %]
27
        [% PROCESS plugin_pars %]
27
        <fieldset class="rows" id="uploadform">
28
        <fieldset class="rows" id="uploadform">
28
        <legend>Upload new files</legend>
29
        <legend>Upload new files</legend>
Lines 91-96 Link Here
91
[% BLOCK form_browse %]
92
[% BLOCK form_browse %]
92
    [% IF uploadcategories %]
93
    [% IF uploadcategories %]
93
    <form method="post" id="browsefile" action="/cgi-bin/koha/tools/upload.pl">
94
    <form method="post" id="browsefile" action="/cgi-bin/koha/tools/upload.pl">
95
        [% INCLUDE 'csrf-token.inc' %]
94
        [% PROCESS plugin_pars %]
96
        [% PROCESS plugin_pars %]
95
        <input type="hidden" name="op" value="browse"/>
97
        <input type="hidden" name="op" value="browse"/>
96
        <fieldset class="brief">
98
        <fieldset class="brief">
Lines 120-125 Link Here
120
122
121
[% BLOCK form_search %]
123
[% BLOCK form_search %]
122
    <form method="post" id="searchfile" action="/cgi-bin/koha/tools/upload.pl">
124
    <form method="post" id="searchfile" action="/cgi-bin/koha/tools/upload.pl">
125
        [% INCLUDE 'csrf-token.inc' %]
123
        [% PROCESS plugin_pars %]
126
        [% PROCESS plugin_pars %]
124
        <input type="hidden" name="op" value="search"/>
127
        <input type="hidden" name="op" value="search"/>
125
        <fieldset class="brief">
128
        <fieldset class="brief">
Lines 139-144 Link Here
139
142
140
[% BLOCK submitter %]
143
[% BLOCK submitter %]
141
    <form id="submitter" style="display:none;" method="post">
144
    <form id="submitter" style="display:none;" method="post">
145
        [% INCLUDE 'csrf-token.inc' %]
142
        [% PROCESS plugin_pars %]
146
        [% PROCESS plugin_pars %]
143
        <input type="hidden" name="op" id="op" value=""/>
147
        <input type="hidden" name="op" id="op" value=""/>
144
        <input type="hidden" name="id" id="id" value="" />
148
        <input type="hidden" name="id" id="id" value="" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/viewlog.tt (+1 lines)
Lines 194-199 Link Here
194
194
195
				<h1>Browse system logs</h1>
195
				<h1>Browse system logs</h1>
196
				<form method="post" action="/cgi-bin/koha/tools/viewlog.pl">
196
				<form method="post" action="/cgi-bin/koha/tools/viewlog.pl">
197
				    [% INCLUDE 'csrf-token.inc' %]
197
					[% IF ( do_it ) %]
198
					[% IF ( do_it ) %]
198
						<input type="hidden" name="do_it" value="[% do_it | html %]" />
199
						<input type="hidden" name="do_it" value="[% do_it | html %]" />
199
					[% END %]
200
					[% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/addbybiblionumber.tt (+1 lines)
Lines 29-34 Link Here
29
                </ul>
29
                </ul>
30
30
31
        <form name="f1" action="/cgi-bin/koha/virtualshelves/addbybiblionumber.pl" method="post">
31
        <form name="f1" action="/cgi-bin/koha/virtualshelves/addbybiblionumber.pl" method="post">
32
            [% INCLUDE 'csrf-token.inc' %]
32
                        [% FOREACH biblio IN biblios %] <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]" />[% END %]
33
                        [% FOREACH biblio IN biblios %] <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]" />[% END %]
33
            <input type="hidden" name="confirmed" value="1" />
34
            <input type="hidden" name="confirmed" value="1" />
34
            [% IF ( shelfnumber ) %]<input type="hidden" name="shelfnumber" value="[% shelfnumber | html %]" />[% END %]
35
            [% IF ( shelfnumber ) %]<input type="hidden" name="shelfnumber" value="[% shelfnumber | html %]" />[% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/downloadshelf.tt (+1 lines)
Lines 24-29 Link Here
24
[% ELSE %]
24
[% ELSE %]
25
<div id="export" class="detailtagcell">    <form method="post" action="/cgi-bin/koha/virtualshelves/downloadshelf.pl">
25
<div id="export" class="detailtagcell">    <form method="post" action="/cgi-bin/koha/virtualshelves/downloadshelf.pl">
26
<form method="post" action="/cgi-bin/koha/virtualshelves/downloadshelf.pl">
26
<form method="post" action="/cgi-bin/koha/virtualshelves/downloadshelf.pl">
27
    [% INCLUDE 'csrf-token.inc' %]
27
	<fieldset class="rows">
28
	<fieldset class="rows">
28
        <legend><h1>Download list</h1></legend>
29
        <legend><h1>Download list</h1></legend>
29
	<ol><li>
30
	<ol><li>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/sendshelfform.tt (+1 lines)
Lines 18-23 Link Here
18
[% ELSE %]
18
[% ELSE %]
19
19
20
<form action="/cgi-bin/koha/virtualshelves/sendshelf.pl" method="post">
20
<form action="/cgi-bin/koha/virtualshelves/sendshelf.pl" method="post">
21
    [% INCLUDE 'csrf-token.inc' %]
21
22
22
<fieldset class="rows"> 
23
<fieldset class="rows"> 
23
    <legend><h1>Sending your list</h1></legend>
24
    <legend><h1>Sending your list</h1></legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/shelves.tt (+4 lines)
Lines 204-209 Link Here
204
                <h1>Transfer ownership of public list [% shelf.shelfname | html %]</h1>
204
                <h1>Transfer ownership of public list [% shelf.shelfname | html %]</h1>
205
205
206
                <form action="/cgi-bin/koha/virtualshelves/shelves.pl" id="transferform" method="post">
206
                <form action="/cgi-bin/koha/virtualshelves/shelves.pl" id="transferform" method="post">
207
                    [% INCLUDE 'csrf-token.inc' %]
207
                    [% INCLUDE 'csrf-token.inc' %]
208
                    [% INCLUDE 'csrf-token.inc' %]
208
                    <fieldset>
209
                    <fieldset>
209
                        <input type="hidden" name="op" value="transfer" />
210
                        <input type="hidden" name="op" value="transfer" />
Lines 239-244 Link Here
239
                    [% IF ( contents.count ) %]<p>This list contains [% contents.count | html %] titles</p>[% END %]
240
                    [% IF ( contents.count ) %]<p>This list contains [% contents.count | html %] titles</p>[% END %]
240
                    <div class="pages">[% pagination_bar | $raw %]</div>
241
                    <div class="pages">[% pagination_bar | $raw %]</div>
241
                    <form action="/cgi-bin/koha/virtualshelves/shelves.pl" id="listform" method="post">
242
                    <form action="/cgi-bin/koha/virtualshelves/shelves.pl" id="listform" method="post">
243
                        [% INCLUDE 'csrf-token.inc' %]
242
                        [% INCLUDE 'csrf-token.inc' %]
244
                        [% INCLUDE 'csrf-token.inc' %]
243
                        <input type="hidden" name="op" value="remove_biblios" />
245
                        <input type="hidden" name="op" value="remove_biblios" />
244
                        <input type="hidden" name="referer" value="view" />
246
                        <input type="hidden" name="referer" value="view" />
Lines 391-396 Link Here
391
            [% IF op == 'add_form' OR op == 'edit_form' %]
393
            [% IF op == 'add_form' OR op == 'edit_form' %]
392
394
393
                <form method="post" action="/cgi-bin/koha/virtualshelves/shelves.pl" class="validated">
395
                <form method="post" action="/cgi-bin/koha/virtualshelves/shelves.pl" class="validated">
396
                    [% INCLUDE 'csrf-token.inc' %]
394
                    [% INCLUDE 'csrf-token.inc' %]
397
                    [% INCLUDE 'csrf-token.inc' %]
395
                    <fieldset class="rows">
398
                    <fieldset class="rows">
396
                        [% IF op == 'add_form' %]
399
                        [% IF op == 'add_form' %]
Lines 549-554 Link Here
549
    <div class="modal" id="addToList" tabindex="-1" role="dialog" aria-labelledby="addToListLabel">
552
    <div class="modal" id="addToList" tabindex="-1" role="dialog" aria-labelledby="addToListLabel">
550
        <div class="modal-dialog" role="document">
553
        <div class="modal-dialog" role="document">
551
            <form action="/cgi-bin/koha/virtualshelves/shelves.pl" method="post">
554
            <form action="/cgi-bin/koha/virtualshelves/shelves.pl" method="post">
555
                [% INCLUDE 'csrf-token.inc' %]
552
                [% INCLUDE 'csrf-token.inc' %]
556
                [% INCLUDE 'csrf-token.inc' %]
553
                <div class="modal-content">
557
                <div class="modal-content">
554
                    <div class="modal-header">
558
                    <div class="modal-header">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/account-table.inc (+1 lines)
Lines 1-5 Link Here
1
[% PROCESS 'accounts.inc' %]
1
[% PROCESS 'accounts.inc' %]
2
<form method="post" action="opac-account-pay.pl" class="form-horizontal">
2
<form method="post" action="opac-account-pay.pl" class="form-horizontal">
3
    [% INCLUDE 'csrf-token.inc' %]
3
    [% IF ( ACCOUNT_LINES ) %]
4
    [% IF ( ACCOUNT_LINES ) %]
4
        <table class="table table-bordered table-striped finestable" id="finestable">
5
        <table class="table table-bordered table-striped finestable" id="finestable">
5
            <caption class="sr-only">Your charges</caption>
6
            <caption class="sr-only">Your charges</caption>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/holds-table.inc (+7 lines)
Lines 93-98 Link Here
93
                            <div class="modal" id="changePickup[% HOLD.reserve_id | html %]" tabindex="-1" aria-labelledby="changePickup[% HOLD.reserve_id | html %]Label" aria-hidden="true">
93
                            <div class="modal" id="changePickup[% HOLD.reserve_id | html %]" tabindex="-1" aria-labelledby="changePickup[% HOLD.reserve_id | html %]Label" aria-hidden="true">
94
                                <div class="modal-dialog">
94
                                <div class="modal-dialog">
95
                                    <form id="change_branch_form[% HOLD.reserve_id | html %]" action="/cgi-bin/koha/opac-modrequest.pl" method="post">
95
                                    <form id="change_branch_form[% HOLD.reserve_id | html %]" action="/cgi-bin/koha/opac-modrequest.pl" method="post">
96
                                        [% INCLUDE 'csrf-token.inc' %]
96
                                        <div class="modal-content">
97
                                        <div class="modal-content">
97
                                            <div class="modal-header">
98
                                            <div class="modal-header">
98
                                                <h5 class="modal-title" id="changePickup[% HOLD.reserve_id | html %]Label">Change pickup location for <em>[% INCLUDE 'biblio-title.inc' biblio=HOLD.biblio %]</em></h5>
99
                                                <h5 class="modal-title" id="changePickup[% HOLD.reserve_id | html %]Label">Change pickup location for <em>[% INCLUDE 'biblio-title.inc' biblio=HOLD.biblio %]</em></h5>
Lines 167-172 Link Here
167
                        [% IF ( HOLD.is_cancelable_from_opac ) %]
168
                        [% IF ( HOLD.is_cancelable_from_opac ) %]
168
                            [% IF HOLD.suspend %]
169
                            [% IF HOLD.suspend %]
169
                                <form class="form-inline" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
170
                                <form class="form-inline" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
171
                                    [% INCLUDE 'csrf-token.inc' %]
170
                                    <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
172
                                    <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
171
                                    <button class="btn btn-link" type="submit" name="submit"><i class="fa fa-play" aria-hidden="true"></i> Resume</button>
173
                                    <button class="btn btn-link" type="submit" name="submit"><i class="fa fa-play" aria-hidden="true"></i> Resume</button>
172
                                </form>
174
                                </form>
Lines 175-180 Link Here
175
                                    <a class="btn btn-link suspend_hold js-show" href="#" role="button" data-title="[% HOLD.biblio.title | html %] [% FOREACH subtitle IN HOLD.biblio.subtitle.split(' \| ') %][% IF Koha.Preference('marcflavour')=='UNIMARC' %],[% END %][% subtitle | html %][% END %]" data-reserve_id="[% HOLD.reserve_id | html %]"><i class="fa fa-pause" aria-hidden="true"></i> Suspend</a>
177
                                    <a class="btn btn-link suspend_hold js-show" href="#" role="button" data-title="[% HOLD.biblio.title | html %] [% FOREACH subtitle IN HOLD.biblio.subtitle.split(' \| ') %][% IF Koha.Preference('marcflavour')=='UNIMARC' %],[% END %][% subtitle | html %][% END %]" data-reserve_id="[% HOLD.reserve_id | html %]"><i class="fa fa-pause" aria-hidden="true"></i> Suspend</a>
176
                                [% ELSE %]
178
                                [% ELSE %]
177
                                    <form class="form-inline" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
179
                                    <form class="form-inline" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
180
                                        [% INCLUDE 'csrf-token.inc' %]
178
                                        <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
181
