View | Details | Raw Unified | Return to bug 36190
Collapse All | Expand All

(-)a/admin/searchengine/elasticsearch/mappings.pl (-1 / +1 lines)
Lines 86-92 while ( my ( $key, $value ) = each(%{Koha::SearchEngine::Elasticsearch::QueryBui Link Here
86
    $search_fields_aliases->{$value} = $field_aliases;
86
    $search_fields_aliases->{$value} = $field_aliases;
87
}
87
}
88
88
89
if ( $op eq 'edit' ) {
89
if ( $op eq 'cud-edit' ) {
90
90
91
    $schema->storage->txn_begin;
91
    $schema->storage->txn_begin;
92
92
(-)a/ill/ill-requests.pl (-2 / +2 lines)
Lines 368-374 if ( $backends_available ) { Link Here
368
368
369
        # handle special commit rules & update type
369
        # handle special commit rules & update type
370
        handle_commit_maybe($backend_result, $request);
370
        handle_commit_maybe($backend_result, $request);
371
    } elsif ( $op eq 'check_out') {
371
    } elsif ( $op eq 'cud-check_out') {
372
        my $request = Koha::Illrequests->find($params->{illrequest_id});
372
        my $request = Koha::Illrequests->find($params->{illrequest_id});
373
        my $backend_result = $request->check_out($params);
373
        my $backend_result = $request->check_out($params);
374
        $template->param(
374
        $template->param(
Lines 409-415 if ( $backends_available ) { Link Here
409
            }
409
            }
410
        }
410
        }
411
411
412
    } elsif ( $op eq "save_comment" ) {
412
    } elsif ( $op eq "cud-save_comment" ) {
413
        my $comment = Koha::Illcomment->new({
413
        my $comment = Koha::Illcomment->new({
414
            illrequest_id  => scalar $params->{illrequest_id},
414
            illrequest_id  => scalar $params->{illrequest_id},
415
            borrowernumber => $patronnumber,
415
            borrowernumber => $patronnumber,
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/searchengine/elasticsearch/mappings.tt (-3 / +7 lines)
Lines 96-103 a.add, a.delete { Link Here
96
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, reset mappings</button>
96
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, reset mappings</button>
97
            </form>
97
            </form>
98
98
99
            <form method="post">
99
            <form method="get">
100
                [% INCLUDE 'csrf-token.inc' %]
101
                <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not reset mappings</button>
100
                <button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not reset mappings</button>
102
            </form>
101
            </form>
103
        </div>
102
        </div>
Lines 505-511 a.add, a.delete { Link Here
505
        [% END # /WRAPPER tabs %]
504
        [% END # /WRAPPER tabs %]
506
505
507
        <fieldset class="action">
506
        <fieldset class="action">
508
            <button class="btn btn-primary" type="submit" name="op" value="cud-edit"><i class="fa-solid fa-hard-drive" aria-hidden="true"></i> Save</button>
507
            <input type="hidden" name="op" value="cud-edit">
508
            <button class="btn btn-primary" type="submit"><i class="fa-solid fa-hard-drive" aria-hidden="true"></i> Save</button>
509
        </fieldset>
510
    </form>
511
    <form method="get">
512
        <fieldset class="action">
509
            <button class="btn btn-default" type="submit" name="op" value="reset_confirm"><i class="fa-solid fa-rotate" aria-hidden="true"></i> Reset mappings</button>
513
            <button class="btn btn-default" type="submit" name="op" value="reset_confirm"><i class="fa-solid fa-rotate" aria-hidden="true"></i> Reset mappings</button>
510
        </fieldset>
514
        </fieldset>
511
    </form>
515
    </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/smart-rules.tt (-1 / +2 lines)
Lines 1417-1425 Link Here
1417
                        </table>
1417
                        </table>
1418
                    </form>
1418
                    </form>
1419
1419
1420
                    <!-- This is a placeholder form to be filled by JS functions attached to buttons/links -->
1420
                    <form id="delete_form" action="/cgi-bin/koha/admin/smart-rules.pl" method="post">
1421
                    <form id="delete_form" action="/cgi-bin/koha/admin/smart-rules.pl" method="post">
1421
                        [% INCLUDE 'csrf-token.inc' %]
1422
                        [% INCLUDE 'csrf-token.inc' %]
1422
                        <input type="hidden" name="op" value="" />
1423
                        <input type="hidden" name="op" value="cud-" />
1423
                        <input type="hidden" name="itemtype" value="" />
1424
                        <input type="hidden" name="itemtype" value="" />
1424
                        <input type="hidden" name="categorycode" value="" />
1425
