Lines 1262-1268
Link Here
|
1262 |
if (borrowernumber) { |
1262 |
if (borrowernumber) { |
1263 |
var managerlink = '<a href="/cgi-bin/koha/members/moremember.pl' |
1263 |
var managerlink = '<a href="/cgi-bin/koha/members/moremember.pl' |
1264 |
+ '?borrowernumber=' + borrowernumber + '">' |
1264 |
+ '?borrowernumber=' + borrowernumber + '">' |
1265 |
+ borrowername + '</a>'; |
1265 |
+ borrowername.escapeHtml() + '</a>'; |
1266 |
managedby_name.html(managerlink); |
1266 |
managedby_name.html(managerlink); |
1267 |
managedby.val(borrowernumber); |
1267 |
managedby.val(borrowernumber); |
1268 |
} |
1268 |
} |
Lines 1293-1301
Link Here
|
1293 |
success: function (data) { |
1293 |
success: function (data) { |
1294 |
var suggested = '<input type="hidden" id="suggestedby" name="suggestedby" value="' + data.borrowernumber + '" />'; |
1294 |
var suggested = '<input type="hidden" id="suggestedby" name="suggestedby" value="' + data.borrowernumber + '" />'; |
1295 |
suggested += '<a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=' + data.borrowernumber + '">'; |
1295 |
suggested += '<a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=' + data.borrowernumber + '">'; |
1296 |
suggested += data.surname + ', ' + data.firstname + ' (' + data.cardnumber + ')'; |
1296 |
suggested += data.surname.escapeHtml() + ', ' + data.firstname.escapeHtml() + ' (' + data.cardnumber.escapeHtml() + ')'; |
1297 |
suggested += '</a> '; |
1297 |
suggested += '</a> '; |
1298 |
suggested += data._strings.library_id.str + ' (' + data._strings.category_id.str + ')'; |
1298 |
suggested += data._strings.library_id.str.escapeHtml() + ' (' + data._strings.category_id.str.escapeHtml() + ')'; |
1299 |
$("#tdsuggestedby").html(suggested); |
1299 |
$("#tdsuggestedby").html(suggested); |
1300 |
|
1300 |
|
1301 |
}, |
1301 |
}, |
1302 |
- |
|
|