                                        <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
179
                                        <button class="btn btn-link" type="submit" name="submit"><i class="fa fa-pause" aria-hidden="true"></i> Suspend</button>
182
                                        <button class="btn btn-link" type="submit" name="submit"><i class="fa fa-pause" aria-hidden="true"></i> Suspend</button>
180
                                    </form>
183
                                    </form>
Lines 187-198 Link Here
187
                    <td class="modify">
190
                    <td class="modify">
188
                        [% IF ( HOLD.is_cancelable_from_opac ) %]
191
                        [% IF ( HOLD.is_cancelable_from_opac ) %]
189
                            <form id="delete_hold_[% HOLD.reserve_id | html %]" action="/cgi-bin/koha/opac-modrequest.pl" method="post">
192
                            <form id="delete_hold_[% HOLD.reserve_id | html %]" action="/cgi-bin/koha/opac-modrequest.pl" method="post">
193
                                [% INCLUDE 'csrf-token.inc' %]
190
                                <input type="hidden" name="biblionumber" value="[% HOLD.biblionumber | html %]" />
194
                                <input type="hidden" name="biblionumber" value="[% HOLD.biblionumber | html %]" />
191
                                <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
195
                                <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
192
                                <button data-title="[% INCLUDE 'biblio-title-head.inc' biblio=HOLD.biblio %]" data-reserve_id="[% HOLD.reserve_id | html %]" type="submit" class="btn btn-sm btn-danger btn-delete-hold"><i class="fa fa-times" aria-hidden="true"></i> [% tp('Cancel hold button', 'Cancel') | html %]</button>
196
                                <button data-title="[% INCLUDE 'biblio-title-head.inc' biblio=HOLD.biblio %]" data-reserve_id="[% HOLD.reserve_id | html %]" type="submit" class="btn btn-sm btn-danger btn-delete-hold"><i class="fa fa-times" aria-hidden="true"></i> [% tp('Cancel hold button', 'Cancel') | html %]</button>
193
                            </form>
197
                            </form>
194
                        [% ELSIF HOLD.is_waiting && HOLD.cancellation_requestable_from_opac %]
198
                        [% ELSIF HOLD.is_waiting && HOLD.cancellation_requestable_from_opac %]
195
                            <form id="req_cancel_hold_[% HOLD.reserve_id | html %]" action="/cgi-bin/koha/opac-modrequest.pl" method="post">
199
                            <form id="req_cancel_hold_[% HOLD.reserve_id | html %]" action="/cgi-bin/koha/opac-modrequest.pl" method="post">
200
                                [% INCLUDE 'csrf-token.inc' %]
196
                                <input type="hidden" name="biblionumber" value="[% HOLD.biblionumber | html %]" />
201
                                <input type="hidden" name="biblionumber" value="[% HOLD.biblionumber | html %]" />
197
                                <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
202
                                <input type="hidden" name="reserve_id" value="[% HOLD.reserve_id | html %]" />
198
                                <input type="hidden" name="cancellation_request" value="1" />
203
                                <input type="hidden" name="cancellation_request" value="1" />
Lines 211-216 Link Here
211
    [% UNLESS ( all_holds_waiting ) %]
216
    [% UNLESS ( all_holds_waiting ) %]
212
        <div>
217
        <div>
213
            <form class="form-inline" id="suspend_all_holds" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
218
            <form class="form-inline" id="suspend_all_holds" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
219
                [% INCLUDE 'csrf-token.inc' %]
214
                <button type="submit" id="suspend_all_submit" class="btn btn-primary"><i class="fa fa-pause" aria-hidden="true"></i> Suspend all holds</button>
220
                <button type="submit" id="suspend_all_submit" class="btn btn-primary"><i class="fa fa-pause" aria-hidden="true"></i> Suspend all holds</button>
215
                <input type="hidden" name="suspend" value="1" />
221
                <input type="hidden" name="suspend" value="1" />
216
222
Lines 224-229 Link Here
224
        <br/>
230
        <br/>
225
        <div>
231
        <div>
226
            <form id="resume_all_holds" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
232
            <form id="resume_all_holds" action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
233
                [% INCLUDE 'csrf-token.inc' %]
227
                <button type="submit" id="resume_all_submit" class="btn btn-primary"><i class="fa fa-play" aria-hidden="true"></i> Resume all suspended holds</button>
234
                <button type="submit" id="resume_all_submit" class="btn btn-primary"><i class="fa fa-play" aria-hidden="true"></i> Resume all suspended holds</button>
228
                <input type="hidden" name="suspend" value="0" />
235
                <input type="hidden" name="suspend" value="0" />
229
            </form>
236
            </form>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/masthead.inc (+1 lines)
Lines 385-390 Link Here
385
                    </button>
385
                    </button>
386
                </div>
386
                </div>
387
                <form action="/cgi-bin/koha/opac-user.pl" method="post" name="auth" id="modalAuth">
387
                <form action="/cgi-bin/koha/opac-user.pl" method="post" name="auth" id="modalAuth">
388
                    [% INCLUDE 'csrf-token.inc' %]
388
                    <input type="hidden" name="has-search-query" id="has-search-query" value="" />
389
                    <input type="hidden" name="has-search-query" id="has-search-query" value="" />
389
                    <div class="modal-body">
390
                    <div class="modal-body">
390
                        [% IF ( Koha.Preference('GoogleOpenIDConnect') == 1 ) %]
391
                        [% IF ( Koha.Preference('GoogleOpenIDConnect') == 1 ) %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/opac-detail-sidebar.inc (+1 lines)
Lines 119-124 Link Here
119
                <button type="button" class="closebtn" data-dismiss="modal" aria-hidden="true">&times;</button>
119
                <button type="button" class="closebtn" data-dismiss="modal" aria-hidden="true">&times;</button>
120
            </div>
120
            </div>
121
            <form method="post" action="/cgi-bin/koha/opac-export.pl">
121
            <form method="post" action="/cgi-bin/koha/opac-export.pl">
122
                [% INCLUDE 'csrf-token.inc' %]
122
                <div class="modal-body">
123
                <div class="modal-body">
123
                    <fieldset id="dc_fieldset">
124
                    <fieldset id="dc_fieldset">
124
                        <input id="input-simple" type="radio" name="format" value="rdfdc">
125
                        <input id="input-simple" type="radio" name="format" value="rdfdc">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/opac-note.inc (+1 lines)
Lines 8-13 Link Here
8
                    &nbsp;&nbsp;&nbsp;<em>Written on [% message.message_date | $KohaDates %] by [% Branches.GetName(message.branchcode) | html %]</em>
8
                    &nbsp;&nbsp;&nbsp;<em>Written on [% message.message_date | $KohaDates %] by [% Branches.GetName(message.branchcode) | html %]</em>
9
                </li>
9
                </li>
10
                <form id="dismiss-message-form" action="/cgi-bin/koha/opac-dismiss-message.pl" method="post">
10
                <form id="dismiss-message-form" action="/cgi-bin/koha/opac-dismiss-message.pl" method="post">
11
                    [% INCLUDE 'csrf-token.inc' %]
11
                    <input type="hidden" name="message_id" value="[% message.message_id | html %]">
12
                    <input type="hidden" name="message_id" value="[% message.message_id | html %]">
12
                    <input type="hidden" name="patron_id" value="[% message.borrowernumber | html %]">
13
                    <input type="hidden" name="patron_id" value="[% message.borrowernumber | html %]">
13
                    <button type="submit" class="dismiss-message-button btn btn-primary"><i class="fa fa-trash" aria-hidden="true"></i> Dismiss</button>
14
                    <button type="submit" class="dismiss-message-button btn btn-primary"><i class="fa fa-trash" aria-hidden="true"></i> Dismiss</button>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/overdrive-checkout.inc (+1 lines)
Lines 8-13 Link Here
8
                </button>
8
                </button>
9
            </div>
9
            </div>
10
            <form action="#" method="post" id="overdrive-checkout-form">
10
            <form action="#" method="post" id="overdrive-checkout-form">
11
                [% INCLUDE 'csrf-token.inc' %]
11
                <div class="modal-body">
12
                <div class="modal-body">
12
                    <input type="hidden" name="id" value="" />
13
                    <input type="hidden" name="id" value="" />
13
                    <div id="overdrive-format-list">
14
                    <div id="overdrive-format-list">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/includes/overdrive-login.inc (+1 lines)
Lines 8-13 Link Here
8
                </button>
8
                </button>
9
            </div>
9
            </div>
10
            <form action="#" method="post" id="overdrive-login-form">
10
            <form action="#" method="post" id="overdrive-login-form">
11
                [% INCLUDE 'csrf-token.inc' %]
11
                <div class="modal-body">
12
                <div class="modal-body">
12
                        <fieldset class="brief">
13
                        <fieldset class="brief">
13
                            <label for="ODpassword">Password:</label>
14
                            <label for="ODpassword">Password:</label>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-addbybiblionumber.tt (+3 lines)
Lines 25-30 Link Here
25
                                </ul>
25
                                </ul>
26
                                [% IF private_shelves.count or public_shelves.count or private_shelves_shared_with_me.count %]
26
                                [% IF private_shelves.count or public_shelves.count or private_shelves_shared_with_me.count %]
27
                                    <form name="f1" action="/cgi-bin/koha/opac-addbybiblionumber.pl" method="post">
27
                                    <form name="f1" action="/cgi-bin/koha/opac-addbybiblionumber.pl" method="post">
28
                                        [% INCLUDE 'csrf-token.inc' %]
28
                                        <fieldset>
29
                                        <fieldset>
29
                                            <legend>Select a list</legend>
30
                                            <legend>Select a list</legend>
30
                                            <label for="shelfnumber">Add to list:</label> <select name="shelfnumber" id="shelfnumber">
31
                                            <label for="shelfnumber">Add to list:</label> <select name="shelfnumber" id="shelfnumber">
Lines 58-63 Link Here
58
                                [% ELSE %]
59
                                [% ELSE %]
59
                                    [% IF ( singleshelf ) %]
60
                                    [% IF ( singleshelf ) %]
60
                                        <form name="f1" action="/cgi-bin/koha/opac-addbybiblionumber.pl" method="post">
61
                                        <form name="f1" action="/cgi-bin/koha/opac-addbybiblionumber.pl" method="post">
62
                                            [% INCLUDE 'csrf-token.inc' %]
61
                                            [% FOREACH biblio IN biblios %]
63
                                            [% FOREACH biblio IN biblios %]
62
                                                <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]">
64
                                                <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]">
63
                                            [% END %]
65
                                            [% END %]
Lines 74-79 Link Here
74
76
75
                            [% UNLESS ( singleshelf ) %]
77
                            [% UNLESS ( singleshelf ) %]
76
                                <form name="f2" method="post" action="/cgi-bin/koha/opac-addbybiblionumber.pl">
78
                                <form name="f2" method="post" action="/cgi-bin/koha/opac-addbybiblionumber.pl">
79
                                    [% INCLUDE 'csrf-token.inc' %]
77
                                    <fieldset>
80
                                    <fieldset>
78
                                        <legend>Add to a new list:</legend>
81
                                        <legend>Add to a new list:</legend>
79
                                            <label for="newvirtualshelf">List name:</label>
82
                                            <label for="newvirtualshelf">List name:</label>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-alert-subscribe.tt (+2 lines)
Lines 36-41 Link Here
36