                        <input type="hidden" name="categorycode" value="" />
1425
                        <input type="hidden" name="branch" value="" />
1426
                        <input type="hidden" name="branch" value="" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt (-2 / +2 lines)
Lines 265-271 Link Here
265
                                    </ol>
265
                                    </ol>
266
                                </fieldset>
266
                                </fieldset>
267
                                <fieldset class="action">
267
                                <fieldset class="action">
268
                                    <input type="hidden" value="check_out" name="op">
268
                                    <input type="hidden" value="cud-check_out" name="op">
269
                                    <input type="hidden" value="form" name="stage">
269
                                    <input type="hidden" value="form" name="stage">
270
                                    [% IF items.size == 1 %]
270
                                    [% IF items.size == 1 %]
271
                                        <input name="branchcode" type="hidden" value="[% branchcode | html %]">
271
                                        <input name="branchcode" type="hidden" value="[% branchcode | html %]">
Lines 789-795 Link Here
789
                                <h3><a id="toggle_addcomment" href="#">Add comment</a></h3>
789
                                <h3><a id="toggle_addcomment" href="#">Add comment</a></h3>
790
                                <div id="addcomment" class="content_hidden">
790
                                <div id="addcomment" class="content_hidden">
791
                                    <form class="validated" method="post" action="/cgi-bin/koha/ill/ill-requests.pl">
791
                                    <form class="validated" method="post" action="/cgi-bin/koha/ill/ill-requests.pl">
792
                                        <input type="hidden" value="save_comment" name="op">
792
                                        <input type="hidden" value="cud-save_comment" name="op">
793
                                        [% INCLUDE 'csrf-token.inc' %]
793
                                        [% INCLUDE 'csrf-token.inc' %]
794
                                        <input type="hidden" value="[% request.illrequest_id | html %]" name="illrequest_id">
794
                                        <input type="hidden" value="[% request.illrequest_id | html %]" name="illrequest_id">
795
                                        <fieldset class="rows">
795
                                        <fieldset class="rows">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt (-4 / +1 lines)
Lines 244-250 Link Here
244
244
245
    <!-- Issue payout modal -->
245
    <!-- Issue payout modal -->
246
    <div class="modal" id="issuePayoutModal" tabindex="-1" role="dialog" aria-labelledby="issuePayoutLabel">
246
    <div class="modal" id="issuePayoutModal" tabindex="-1" role="dialog" aria-labelledby="issuePayoutLabel">
247
        <form  id="payout_form" action="/cgi-bin/koha/members/boraccount.pl" method="post" enctype="multipart/form-data" class="validated">
247
        <form id="payout_form" action="/cgi-bin/koha/members/boraccount.pl" method="post" enctype="multipart/form-data" class="validated">
248
            [% INCLUDE 'csrf-token.inc' %]
248
            [% INCLUDE 'csrf-token.inc' %]
249
            <input type="hidden" name="accountlines_id" value="" id="payoutline">
249
            <input type="hidden" name="accountlines_id" value="" id="payoutline">
250
            <input type="hidden" name="op" value="cud-payout">
250
            <input type="hidden" name="op" value="cud-payout">
Lines 288-294 Link Here
288
                        </fieldset> <!-- /.rows -->
288
                        </fieldset> <!-- /.rows -->
289
                    </div> <!-- /.modal-body -->
289
                    </div> <!-- /.modal-body -->
290
                    <div class="modal-footer">
290
                    <div class="modal-footer">
291
                        <input type="hidden" name="op" value="payout">
292
                        <button type="submit" class="btn btn-default" id="borr_payout_confirm">Confirm</button>
291
                        <button type="submit" class="btn btn-default" id="borr_payout_confirm">Confirm</button>
293
                        <button type="button" class="btn btn-default" data-dismiss="modal">Cancel</button>
292
                        <button type="button" class="btn btn-default" data-dismiss="modal">Cancel</button>
294
                    </div> <!-- /.modal-footer -->
293
                    </div> <!-- /.modal-footer -->
Lines 346-352 Link Here
346