                        [% IF ( typeissue ) %]
36
                        [% IF ( typeissue ) %]
37
                            <h2>Subscribe to a subscription alert</h2>
37
                            <h2>Subscribe to a subscription alert</h2>
38
                            <form action="opac-alert-subscribe.pl" method="post">
38
                            <form action="opac-alert-subscribe.pl" method="post">
39
                                [% INCLUDE 'csrf-token.inc' %]
39
                                <p>Do you want to receive an email when a new issue for this subscription arrives?</p>
40
                                <p>Do you want to receive an email when a new issue for this subscription arrives?</p>
40
                                <h3>[% bibliotitle | html %]</h3>
41
                                <h3>[% bibliotitle | html %]</h3>
41
                                [% IF ( notes ) %]<p>[% notes | html %]</p>[% END %]
42
                                [% IF ( notes ) %]<p>[% notes | html %]</p>[% END %]
Lines 50-55 Link Here
50
                        [% IF ( typeissuecancel ) %]
51
                        [% IF ( typeissuecancel ) %]
51
                            <h2>Unsubscribe from a subscription alert</h2>
52
                            <h2>Unsubscribe from a subscription alert</h2>
52
                            <form action="opac-alert-subscribe.pl" method="post">
53
                            <form action="opac-alert-subscribe.pl" method="post">
54
                                [% INCLUDE 'csrf-token.inc' %]
53
                                <p>Please confirm that you do not want to receive email when a new issue arrives for this subscription.</p>
55
                                <p>Please confirm that you do not want to receive email when a new issue arrives for this subscription.</p>
54
                                <h3>[% bibliotitle | html %]</h3>
56
                                <h3>[% bibliotitle | html %]</h3>
55
                                [% IF ( notes ) %]<p>[% notes | html %]</p>[% END %]
57
                                [% IF ( notes ) %]<p>[% notes | html %]</p>[% END %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-auth.tt (+1 lines)
Lines 213-218 Link Here
213
                                <form action="/cgi-bin/koha/sci/sci-main.pl" name="auth" id="auth" method="post" autocomplete="off">
213
                                <form action="/cgi-bin/koha/sci/sci-main.pl" name="auth" id="auth" method="post" autocomplete="off">
214
                            [% ELSE %]
214
                            [% ELSE %]
215
                                <form action="[% script_name | html %]" name="auth" id="auth" method="post" autocomplete="off">
215
                                <form action="[% script_name | html %]" name="auth" id="auth" method="post" autocomplete="off">
216
                                    [% INCLUDE 'csrf-token.inc' %]
216
                            [% END %]
217
                            [% END %]
217
                                <input type="hidden" name="koha_login_context" value="opac" />
218
                                <input type="hidden" name="koha_login_context" value="opac" />
218
219
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-authorities-home.tt (+1 lines)
Lines 36-41 Link Here
36
                [% END %]
36
                [% END %]
37
                    <div id="userauthhome" class="maincontent">
37
                    <div id="userauthhome" class="maincontent">
38
                        <form name="f" action="/cgi-bin/koha/opac-authorities-home.pl" method="post">
38
                        <form name="f" action="/cgi-bin/koha/opac-authorities-home.pl" method="post">
39
                            [% INCLUDE 'csrf-token.inc' %]
39
                            <input type="hidden" name="op" value="do_search" />
40
                            <input type="hidden" name="op" value="do_search" />
40
                            <input type="hidden" name="type" value="opac" />
41
                            <input type="hidden" name="type" value="opac" />
41
                            <fieldset class="rows">
42
                            <fieldset class="rows">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-basket.tt (+1 lines)
Lines 350-355 Link Here
350
                                <input type="hidden" name="records" id="records" />
350
                                <input type="hidden" name="records" id="records" />
351
                            </form>
351
                            </form>
352
                            <form method="post" id="download_cart" action="/cgi-bin/koha/opac-downloadcart.pl">
352
                            <form method="post" id="download_cart" action="/cgi-bin/koha/opac-downloadcart.pl">
353
                                [% INCLUDE 'csrf-token.inc' %]
353
                                <input type="hidden" name="format" id="download_format" value="" />
354
                                <input type="hidden" name="format" id="download_format" value="" />
354
                                <input type="hidden" name="bib_list" value="[% bib_list | html %]" />
355
                                <input type="hidden" name="bib_list" value="[% bib_list | html %]" />
355
                            </form>
356
                            </form>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-curbside-pickups.tt (+3 lines)
Lines 190-195 Link Here
190
                                                    <td>[% p.notes | html %]</td>
190
                                                    <td>[% p.notes | html %]</td>
191
                                                    <td>
191
                                                    <td>
192
                                                        <form method="post">
192
                                                        <form method="post">
193
                                                            [% INCLUDE 'csrf-token.inc' %]
193
                                                            <input type="hidden" name="op" value="arrival-alert" />
194
                                                            <input type="hidden" name="op" value="arrival-alert" />
194
                                                            <input type="hidden" name="pickup_id" value="[% p.id | html %]" />
195
                                                            <input type="hidden" name="pickup_id" value="[% p.id | html %]" />
195
                                                            [% IF ! p.staged_datetime || p.arrival_datetime %]
196
                                                            [% IF ! p.staged_datetime || p.arrival_datetime %]
Lines 202-207 Link Here
202
                                                        </form>
203
                                                        </form>
203
                                                        <p>
204
                                                        <p>
204
                                                        <form method="post">
205
                                                        <form method="post">
206
                                                            [% INCLUDE 'csrf-token.inc' %]
205
                                                            <input type="hidden" name="op" value="cancel-pickup" />
207
                                                            <input type="hidden" name="op" value="cancel-pickup" />
206
                                                            <input type="hidden" name="pickup_id" value="[% p.id | html %]" />
208
                                                            <input type="hidden" name="pickup_id" value="[% p.id | html %]" />
207
                                                            [% IF p.delivered_datetime %]
209
                                                            [% IF p.delivered_datetime %]
Lines 229-234 Link Here
229
                                <div role="tabpanel" class="tab-pane active" id="user-schedule-pickup" aria-labelledby="tab-user-schedule-pickup">
231
                                <div role="tabpanel" class="tab-pane active" id="user-schedule-pickup" aria-labelledby="tab-user-schedule-pickup">
230
                                [% END %]
232
                                [% END %]
231
                                    <form id="create-pickup" method="post">
233
                                    <form id="create-pickup" method="post">
234
                                        [% INCLUDE 'csrf-token.inc' %]
232
                                        <fieldset class="rows">
235
                                        <fieldset class="rows">
233
                                            <ol>
236
                                            <ol>
234
                                                <li>
237
                                                <li>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-detail.tt (+2 lines)
Lines 238-243 Link Here
238
                    [% IF ( TagsInputEnabled ) %]
238
                    [% IF ( TagsInputEnabled ) %]
239
                        [% IF ( loggedinusername ) %]
239
                        [% IF ( loggedinusername ) %]
240
                            <form id="tagform[% biblio.biblionumber | html %]" method="post" action="/cgi-bin/koha/opac-tags.pl" style="display:none;">
240
                            <form id="tagform[% biblio.biblionumber | html %]" method="post" action="/cgi-bin/koha/opac-tags.pl" style="display:none;">
241
                                [% INCLUDE 'csrf-token.inc' %]
241
                                <legend class="sr-only">Tags</legend>
242
                                <legend class="sr-only">Tags</legend>
242
                                <div class="form-row">
243
                                <div class="form-row">
243
                                    <div class="col-3">
244
                                    <div class="col-3">
Lines 300-305 Link Here
300
301
301
                    [% IF ( OpacStarRatings != 'disable' ) %]
302
                    [% IF ( OpacStarRatings != 'disable' ) %]
302
                        <form method="post" action="/cgi-bin/koha/opac-ratings.pl">
303
                        <form method="post" action="/cgi-bin/koha/opac-ratings.pl">
304
                            [% INCLUDE 'csrf-token.inc' %]
303
                            <legend class="sr-only">Star ratings</legend>
305
                            <legend class="sr-only">Star ratings</legend>
304
                            <div class="results_summary ratings" id="rating-[% biblio.biblionumber | html %]">
306
                            <div class="results_summary ratings" id="rating-[% biblio.biblionumber | html %]">
305
307
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-downloadcart.tt (+1 lines)
Lines 11-16 Link Here
11
                    <div id="userdownloadcart" class="maincontent">
11
                    <div id="userdownloadcart" class="maincontent">
12
                        <h1>Download cart</h1>
12
                        <h1>Download cart</h1>
13
                        <form method="post" action="/cgi-bin/koha/opac-downloadcart.pl">
13
                        <form method="post" action="/cgi-bin/koha/opac-downloadcart.pl">
14
                            [% INCLUDE 'csrf-token.inc' %]
14
                            <select name="format" id="format">
15
                            <select name="format" id="format">
15
                                <option value="">-- Choose format --</option>
16
                                <option value="">-- Choose format --</option>
16
                                <option value="ris">RIS (Zotero, EndNote, others)</option>
17
                                <option value="ris">RIS (Zotero, EndNote, others)</option>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-downloadshelf.tt (+1 lines)
Lines 59-64 Link Here
59
                                </div>
59
                                </div>
60
                            [% ELSE %]
60
                            [% ELSE %]
61
                                <form method="post" action="/cgi-bin/koha/opac-downloadshelf.pl">
61
                                <form method="post" action="/cgi-bin/koha/opac-downloadshelf.pl">
62
                                    [% INCLUDE 'csrf-token.inc' %]
62
                                    <fieldset>
63
                                    <fieldset>
63
                                        <select name="format" id="dlformat" required="required">
64
                                        <select name="format" id="dlformat" required="required">
64
                                            <legend>Choose format</legend>
65
                                            <legend>Choose format</legend>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-illrequests.tt (+4 lines)
Lines 95-100 Link Here
95
                                [% INCLUDE messages %]
95
                                [% INCLUDE messages %]
96
                                [% IF backends %]
96
                                [% IF backends %]
97
                                    <form method="post" id="illrequestcreate-form" novalidate="novalidate">
97
                                    <form method="post" id="illrequestcreate-form" novalidate="novalidate">
98
                                        [% INCLUDE 'csrf-token.inc' %]
98
                                        <legend class="sr-only">Backends</legend>
99
                                        <legend class="sr-only">Backends</legend>
99
                                        <fieldset class="rows">
100
                                        <fieldset class="rows">
100
                                            <label for="backend">Provider:</label>
101
                                            <label for="backend">Provider:</label>
Lines 180-185 Link Here
180
                            [% INCLUDE messages %]
181
                            [% INCLUDE messages %]
181
                            [% status = request.status %]
182
                            [% status = request.status %]
182
                            <form method="post" action="?method=update" id="illrequestupdate-form" novalidate="novalidate">
183
                            <form method="post" action="?method=update" id="illrequestupdate-form" novalidate="novalidate">
184
                                [% INCLUDE 'csrf-token.inc' %]
183
                                <fieldset class="rows">
185
                                <fieldset class="rows">
184
                                    <legend id="library_legend">Details from library</legend>
186
                                    <legend id="library_legend">Details from library</legend>
185
                                    <ol>
187
                                    <ol>
Lines 253-258 Link Here
253
                            <h1>Interlibrary loan item availability</h1>
255
                            <h1>Interlibrary loan item availability</h1>
254
                            <div id="results">
256
                            <div id="results">
255
                                <form method="POST" action="/cgi-bin/koha/opac-illrequests.pl">
257
                                <form method="POST" action="/cgi-bin/koha/opac-illrequests.pl">
258
                                    [% INCLUDE 'csrf-token.inc' %]
256
                                    <legend><h2>Displaying availability results</h2></legend>
259
                                    <legend><h2>Displaying availability results</h2></legend>
257
                                    [% FOREACH key IN whole.keys %]
260
                                    [% FOREACH key IN whole.keys %]
258
                                        [% value = whole.$key %]
261
                                        [% value = whole.$key %]
Lines 285-290 Link Here
285
                            <div id="results" class="page-section">
288
                            <div id="results" class="page-section">
286
                                [% INCLUDE messages %]
289
                                [% INCLUDE messages %]
287
                                <form method="post" id="typedisclaimer-form">
290
                                <form method="post" id="typedisclaimer-form">
291
                                    [% INCLUDE 'csrf-token.inc' %]
288
                                    <fieldset class="rows">
292
                                    <fieldset class="rows">
289
                                        [% disclaimer.text | $raw %]
293
                                        [% disclaimer.text | $raw %]
290
                                        [% SET disc_av_category_code = AuthorisedValues.GetAuthValueDropbox(disclaimer.av_cat) %]
294
                                        [% SET disc_av_category_code = AuthorisedValues.GetAuthValueDropbox(disclaimer.av_cat) %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-issue-note.tt (+1 lines)
Lines 41-46 Link Here
41
                            Issue notes have not been enabled. Please contact the library.
41
                            Issue notes have not been enabled. Please contact the library.
42
                        [% ELSE %]
42
                        [% ELSE %]
43
                            <form id="issue-note" action="/cgi-bin/koha/opac-issue-note.pl" method="post">
43
                            <form id="issue-note" action="/cgi-bin/koha/opac-issue-note.pl" method="post">
44
                                [% INCLUDE 'csrf-token.inc' %]
44
                                <legend class="sr-only">Edit issue note</legend>
45
                                <legend class="sr-only">Edit issue note</legend>
45
                                <fieldset>
46
                                <fieldset>
46
                                    <label for="note" class="required">Note:</label>
47
                                    <label for="note" class="required">Note:</label>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-main.tt (+1 lines)
Lines 180-185 Link Here
180
                        [% UNLESS ( casAuthentication || shibbolethAuthentication || Koha.Preference('opacShibOnly') ) %]
180
                        [% UNLESS ( casAuthentication || shibbolethAuthentication || Koha.Preference('opacShibOnly') ) %]
181
                            <div id="login">
181
                            <div id="login">
182
                                <form action="/cgi-bin/koha/opac-user.pl" method="post" name="auth" id="auth" autocomplete="off">
182
                                <form action="/cgi-bin/koha/opac-user.pl" method="post" name="auth" id="auth" autocomplete="off">
183
                                    [% INCLUDE 'csrf-token.inc' %]
183
                                    <input type="hidden" name="koha_login_context" value="opac" />
184
                                    <input type="hidden" name="koha_login_context" value="opac" />
184
                                    <fieldset class="brief">
185
                                    <fieldset class="brief">
185
                                        <legend>Log in to your account:</legend>
186
                                        <legend>Log in to your account:</legend>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-memberentry.tt (+1 lines)
Lines 213-218 Link Here
213
                [% END %]
213
                [% END %]
214
214
215
                <form method="post" action="/cgi-bin/koha/opac-memberentry.pl" id="memberentry-form" autocomplete="off">
215
                <form method="post" action="/cgi-bin/koha/opac-memberentry.pl" id="memberentry-form" autocomplete="off">
216
                    [% INCLUDE 'csrf-token.inc' %]
216
217
217
                [% FOREACH field = ['streetnumber' 'streettype'  'cardnumber' 'branchcode' 'categorycode' 'title' 'surname' 'firstname' 'middle_name' 'dateofbirth' 'initials' 'pronouns' 'othernames' 'address' 'address2' 'city' 'state' 'zipcode' 'country' 'phone' 'phonepro' 'mobile' 'email' 'emailpro' 'fax' 'B_streettype' 'B_streetnumber' 'B_address' 'B_address2' 'B_city' 'B_state' 'B_zipcode' 'B_country' 'B_phone' 'B_email' 'contactnote' 'altcontactsurname' 'altcontactfirstname' 'altcontactaddress1' 'altcontactaddress2' 'altcontactaddress3' 'altcontactstate' 'altcontactzipcode' 'altcontactcountry' 'altcontactphone' 'password' ] %]
218
                [% FOREACH field = ['streetnumber' 'streettype'  'cardnumber' 'branchcode' 'categorycode' 'title' 'surname' 'firstname' 'middle_name' 'dateofbirth' 'initials' 'pronouns' 'othernames' 'address' 'address2' 'city' 'state' 'zipcode' 'country' 'phone' 'phonepro' 'mobile' 'email' 'emailpro' 'fax' 'B_streettype' 'B_streetnumber' 'B_address' 'B_address2' 'B_city' 'B_state' 'B_zipcode' 'B_country' 'B_phone' 'B_email' 'contactnote' 'altcontactsurname' 'altcontactfirstname' 'altcontactaddress1' 'altcontactaddress2' 'altcontactaddress3' 'altcontactstate' 'altcontactzipcode' 'altcontactcountry' 'altcontactphone' 'password' ] %]
218
                    [% IF mandatory.defined( field ) %]
219
                    [% IF mandatory.defined( field ) %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-passwd.tt (+2 lines)
Lines 65-70 Link Here
65
                    [% IF logged_in_user.category.effective_change_password %]
65
                    [% IF logged_in_user.category.effective_change_password %]
66
                        [% IF ( Ask_data ) %]
66
                        [% IF ( Ask_data ) %]
67
                            <form action="/cgi-bin/koha/opac-passwd.pl" name="mainform" id="mainform" method="post">
67
                            <form action="/cgi-bin/koha/opac-passwd.pl" name="mainform" id="mainform" method="post">
68
                                [% INCLUDE 'csrf-token.inc' %]
68
                                <legend class="sr-only">Change your password</legend>
69
                                <legend class="sr-only">Change your password</legend>
69
                                <fieldset>
70
                                <fieldset>
70
                                    [% IF ( logged_in_user.category.effective_require_strong_password ) %]
71
                                    [% IF ( logged_in_user.category.effective_require_strong_password ) %]
Lines 102-107 Link Here
102
                            Your password has been changed
103
                            Your password has been changed
103
                        </div>
104
                        </div>
104
                        <form action="/cgi-bin/koha/opac-user.pl" method="post" autocomplete="off">
105
                        <form action="/cgi-bin/koha/opac-user.pl" method="post" autocomplete="off">
106
                            [% INCLUDE 'csrf-token.inc' %]
105
                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
107
                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
106
                            <p><input type="submit" class="btn btn-primary" value="Return to my account" /></p>
108
                            <p><input type="submit" class="btn btn-primary" value="Return to my account" /></p>
107
                        </form>
109
                        </form>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-password-recovery.tt (+2 lines)
Lines 120-125 Link Here
120
                        <div class="alert alert-info">You can't reset your password.</div>
120
                        <div class="alert alert-info">You can't reset your password.</div>
121
                    [% ELSIF (password_recovery) %]
121
                    [% ELSIF (password_recovery) %]
122
                        <form action="/cgi-bin/koha/opac-password-recovery.pl" method="post" autocomplete="off">
122
                        <form action="/cgi-bin/koha/opac-password-recovery.pl" method="post" autocomplete="off">
123
                            [% INCLUDE 'csrf-token.inc' %]
123
                            <legend class="sr-only">Password recovery</legend>
124
                            <legend class="sr-only">Password recovery</legend>
124
                            <input type="hidden" name="koha_login_context" value="opac" />
125
                            <input type="hidden" name="koha_login_context" value="opac" />
125
                            <p>To reset your password, enter your login or your email address.</p>
126
                            <p>To reset your password, enter your login or your email address.</p>
Lines 142-147 Link Here
142
                    [% ELSIF (new_password) %]
143
                    [% ELSIF (new_password) %]
143
                        [% UNLESS ( errLinkNotValid ) %]
144
                        [% UNLESS ( errLinkNotValid ) %]
144
                            <form id="mainform" name="mainform" action="/cgi-bin/koha/opac-password-recovery.pl" method="post" autocomplete="off">
145
                            <form id="mainform" name="mainform" action="/cgi-bin/koha/opac-password-recovery.pl" method="post" autocomplete="off">
146
                                [% INCLUDE 'csrf-token.inc' %]
145
                                <legend class="sr-only">Password not valid</legend>
147
                                <legend class="sr-only">Password not valid</legend>
146
                                <input type="hidden" name="koha_login_context" value="opac" />
148
                                <input type="hidden" name="koha_login_context" value="opac" />
147
                                <fieldset class="brief">
149
                                <fieldset class="brief">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-patron-consent.tt (+1 lines)
Lines 47-52 Link Here
47
                    <h1>Your consents</h1>
47
                    <h1>Your consents</h1>
48
48
49
                    <form action="/cgi-bin/koha/opac-patron-consent.pl" method="post">
49
                    <form action="/cgi-bin/koha/opac-patron-consent.pl" method="post">
50
                        [% INCLUDE 'csrf-token.inc' %]
50
                        [% IF Koha.Preference('PrivacyPolicyConsent') %]
51
                        [% IF Koha.Preference('PrivacyPolicyConsent') %]
51
                        <legend><h2 id="GDPR_consents">Privacy policy consents</h2></legend>
52
                        <legend><h2 id="GDPR_consents">Privacy policy consents</h2></legend>
52
                            <input type="hidden" name="op" value="gdpr_proc_save"/>
53
                            <input type="hidden" name="op" value="gdpr_proc_save"/>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-privacy.tt (+4 lines)
Lines 74-79 Link Here
74