                        </fieldset> <!-- /.rows -->
345
                        </fieldset> <!-- /.rows -->
347
                    </div> <!-- /.modal-body -->
346
                    </div> <!-- /.modal-body -->
348
                    <div class="modal-footer">
347
                    <div class="modal-footer">
349
                        <input type="hidden" name="op" value="refund">
350
                        <button type="submit" class="btn btn-default" id="borr_refund_confirm">Confirm</button>
348
                        <button type="submit" class="btn btn-default" id="borr_refund_confirm">Confirm</button>
351
                        <button type="button" class="btn btn-default" data-dismiss="modal">Cancel</button>
349
                        <button type="button" class="btn btn-default" data-dismiss="modal">Cancel</button>
352
                    </div> <!-- /.modal-footer -->
350
                    </div> <!-- /.modal-footer -->
Lines 386-392 Link Here
386
                        </fieldset> <!-- /.rows -->
384
                        </fieldset> <!-- /.rows -->
387
                    </div> <!-- /.modal-body -->
385
                    </div> <!-- /.modal-body -->
388
                    <div class="modal-footer">
386
                    <div class="modal-footer">
389
                        <input type="hidden" name="op" value="discount">
390
                        <button type="submit" class="btn btn-default">Confirm</button>
387
                        <button type="submit" class="btn btn-default">Confirm</button>
391
                        <button type="button" class="btn btn-default" data-dismiss="modal">Cancel</button>
388
                        <button type="button" class="btn btn-default" data-dismiss="modal">Cancel</button>
392
                    </div> <!-- /.modal-footer -->
389
                    </div> <!-- /.modal-footer -->
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/edit-batch.tt (-2 / +2 lines)
Lines 144-156 Link Here
144
                            </form>
144
                            </form>
145
                            <form id="patron_form" action="/cgi-bin/koha/patroncards/edit-batch.pl" method="post">
145
                            <form id="patron_form" action="/cgi-bin/koha/patroncards/edit-batch.pl" method="post">
146
                                [% INCLUDE 'csrf-token.inc' %]
146
                                [% INCLUDE 'csrf-token.inc' %]
147
                                <input type="hidden" name="op" value="" />
147
                                <input type="hidden" name="op" value="cud-" />
148
                                <input type="hidden" name="batch_id" value="" />
148
                                <input type="hidden" name="batch_id" value="" />
149
                                <input type="hidden" name="label_id" value="" />
149
                                <input type="hidden" name="label_id" value="" />
150
                            </form>
150
                            </form>
151
                            <form id="batch_form" action="/cgi-bin/koha/patroncards/manage.pl" method="post">
151
                            <form id="batch_form" action="/cgi-bin/koha/patroncards/manage.pl" method="post">
152
                                [% INCLUDE 'csrf-token.inc' %]
152
                                [% INCLUDE 'csrf-token.inc' %]
153
                                <input type="hidden" name="op" value="" />
153
                                <input type="hidden" name="op" value="cud-" />
154
                            </form>
154
                            </form>
155
                            [% ELSE %]
155
                            [% ELSE %]
156
                                <fieldset class="rows" style="border-bottom: 0px; border: 0px;">
156
                                <fieldset class="rows" style="border-bottom: 0px; border: 0px;">
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/manage.tt (-1 / +1 lines)
Lines 144-150 Link Here
144
                            </form>
144
                            </form>
145
                            <form id="manage_form" method="post" action="/cgi-bin/koha/patroncards/manage.pl">
145
                            <form id="manage_form" method="post" action="/cgi-bin/koha/patroncards/manage.pl">
146
                                [% INCLUDE 'csrf-token.inc' %]
146
                                [% INCLUDE 'csrf-token.inc' %]
147
                                <input type="hidden" name="op" value="" />
147
                                <input type="hidden" name="op" value="cud-" />
148
                            </form>
148
                            </form>
149
149
150
                            [% ELSE %]
150
                            [% ELSE %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/dictionary.tt (-2 / +1 lines)