                        <p id="note1">Please note that information on any book still checked-out must be kept by the library no matter which privacy option you choose.</p>
74
                        <p id="note1">Please note that information on any book still checked-out must be kept by the library no matter which privacy option you choose.</p>
75
                        <p id="note2">Please also note that the library staff can't update these values for you: it's your privacy!</p>
75
                        <p id="note2">Please also note that the library staff can't update these values for you: it's your privacy!</p>
76
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-update-form">
76
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-update-form">
77
                            [% INCLUDE 'csrf-token.inc' %]
77
                            <legend class="sr-only">Privacy rule</legend>
78
                            <legend class="sr-only">Privacy rule</legend>
78
                            <input type="hidden" name="op" value="update_privacy" />
79
                            <input type="hidden" name="op" value="update_privacy" />
79
                            <fieldset>
80
                            <fieldset>
Lines 157-172 Link Here
157
                        <p>You can delete all your checkout and hold history immediately by clicking here. <strong>BE CAREFUL</strong>. Once you've confirmed the deletion, no one can retrieve the list!</p>
158
                        <p>You can delete all your checkout and hold history immediately by clicking here. <strong>BE CAREFUL</strong>. Once you've confirmed the deletion, no one can retrieve the list!</p>
158
159
159
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-delete-checkouts">
160
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-delete-checkouts">
161
                            [% INCLUDE 'csrf-token.inc' %]
160
                            <input type="hidden" name="op" value="delete_record" />
162
                            <input type="hidden" name="op" value="delete_record" />
161
                            <input type="hidden" name="checkouts" value="1" />
163
                            <input type="hidden" name="checkouts" value="1" />
162
                        </form>
164
                        </form>
163
165
164
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-delete-holds">
166
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-delete-holds">
167
                            [% INCLUDE 'csrf-token.inc' %]
165
                            <input type="hidden" name="op" value="delete_record" />
168
                            <input type="hidden" name="op" value="delete_record" />
166
                            <input type="hidden" name="holds" value="1" />
169
                            <input type="hidden" name="holds" value="1" />
167
                        </form>
170
                        </form>
168
171
169
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-delete-all">
172
                        <form action="/cgi-bin/koha/opac-privacy.pl" method="post" id="opac-privacy-delete-all">
173
                            [% INCLUDE 'csrf-token.inc' %]
170
                            <input type="hidden" name="op" value="delete_record" />
174
                            <input type="hidden" name="op" value="delete_record" />
171
                            <input type="hidden" name="all" value="1" />
175
                            <input type="hidden" name="all" value="1" />
172
                        </form>
176
                        </form>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-recall.tt (+1 lines)
Lines 66-71 Link Here
66
                                <div class="dialog">
66
                                <div class="dialog">
67
67
68
                                    <form id="recallform" action="/cgi-bin/koha/opac-recall.pl" method="post">
68
                                    <form id="recallform" action="/cgi-bin/koha/opac-recall.pl" method="post">
69
                                        [% INCLUDE 'csrf-token.inc' %]
69
                                        <fieldset class="rows" id="options">
70
                                        <fieldset class="rows" id="options">
70
                                            <legend>Place a recall on <b>[% biblio.title | html %]</b> ([% biblio.author | html %])?</legend>
71
                                            <legend>Place a recall on <b>[% biblio.title | html %]</b> ([% biblio.author | html %])?</legend>
71
                                            <ul>
72
                                            <ul>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-recalls.tt (+1 lines)
Lines 113-118 Link Here
113
                                                    <td class="cancelrecall">
113
                                                    <td class="cancelrecall">
114
                                                        [% IF ( RECALL.requested or RECALL.overdue ) %]
114
                                                        [% IF ( RECALL.requested or RECALL.overdue ) %]
115
                                                            <form action="/cgi-bin/koha/opac-recall.pl" method="post">
115
                                                            <form action="/cgi-bin/koha/opac-recall.pl" method="post">
116
                                                                [% INCLUDE 'csrf-token.inc' %]
116
                                                                <input type="hidden" name="op" value="cancel">
117
                                                                <input type="hidden" name="op" value="cancel">
117
                                                                <input type="hidden" name="recall_id" value="[% RECALL.id | html %]">
118
                                                                <input type="hidden" name="recall_id" value="[% RECALL.id | html %]">
118
                                                                <input type="hidden" name="biblionumber" value="[% RECALL.biblio_id | html %]">
119
                                                                <input type="hidden" name="biblionumber" value="[% RECALL.biblio_id | html %]">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-registration-confirmation.tt (+1 lines)
Lines 83-88 Link Here
83
                        [% UNLESS ( casAuthentication ) %]
83
                        [% UNLESS ( casAuthentication ) %]
84
                            <div id="login">
84
                            <div id="login">
85
                                <form action="/cgi-bin/koha/opac-user.pl" method="post" name="auth" id="auth" autocomplete="off">
85
                                <form action="/cgi-bin/koha/opac-user.pl" method="post" name="auth" id="auth" autocomplete="off">
86
                                    [% INCLUDE 'csrf-token.inc' %]
86
                                    <input type="hidden" name="koha_login_context" value="opac" />
87
                                    <input type="hidden" name="koha_login_context" value="opac" />
87
                                    <fieldset class="brief">
88
                                    <fieldset class="brief">
88
                                        <legend>Log in to your account:</legend>
89
                                        <legend>Log in to your account:</legend>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-reportproblem.tt (+1 lines)
Lines 55-60 Link Here
55
55
56
                    <div id="reportproblem" class="maincontent toptabs">
56
                    <div id="reportproblem" class="maincontent toptabs">
57
                        <form name="reportlibform" action="/cgi-bin/koha/opac-reportproblem.pl" method="post">
57
                        <form name="reportlibform" action="/cgi-bin/koha/opac-reportproblem.pl" method="post">
58
                            [% INCLUDE 'csrf-token.inc' %]
58
                            <legend class="sr-only">Report a problem</legend>
59
                            <legend class="sr-only">Report a problem</legend>
59
                            <input type="hidden" name="op" value="addreport" />
60
                            <input type="hidden" name="op" value="addreport" />
60
                            <fieldset class="rows">
61
                            <fieldset class="rows">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-request-article.tt (+1 lines)
Lines 65-70 Link Here
65
                    [% END %]
65
                    [% END %]
66
66
67
                        <form id="place-article-request" method="post" action="/cgi-bin/koha/opac-request-article.pl">
67
                        <form id="place-article-request" method="post" action="/cgi-bin/koha/opac-request-article.pl">
68
                            [% INCLUDE 'csrf-token.inc' %]
68
                            <legend class="sr-only">Place article request</legend>
69
                            <legend class="sr-only">Place article request</legend>
69
                            <input type="hidden" name="action" value="create" />
70
                            <input type="hidden" name="action" value="create" />
70
                            <input type="hidden" name="biblionumber" id="biblionumber" value="[% biblio.biblionumber | html %]" />
71
                            <input type="hidden" name="biblionumber" id="biblionumber" value="[% biblio.biblionumber | html %]" />
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-reserve.tt (+1 lines)
Lines 148-153 Link Here
148
                [% END %]
148
                [% END %]
149
149
150
            <form action="/cgi-bin/koha/opac-reserve.pl" method="post" id="hold-request-form">
150
            <form action="/cgi-bin/koha/opac-reserve.pl" method="post" id="hold-request-form">
151
                [% INCLUDE 'csrf-token.inc' %]
151
                <legend class="sr-only">Hold requests</legend>
152
                <legend class="sr-only">Hold requests</legend>
152
                <input type="hidden" name="place_reserve" value="1"/>
153
                <input type="hidden" name="place_reserve" value="1"/>
153
                <!-- These values are set dynamically by js -->
154
                <!-- These values are set dynamically by js -->
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-reset-password.tt (+1 lines)
Lines 75-80 Link Here
75
                            </div>
75
                            </div>
76
                        [% ELSE %]
76
                        [% ELSE %]
77
                        <form action="/cgi-bin/koha/opac-reset-password.pl" name="mainform" id="mainform" method="post" autocomplete="off">
77
                        <form action="/cgi-bin/koha/opac-reset-password.pl" name="mainform" id="mainform" method="post" autocomplete="off">
78
                            [% INCLUDE 'csrf-token.inc' %]
78
                            <legend class="sr-only">Reset your password</legend>
79
                            <legend class="sr-only">Reset your password</legend>
79
80
80
                            <fieldset class="brief">
81
                            <fieldset class="brief">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-review.tt (+1 lines)
Lines 40-45 Link Here
40
                        <h2>Comments on <em>[% INCLUDE 'biblio-title.inc' %]</em></h2>
40
                        <h2>Comments on <em>[% INCLUDE 'biblio-title.inc' %]</em></h2>
41
                        [% IF ( biblio.author ) %]<h3>[% biblio.author | html %]</h3>[% END %]
41
                        [% IF ( biblio.author ) %]<h3>[% biblio.author | html %]</h3>[% END %]
42
                        <form id="reviewf" action="/cgi-bin/koha/opac-review.pl" method="post">
42
                        <form id="reviewf" action="/cgi-bin/koha/opac-review.pl" method="post">
43
                            [% INCLUDE 'csrf-token.inc' %]
43
                            <legend class="sr-only">Comments</legend>
44
                            <legend class="sr-only">Comments</legend>
44
                            <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]" />
45
                            <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html %]" />
45
                            [% IF ( reviewid ) %]<input type="hidden" name="reviewid" value="[% reviewid | html %]" />[% END %]
46
                            [% IF ( reviewid ) %]<input type="hidden" name="reviewid" value="[% reviewid | html %]" />[% END %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-search-history.tt (+4 lines)
Lines 86-91 Link Here
86
        [% IF ( current_biblio_searches ) %]
86
        [% IF ( current_biblio_searches ) %]
87
            <h2>Current session</h2>
87
            <h2>Current session</h2>
88
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
88
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
89
                [% INCLUDE 'csrf-token.inc' %]
89
                <legend class="sr-only">Toolbar control</legend>
90
                <legend class="sr-only">Toolbar control</legend>
90
91
91
                [% INCLUDE 'toolbar_controls' %]
92
                [% INCLUDE 'toolbar_controls' %]
Lines 133-138 Link Here
133
        [% IF ( previous_biblio_searches ) %]
134
        [% IF ( previous_biblio_searches ) %]
134
            <h2>Previous sessions</h2>
135
            <h2>Previous sessions</h2>
135
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
136
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
137
                [% INCLUDE 'csrf-token.inc' %]
136
                <legend class="sr-only">Toolbar control</legend>
138
                <legend class="sr-only">Toolbar control</legend>
137
                [% INCLUDE 'toolbar_controls' %]
139
                [% INCLUDE 'toolbar_controls' %]
138
140
Lines 188-193 Link Here
188
        [% IF ( current_authority_searches ) %]
190
        [% IF ( current_authority_searches ) %]
189
            <h2>Current session</h2>
191
            <h2>Current session</h2>
190
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
192
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
193
                [% INCLUDE 'csrf-token.inc' %]
191
                <legend class="sr-only">Toolbar control</legend>
194
                <legend class="sr-only">Toolbar control</legend>
192
                [% INCLUDE 'toolbar_controls' %]
195
                [% INCLUDE 'toolbar_controls' %]
193
                <input type="hidden" name="action" value="delete" />
196
                <input type="hidden" name="action" value="delete" />
Lines 229-234 Link Here
229
        [% IF ( previous_authority_searches ) %]
232
        [% IF ( previous_authority_searches ) %]
230
            <h2>Previous sessions</h2>
233
            <h2>Previous sessions</h2>
231
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
234
            <form action="/cgi-bin/koha/opac-search-history.pl" method="post">
235
                [% INCLUDE 'csrf-token.inc' %]
232
                <legend class="sr-only">Toolbar control</legend>
236
                <legend class="sr-only">Toolbar control</legend>
233
                [% INCLUDE 'toolbar_controls' %]
237
                [% INCLUDE 'toolbar_controls' %]
234
                <input type="hidden" name="action" value="delete" />
238
                <input type="hidden" name="action" value="delete" />
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-sendbasketform.tt (+1 lines)
Lines 28-33 Link Here
28
28
29
                        [% ELSE %]
29
                        [% ELSE %]
30
                            <form action="/cgi-bin/koha/opac-sendbasket.pl" method="post" id="sendbasketform">
30
                            <form action="/cgi-bin/koha/opac-sendbasket.pl" method="post" id="sendbasketform">
31
                                [% INCLUDE 'csrf-token.inc' %]
31
                                <fieldset class="brief">
32
                                <fieldset class="brief">
32
                                    <legend><h1>Sending your cart</h1></legend>
33
                                    <legend><h1>Sending your cart</h1></legend>
33
                                    <label for="email_add">Email address:</label>
34
                                    <label for="email_add">Email address:</label>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-sendshelfform.tt (+1 lines)
Lines 31-36 Link Here
31
                                <p><a class="button close" href="/cgi-bin/koha/opac-shelves.pl?op=view&amp;shelfnumber=[% shelfid | html %]">Back to lists</a></p>
31
                                <p><a class="button close" href="/cgi-bin/koha/opac-shelves.pl?op=view&amp;shelfnumber=[% shelfid | html %]">Back to lists</a></p>
32
                            [% ELSE %]
32
                            [% ELSE %]
33
                                <form action="/cgi-bin/koha/opac-sendshelf.pl" method="post" id="sendshelfform">
33
                                <form action="/cgi-bin/koha/opac-sendshelf.pl" method="post" id="sendshelfform">
34
                                    [% INCLUDE 'csrf-token.inc' %]
34
                                    <fieldset class="brief">
35
                                    <fieldset class="brief">
35
                                        <legend><h1>Sending your list</h1></legend>
36
                                        <legend><h1>Sending your list</h1></legend>
36
                                        <label for="email">Email address:</label>
37
                                        <label for="email">Email address:</label>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-serial-issues.tt (+1 lines)
Lines 55-60 Link Here
55
                            <span class="view"><a id="Fullhistory" href="opac-serial-issues.pl?selectview=full&amp;biblionumber=[% biblionumber | html %]" class="button">Full history</a></span>
55
                            <span class="view"><a id="Fullhistory" href="opac-serial-issues.pl?selectview=full&amp;biblionumber=[% biblionumber | html %]" class="button">Full history</a></span>
56
                        </div>
56
                        </div>
57
                        <form method="post" name="f">
57
                        <form method="post" name="f">
58
                            [% INCLUDE 'csrf-token.inc' %]
58
                            [% FOREACH subscription_LOO IN subscription_LOOP %]
59
                            [% FOREACH subscription_LOO IN subscription_LOOP %]
59
                                <div id="subscriptionline[% subscription_LOO.subscriptionid | html %]" class="subscriptionline">
60
                                <div id="subscriptionline[% subscription_LOO.subscriptionid | html %]" class="subscriptionline">
60
                                    <caption><h2>Subscription information for [% subscription_LOO.bibliotitle | html %]</h2><caption>
61
                                    <caption><h2>Subscription information for [% subscription_LOO.bibliotitle | html %]</h2><caption>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves.tt (+12 lines)
Lines 10-15 Link Here
10
10
11
[% BLOCK delete_shelf %]
11
[% BLOCK delete_shelf %]
12
    <form action="/cgi-bin/koha/opac-shelves.pl" method="post" id="deleteshelf[% shelf.shelfnumber | html %]" class="d-inline">
12
    <form action="/cgi-bin/koha/opac-shelves.pl" method="post" id="deleteshelf[% shelf.shelfnumber | html %]" class="d-inline">
13
        [% INCLUDE 'csrf-token.inc' %]
13
        <input type="hidden" name="op" value="delete" />
14
        <input type="hidden" name="op" value="delete" />
14
        <input type="hidden" name="referer" value="list" />
15
        <input type="hidden" name="referer" value="list" />
15
        <input type='hidden' name='public' value='[% public | html %]' />
16
        <input type='hidden' name='public' value='[% public | html %]' />
Lines 249-254 Link Here
249
                                        [% IF can_manage_shelf %]
250
                                        [% IF can_manage_shelf %]
250
                                            <span class="sep">|</span>
251
                                            <span class="sep">|</span>
251
                                            <form method="post" action="/cgi-bin/koha/opac-shelves.pl" class="d-inline">
252
                                            <form method="post" action="/cgi-bin/koha/opac-shelves.pl" class="d-inline">
253
                                                [% INCLUDE 'csrf-token.inc' %]
252
                                                <input type="hidden" name="op" value="edit_form" />
254
                                                <input type="hidden" name="op" value="edit_form" />
253
                                                <input type="hidden" name="referer" value="view" />
255
                                                <input type="hidden" name="referer" value="view" />
254
                                                <input type='hidden' name='public' value='[% shelf.public | html %]' />
256
                                                <input type='hidden' name='public' value='[% shelf.public | html %]' />
Lines 263-268 Link Here
263
                                            [% END %]
265
                                            [% END %]
264
                                        [% ELSIF !public # not manageshelf and private means shared %]
266
                                        [% ELSIF !public # not manageshelf and private means shared %]
265
                                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" id="unshare[% shelf.shelfnumber | html %]" class="d-inline">
267
                                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" id="unshare[% shelf.shelfnumber | html %]" class="d-inline">
268
                                                [% INCLUDE 'csrf-token.inc' %]
266
                                                <input type="hidden" name="op" value="remove_share" />
269
                                                <input type="hidden" name="op" value="remove_share" />
267
                                                <input type="hidden" name="referer" value="list" />
270
                                                <input type="hidden" name="referer" value="list" />
268
                                                <input type='hidden' name='public' value='[% public | html %]' />
271
                                                <input type='hidden' name='public' value='[% public | html %]' />
Lines 384-389 Link Here
384
                            </div> <!-- /#floating -->
387
                            </div> <!-- /#floating -->
385
388
386
                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" id="myform" name="myform">
389
                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" id="myform" name="myform">
390
                                [% INCLUDE 'csrf-token.inc' %]
387
                                [% IF can_manage_shelf %]
391
                                [% IF can_manage_shelf %]
388
                                    <input type="hidden" name="op" value="remove_biblios" />
392
                                    <input type="hidden" name="op" value="remove_biblios" />
389
                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
393
                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
Lines 547-552 Link Here
547
                                    [% IF can_manage_shelf %]
551
                                    [% IF can_manage_shelf %]
548
                                        <span class="sep">|</span>
552
                                        <span class="sep">|</span>
549
                                        <form method="post" action="/cgi-bin/koha/opac-shelves.pl" class="d-inline">
553
                                        <form method="post" action="/cgi-bin/koha/opac-shelves.pl" class="d-inline">
554
                                            [% INCLUDE 'csrf-token.inc' %]
550
                                            <input type="hidden" name="op" value="edit_form" />
555
                                            <input type="hidden" name="op" value="edit_form" />
551
                                            <input type="hidden" name="referer" value="view" />
556
                                            <input type="hidden" name="referer" value="view" />
552
                                            <input type="hidden" name="public" value="[% shelf.public | html %]" />
557
                                            <input type="hidden" name="public" value="[% shelf.public | html %]" />
Lines 569-574 Link Here
569
574
570
                            [% IF can_manage_shelf %]
575
                            [% IF can_manage_shelf %]
571
                                <form method="post" action="opac-shelves.pl">
576
                                <form method="post" action="opac-shelves.pl">
577
                                    [% INCLUDE 'csrf-token.inc' %]
572
                                    <input type="hidden" name="op" value="delete" />
578
                                    <input type="hidden" name="op" value="delete" />
573
                                    <input type="hidden" name="referer" value="list" />
579
                                    <input type="hidden" name="referer" value="list" />
574
                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]"/>
580
                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]"/>
Lines 580-585 Link Here
580
586
581
                    [% IF op == 'add_form' OR op == 'edit_form' %]
587
                    [% IF op == 'add_form' OR op == 'edit_form' %]
582
                        <form method="post" action="/cgi-bin/koha/opac-shelves.pl">
588
                        <form method="post" action="/cgi-bin/koha/opac-shelves.pl">
589
                            [% INCLUDE 'csrf-token.inc' %]
583
                            <fieldset class="rows">
590
                            <fieldset class="rows">
584
                                [% IF op == 'add_form' %]
591
                                [% IF op == 'add_form' %]
585
                                    <div id="addshelf">
592
                                    <div id="addshelf">
Lines 668-673 Link Here
668
                        <h1>Transfer ownership of shared list '[% shelf.shelfname | html %]'</h1>
675
                        <h1>Transfer ownership of shared list '[% shelf.shelfname | html %]'</h1>
669
                        <br/>
676
                        <br/>
670
                        <form action="/cgi-bin/koha/opac-shelves.pl" id="transferform" method="post">
677
                        <form action="/cgi-bin/koha/opac-shelves.pl" id="transferform" method="post">