Lines 87-94 Link Here
87
		[% IF ( definitions ) %]
87
		[% IF ( definitions ) %]
88
            <div class="page-section">
88
            <div class="page-section">
89
                <h2>Current terms</h2>
89
                <h2>Current terms</h2>
90
                <form action="/cgi-bin/koha/reports/dictionary.pl" method="post">
90
                <form action="/cgi-bin/koha/reports/dictionary.pl" method="get">
91
                    [% INCLUDE 'csrf-token.inc' %]
92
                    <input type="hidden" name="op" value="list" />
91
                    <input type="hidden" name="op" value="list" />
93
                    [% IF ( areas ) %]
92
                    [% IF ( areas ) %]
94
                        Filter by area
93
                        Filter by area
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/guided_reports_start.tt (-2 / +1 lines)
Lines 1418-1425 Link Here
1418
                [% END # /IF ( editsql ) %]
1418
                [% END # /IF ( editsql ) %]
1419
1419
1420
                [% IF ( errors ) %]
1420
                [% IF ( errors ) %]
1421
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
1421
                    <form action="/cgi-bin/koha/reports/guided_reports.pl" method="get">
1422
                        [% INCLUDE 'csrf-token.inc' %]
1423
                        <div class="dialog alert">
1422
                        <div class="dialog alert">
1424
                            <strong>The following error was encountered:</strong><br />
1423
                            <strong>The following error was encountered:</strong><br />
1425
                            [% FOREACH error IN errors %]
1424
                            [% FOREACH error IN errors %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/suggestion/suggestion.tt (-2 / +2 lines)
Lines 722-733 Link Here
722
                        [% WRAPPER tab_panel tabname= suggestion.suggestiontype %]
722
                        [% WRAPPER tab_panel tabname= suggestion.suggestiontype %]
723
                            <form id="action_form" method="post" action="/cgi-bin/koha/suggestion/suggestion.pl">
723
                            <form id="action_form" method="post" action="/cgi-bin/koha/suggestion/suggestion.pl">
724
                                [% INCLUDE 'csrf-token.inc' %]
724
                                [% INCLUDE 'csrf-token.inc' %]
725
                                <input type="hidden" name="op" value="" />[%# filled by click event %]
725
                                <input type="hidden" name="op" value="cud-" />[%# filled by click event %]
726
                                <input type="hidden" name="suggestionid" value="" />
726
                                <input type="hidden" name="suggestionid" value="" />
727
                            </form>
727
                            </form>
728
                            <form class="update_suggestions" method="post" action="/cgi-bin/koha/suggestion/suggestion.pl#[% suggestion.suggestiontype| uri %]">
728
                            <form class="update_suggestions" method="post" action="/cgi-bin/koha/suggestion/suggestion.pl#[% suggestion.suggestiontype| uri %]">
729
                                [% INCLUDE 'csrf-token.inc' %]
729
                                [% INCLUDE 'csrf-token.inc' %]
730
                                <input type="hidden" name="op" value="" />[%# filled by submit %]
730
                                <input type="hidden" name="op" value="cud-" />[%# filled by submit %]
731
731
732
                                [% IF suggestion.suggestions.size %]
732
                                [% IF suggestion.suggestions.size %]
733
                                    <p>
733
                                    <p>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves.tt (-4 / +2 lines)
Lines 245-252 Link Here
245
245
246
                                        [% IF can_manage_shelf %]
246
                                        [% IF can_manage_shelf %]
247
                                            <span class="sep">|</span>
247
                                            <span class="sep">|</span>
248
                                            <form method="post" action="/cgi-bin/koha/opac-shelves.pl" class="d-inline">
248
                                            <form method="get" action="/cgi-bin/koha/opac-shelves.pl" class="d-inline">
249
                                                [% INCLUDE 'csrf-token.inc' %]
250
                                                <input type="hidden" name="op" value="edit_form" />
249
                                                <input type="hidden" name="op" value="edit_form" />
251
                                                <input type="hidden" name="referer" value="view" />