678
                            [% INCLUDE 'csrf-token.inc' %]
671
                        <fieldset>
679
                        <fieldset>
672
                            <input type="hidden" name="op" value="transfer" />
680
                            <input type="hidden" name="op" value="transfer" />
673
                            <input type="hidden" name="public" value="0" />
681
                            <input type="hidden" name="public" value="0" />
Lines 764-769 Link Here
764
                                                    <td>
772
                                                    <td>
765
                                                        [% IF s.can_be_managed( loggedinusernumber ) %]
773
                                                        [% IF s.can_be_managed( loggedinusernumber ) %]
766
                                                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" class="d-inline">
774
                                                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" class="d-inline">
775
                                                                [% INCLUDE 'csrf-token.inc' %]
767
                                                                <input type="hidden" name="shelfnumber" value="[% s.shelfnumber | html %]" />
776
                                                                <input type="hidden" name="shelfnumber" value="[% s.shelfnumber | html %]" />
768
                                                                <input type="hidden" name="public" value="[% s.public | html %]" />
777
                                                                <input type="hidden" name="public" value="[% s.public | html %]" />
769
                                                                <input type="hidden" name="op" value="edit_form" />
778
                                                                <input type="hidden" name="op" value="edit_form" />
Lines 779-784 Link Here
779
                                                        [% END %]
788
                                                        [% END %]
780
                                                        [% IF s.is_shared AND s.can_be_managed( loggedinusernumber ) %]
789
                                                        [% IF s.is_shared AND s.can_be_managed( loggedinusernumber ) %]
781
                                                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" class="d-inline">
790
                                                            <form action="/cgi-bin/koha/opac-shelves.pl" method="post" class="d-inline">
791
                                                                [% INCLUDE 'csrf-token.inc' %]
782
                                                                <input type="hidden" name="shelfnumber" value="[% s.shelfnumber | html %]" />
792
                                                                <input type="hidden" name="shelfnumber" value="[% s.shelfnumber | html %]" />
783
                                                                <input type="hidden" name="public" value="0" />
793
                                                                <input type="hidden" name="public" value="0" />
784
                                                                <input type="hidden" name="op" value="transfer" />
794
                                                                <input type="hidden" name="op" value="transfer" />
Lines 788-793 Link Here
788
                                                        [% END %]
798
                                                        [% END %]
789
                                                        [% IF s.is_shared_with( loggedinusernumber ) %]
799
                                                        [% IF s.is_shared_with( loggedinusernumber ) %]
790
                                                            <form action="opac-shelves.pl" method="post" id="unshare[% s.shelfnumber | html %]" class="d-inline">
800
                                                            <form action="opac-shelves.pl" method="post" id="unshare[% s.shelfnumber | html %]" class="d-inline">
801
                                                                [% INCLUDE 'csrf-token.inc' %]
791
                                                                <input type="hidden" name="op" value="remove_share" />
802
                                                                <input type="hidden" name="op" value="remove_share" />
792
                                                                <input type="hidden" name="referer" value="list" />
803
                                                                <input type="hidden" name="referer" value="list" />
793
                                                                <input type='hidden' name='public' value='[% public | html %]' />
804
                                                                <input type='hidden' name='public' value='[% public | html %]' />
Lines 823-828 Link Here
823
</div> <!-- / .main -->
834
</div> <!-- / .main -->
824
835
825
<form method="post" id="download_list" action="/cgi-bin/koha/opac-downloadshelf.pl">
836
<form method="post" id="download_list" action="/cgi-bin/koha/opac-downloadshelf.pl">
837
    [% INCLUDE 'csrf-token.inc' %]
826
    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
838
    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
827
    <input type="hidden" name="format" id="download_format" value="" />
839
    <input type="hidden" name="format" id="download_format" value="" />
828
</form>
840
</form>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-suggestions.tt (+2 lines)
Lines 75-80 Link Here
75
                            [% END %]
75
                            [% END %]
76
76
77
                            <form action="/cgi-bin/koha/opac-suggestions.pl" method="post" id="add_suggestion_form">
77
                            <form action="/cgi-bin/koha/opac-suggestions.pl" method="post" id="add_suggestion_form">
78
                                [% INCLUDE 'csrf-token.inc' %]
78
                                <fieldset class="rows">
79
                                <fieldset class="rows">
79
                                    <ol>
80
                                    <ol>
80
                                        [% IF Koha.Preference( 'OPACSuggestionAutoFill' ) %]
81
                                        [% IF Koha.Preference( 'OPACSuggestionAutoFill' ) %]
Lines 368-373 Link Here
368
                            [% IF suggestions.size > 0 %]
369
                            [% IF suggestions.size > 0 %]
369
                                [% SET can_delete_suggestion = 0 %]
370
                                [% SET can_delete_suggestion = 0 %]
370
                                <form action="/cgi-bin/koha/opac-suggestions.pl" method="post" id="delete_suggestions">
371
                                <form action="/cgi-bin/koha/opac-suggestions.pl" method="post" id="delete_suggestions">
372
                                    [% INCLUDE 'csrf-token.inc' %]
371
                                    <input type="hidden" name="op" value="delete_confirm" />
373
                                    <input type="hidden" name="op" value="delete_confirm" />
372
                                    [% IF ( loggedinusername || ( Koha.Preference( 'AnonSuggestions' ) == 1 ) ) %]
374
                                    [% IF ( loggedinusername || ( Koha.Preference( 'AnonSuggestions' ) == 1 ) ) %]
373
                                        <div id="toolbar" class="toolbar clearfix">
375
                                        <div id="toolbar" class="toolbar clearfix">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-tags.tt (+1 lines)
Lines 133-138 Link Here
133
133
134
                        [% IF ( MY_TAGS ) %]
134
                        [% IF ( MY_TAGS ) %]
135
                        <form id="deletetags" method="post" action="opac-tags.pl">
135
                        <form id="deletetags" method="post" action="opac-tags.pl">
136
                            [% INCLUDE 'csrf-token.inc' %]
136
                            <table id="mytagst" class="table table-bordered table-striped">
137
                            <table id="mytagst" class="table table-bordered table-striped">
137
                            <caption>Your tags</caption>
138
                            <caption>Your tags</caption>
138
                                <thead>
139
                                <thead>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-tags_subject.tt (+1 lines)
Lines 43-48 Link Here
43
                                    <fieldset>
43
                                    <fieldset>
44
                                        <legend>Show</legend>
44
                                        <legend>Show</legend>
45
                                        <form class="form-inline" action="/cgi-bin/koha/opac-tags_subject.pl" method="post">
45
                                        <form class="form-inline" action="/cgi-bin/koha/opac-tags_subject.pl" method="post">
46
                                            [% INCLUDE 'csrf-token.inc' %]
46
                                            <p>up to <input type="text" name="number" value="[% number | html %]" size="4" maxlength="4" /> subjects <input type="submit" class="btn btn-primary" value="OK" /></p>
47
                                            <p>up to <input type="text" name="number" value="[% number | html %]" size="4" maxlength="4" /> subjects <input type="submit" class="btn btn-primary" value="OK" /></p>
47
                                        </form>
48
                                        </form>
48
                                    </fieldset>
49
                                    </fieldset>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt (+5 lines)
Lines 221-226 Link Here
221
221
222
                    [% IF Koha.Preference('AllowPatronToControlAutorenewal') %]
222
                    [% IF Koha.Preference('AllowPatronToControlAutorenewal') %]
223
                    <form id="autorenewal_option" action="/cgi-bin/koha/opac-user.pl" method="post">
223
                    <form id="autorenewal_option" action="/cgi-bin/koha/opac-user.pl" method="post">
224
                        [% INCLUDE 'csrf-token.inc' %]
224
                        <legend class="sr-only">Auto-renewal</legend>
225
                        <legend class="sr-only">Auto-renewal</legend>
225
                            <label for="yes-autorenew_checkouts">
226
                            <label for="yes-autorenew_checkouts">
226
                                Allow auto-renewal:
227
                                Allow auto-renewal:
Lines 320-325 Link Here
320
                            [% WRAPPER tab_panel tabname="opac-user-checkouts" %]
321
                            [% WRAPPER tab_panel tabname="opac-user-checkouts" %]
321
                                [% IF ( issues_count ) %]
322
                                [% IF ( issues_count ) %]
322
                                    <form id="renewselected" action="/cgi-bin/koha/opac-renew.pl" method="post">
323
                                    <form id="renewselected" action="/cgi-bin/koha/opac-renew.pl" method="post">
324
                                        [% INCLUDE 'csrf-token.inc' %]
323
                                        <legend class="sr-only">Renew selected</legend>
325
                                        <legend class="sr-only">Renew selected</legend>
324
                                        <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]">
326
                                        <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]">
325
                                        <input type="hidden" name="from" value="opac_user" />
327
                                        <input type="hidden" name="from" value="opac_user" />
Lines 559-564 Link Here
559
561
560
                                    [% IF ( canrenew && !userdebarred && OpacRenewalAllowed && !( logged_in_user.is_expired && logged_in_user.category.effective_BlockExpiredPatronOpacActions ) ) %]
562
                                    [% IF ( canrenew && !userdebarred && OpacRenewalAllowed && !( logged_in_user.is_expired && logged_in_user.category.effective_BlockExpiredPatronOpacActions ) ) %]
561
                                        <form id="renewall" class="js-hide" action="/cgi-bin/koha/opac-renew.pl" method="post">
563
                                        <form id="renewall" class="js-hide" action="/cgi-bin/koha/opac-renew.pl" method="post">
564
                                            [% INCLUDE 'csrf-token.inc' %]
562
                                            <legend class="sr-only">Renew</legend>
565
                                            <legend class="sr-only">Renew</legend>
563
                                            <input type="hidden" name="from" value="opac_user" />
566
                                            <input type="hidden" name="from" value="opac_user" />
564
                                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
567
                                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html %]" />
Lines 903-908 Link Here
903
                                                <td class="cancelrecall">
906
                                                <td class="cancelrecall">
904
                                                    [% IF ( RECALL.requested or RECALL.overdue ) %]
907
                                                    [% IF ( RECALL.requested or RECALL.overdue ) %]
905
                                                        <form action="/cgi-bin/koha/opac-recall.pl" method="post">
908
                                                        <form action="/cgi-bin/koha/opac-recall.pl" method="post">
909
                                                            [% INCLUDE 'csrf-token.inc' %]
906
                                                            <input type="hidden" name="op" value="cancel">
910
                                                            <input type="hidden" name="op" value="cancel">
907
                                                            <input type="hidden" name="recall_id" value="[% RECALL.id | html %]">
911
                                                            <input type="hidden" name="recall_id" value="[% RECALL.id | html %]">
908
                                                            <input type="hidden" name="biblionumber" value="[% RECALL.biblio_id | html %]">
912
                                                            <input type="hidden" name="biblionumber" value="[% RECALL.biblio_id | html %]">
Lines 1043-1048 Link Here
1043
    <div class="modal-dialog">
1047
    <div class="modal-dialog">
1044
        <div class="modal-content">
1048
        <div class="modal-content">
1045
            <form action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
1049
            <form action="/cgi-bin/koha/opac-modrequest-suspend.pl" method="post">
1050
                [% INCLUDE 'csrf-token.inc' %]
1046
                <div class="modal-header">
1051
                <div class="modal-header">
1047
                    [% IF HOLD.suspend %]
1052
                    [% IF HOLD.suspend %]
1048
                        <h5 class="modal-title" id="suspendModalLabel">Resume hold</h5>
1053
                        <h5 class="modal-title" id="suspendModalLabel">Resume hold</h5>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/sci/sci-main.tt (+2 lines)
Lines 101-106 Link Here
101
                                    </table>
101
                                    </table>
102
                                    <div>
102
                                    <div>
103
                                        <form method="post" action="#" id="finish_form">
103
                                        <form method="post" action="#" id="finish_form">
104
                                            [% INCLUDE 'csrf-token.inc' %]
104
                                            <legend class="sr-only">Finish</legend>
105
                                            <legend class="sr-only">Finish</legend>
105
                                            <button id="sci_finish_button" type="submit" class="btn btn-primary"><i class="fa fa-check" aria-hidden="true"></i> Finish</button>
106
                                            <button id="sci_finish_button" type="submit" class="btn btn-primary"><i class="fa fa-check" aria-hidden="true"></i> Finish</button>
106
                                        </form>
107
                                        </form>
Lines 115-120 Link Here
115
                        [%# Prompt for barcodes %]
116
                        [%# Prompt for barcodes %]
116
                        <div id="new_checkins" class="sci_entry">
117
                        <div id="new_checkins" class="sci_entry">
117
                            <form id="scan_form" name="scan_form" method="post" action="/cgi-bin/koha/sci/sci-main.pl">
118
                            <form id="scan_form" name="scan_form" method="post" action="/cgi-bin/koha/sci/sci-main.pl">
119
                                [% INCLUDE 'csrf-token.inc' %]
118
                                <legend class="sr-only">Scan</legend>
120
                                <legend class="sr-only">Scan</legend>
119
                                <div class="row">
121
                                <div class="row">
120
                                    <div class="col-auto">
122
                                    <div class="col-auto">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/sco/sco-main.tt (-1 / +9 lines)
Lines 94-99 Link Here
94
94
95
                            [% IF ( returnitem && Koha.Preference('SCOAllowCheckin') ) %]
95
                            [% IF ( returnitem && Koha.Preference('SCOAllowCheckin') ) %]
96
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="errorForm" class="inline" method="post">
96
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="errorForm" class="inline" method="post">
97
                                    [% INCLUDE 'csrf-token.inc' %]
97
                                    <legend class="sr-only">Return</legend>
98
                                    <legend class="sr-only">Return</legend>
98
                                    <input type="hidden" name="op" value="returnbook" />
99
                                    <input type="hidden" name="op" value="returnbook" />
99
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
100
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
Lines 104-109 Link Here
104
                            [% END %]
105
                            [% END %]
105
106
106
                            <form action="/cgi-bin/koha/sco/sco-main.pl" name="errorForm" class="inline" method="post">
107
                            <form action="/cgi-bin/koha/sco/sco-main.pl" name="errorForm" class="inline" method="post">
108
                                [% INCLUDE 'csrf-token.inc' %]
107
                                <legend class="sr-only">Error</legend>
109
                                <legend class="sr-only">Error</legend>
108
                                <input type="hidden" name="op" value="" />
110
                                <input type="hidden" name="op" value="" />
109
                                <input type="hidden" name="patronid" value="[% patronid | html %]" />
111
                                <input type="hidden" name="patronid" value="[% patronid | html %]" />
Lines 123-128 Link Here
123
125
124
                            [% IF ( renew && Koha.Preference('SCOAllowCheckin') ) %]
126
                            [% IF ( renew && Koha.Preference('SCOAllowCheckin') ) %]
125
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
127
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
128
                                    [% INCLUDE 'csrf-token.inc' %]
126
                                    <legend class="sr-only">Return</legend>
129
                                    <legend class="sr-only">Return</legend>
127
                                    <input type="hidden" name="op" value="returnbook" />
130
                                    <input type="hidden" name="op" value="returnbook" />
128
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
131
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
Lines 135-140 Link Here
135
138
136
                            [% UNLESS ( renew ) %]
139
                            [% UNLESS ( renew ) %]
137
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
140
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
141
                                    [% INCLUDE 'csrf-token.inc' %]
138
                                    <legend class="sr-only">Renew</legend>
142
                                    <legend class="sr-only">Renew</legend>
139
                                    <input type="hidden" name="op" value="renew" />
143
                                    <input type="hidden" name="op" value="renew" />
140
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
144
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
Lines 145-150 Link Here
145
                                  </form>
149
                                  </form>
146
                            [% ELSE %]
150
                            [% ELSE %]
147
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
151
                                <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
152
                                    [% INCLUDE 'csrf-token.inc' %]
148
                                    <legend class="sr-only">Renew</legend>
153
                                    <legend class="sr-only">Renew</legend>
149
                                    <input type="hidden" name="op" value="renew" />
154
                                    <input type="hidden" name="op" value="renew" />
150
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
155
                                    <input type="hidden" name="patronid" value="[% patronid | html %]" />
Lines 156-161 Link Here
156
                            [% END %]
161
                            [% END %]
157
162
158
                            <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
163
                            <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
164
                                [% INCLUDE 'csrf-token.inc' %]
159
                                <legend class="sr-only">Cancel</legend>
165
                                <legend class="sr-only">Cancel</legend>
160
                                <input type="hidden" name="op" value="" />
166
                                <input type="hidden" name="op" value="" />
161
                                <input type="hidden" name="patronid" value="[% patronid | html %]" />
167
                                <input type="hidden" name="patronid" value="[% patronid | html %]" />
Lines 242-247 Link Here
242
                        [% IF ( validuser ) %]
248
                        [% IF ( validuser ) %]
243
                            <div id="newcheckout" class="sco_entry">
249
                            <div id="newcheckout" class="sco_entry">
244
                                <form id="scan_form" name="scan_form" method="post" action="/cgi-bin/koha/sco/sco-main.pl" onsubmit="return checkout_confirm('[% patronid | html %]');">
250
                                <form id="scan_form" name="scan_form" method="post" action="/cgi-bin/koha/sco/sco-main.pl" onsubmit="return checkout_confirm('[% patronid | html %]');">
251
                                    [% INCLUDE 'csrf-token.inc' %]
245
                                    <legend><h2>
252
                                    <legend><h2>
246
                                        [% IF ( Koha.Preference('SCOAllowCheckin') ) %]
253
                                        [% IF ( Koha.Preference('SCOAllowCheckin') ) %]
247
                                            <span>Check out, return, or renew an item:</span>
254
                                            <span>Check out, return, or renew an item:</span>
Lines 343-348 Link Here
343
                                                    [% END %]
350
                                                    [% END %]
344
                                                    <td>
351
                                                    <td>
345
                                                        <form action="/cgi-bin/koha/sco/sco-main.pl" method="post">
352
                                                        <form action="/cgi-bin/koha/sco/sco-main.pl" method="post">
353
                                                            [% INCLUDE 'csrf-token.inc' %]
346
                                                            <legend class="sr-only">Issue renews</legend>
354
                                                            <legend class="sr-only">Issue renews</legend>
347
                                                            <input type="hidden" name="patronid" value="[% patronid | html %]" />
355
                                                            <input type="hidden" name="patronid" value="[% patronid | html %]" />
348
                                                            <input type="hidden" name="barcode" value="[% ISSUE.barcode | html %]" />
356
                                                            <input type="hidden" name="barcode" value="[% ISSUE.barcode | html %]" />
Lines 403-408 Link Here
403
                        [% ELSE # IF validuser %]
411
                        [% ELSE # IF validuser %]
404
                            <div class="sco_entry" >
412
                            <div class="sco_entry" >
405
                                <form id="mainform" action="/cgi-bin/koha/sco/sco-main.pl" name="mainform" method="post">
413
                                <form id="mainform" action="/cgi-bin/koha/sco/sco-main.pl" name="mainform" method="post">
414
                                    [% INCLUDE 'csrf-token.inc' %]
406
                                    <fieldset>
415
                                    <fieldset>
407
                                        [% IF ( Koha.Preference('SelfCheckoutByLogin') ) %]
416
                                        [% IF ( Koha.Preference('SelfCheckoutByLogin') ) %]
408
                                            <legend>Log in to your account</legend>
417
                                            <legend>Log in to your account</legend>
409
- 

Return to bug 34478