250
                                                <input type="hidden" name="referer" value="view" />
252
                                                <input type='hidden' name='public' value='[% shelf.public | html %]' />
251
                                                <input type='hidden' name='public' value='[% shelf.public | html %]' />
Lines 554-561 Link Here
554
                                    <a class="btn btn-link newshelf" href="/cgi-bin/koha/opac-shelves.pl?op=add_form"><i class="fa fa-fw fa-plus" aria-hidden="true"></i> New list</a>
553
                                    <a class="btn btn-link newshelf" href="/cgi-bin/koha/opac-shelves.pl?op=add_form"><i class="fa fa-fw fa-plus" aria-hidden="true"></i> New list</a>
555
                                    [% IF can_manage_shelf %]
554
                                    [% IF can_manage_shelf %]
556
                                        <span class="sep">|</span>
555
                                        <span class="sep">|</span>
557
                                        <form method="post" action="/cgi-bin/koha/opac-shelves.pl" class="d-inline">
556
                                        <form method="get" action="/cgi-bin/koha/opac-shelves.pl" class="d-inline">
558
                                            [% INCLUDE 'csrf-token.inc' %]
559
                                            <input type="hidden" name="op" value="edit_form" />
557
                                            <input type="hidden" name="op" value="edit_form" />
560
                                            <input type="hidden" name="referer" value="view" />
558
                                            <input type="hidden" name="referer" value="view" />
561
                                            <input type="hidden" name="public" value="[% shelf.public | html %]" />
559
                                            <input type="hidden" name="public" value="[% shelf.public | html %]" />
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/sco/sco-main.tt (-4 / +2 lines)
Lines 115-122 Link Here
115
                                </form>
115
                                </form>
116
                            [% END %]
116
                            [% END %]
117
117
118
                            <form action="/cgi-bin/koha/sco/sco-main.pl" name="errorForm" class="inline" method="post">
118
                            <form action="/cgi-bin/koha/sco/sco-main.pl" name="errorForm" class="inline" method="get">
119
                                [% INCLUDE 'csrf-token.inc' %]
120
                                <legend class="sr-only">Error</legend>
119
                                <legend class="sr-only">Error</legend>
121
                                <input type="hidden" name="op" value="" />
120
                                <input type="hidden" name="op" value="" />
122
                                <input type="hidden" name="patronid" value="[% patronid | html %]" />
121
                                <input type="hidden" name="patronid" value="[% patronid | html %]" />
Lines 175-182 Link Here
175
                                </form>
174
                                </form>
176
                            [% END %]
175
                            [% END %]
177
176
178
                            <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="post">
177
                            <form action="/cgi-bin/koha/sco/sco-main.pl" name="confirmForm" class="inline" method="get">
179
                                [% INCLUDE 'csrf-token.inc' %]
180
                                <legend class="sr-only">Cancel</legend>
178
                                <legend class="sr-only">Cancel</legend>
181
                                <input type="hidden" name="op" value="" />
179
                                <input type="hidden" name="op" value="" />
182
                                <input type="hidden" name="patronid" value="[% patronid | html %]" />
180
                                <input type="hidden" name="patronid" value="[% patronid | html %]" />
(-)a/members/boraccount.pl (-2 / +1 lines)
Lines 156-162 if ( $op eq 'cud-refund' ) { Link Here
156
    );
156
    );
157
}
157
}
158
158
159
if ( $op eq 'discount' ) {
159
if ( $op eq 'cud-discount' ) {
160
    output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
160
    output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
161
    my $charge_id        = scalar $input->param('accountlines_id');
161
    my $charge_id        = scalar $input->param('accountlines_id');
162
    my $charge           = Koha::Account::Lines->find($charge_id);
162
    my $charge           = Koha::Account::Lines->find($charge_id);
163
- 

Return to bug 36190