|
Lines 21-26
use strict;
Link Here
|
| 21 |
use warnings; |
21 |
use warnings; |
| 22 |
|
22 |
|
| 23 |
use CGI qw ( -utf8 ); |
23 |
use CGI qw ( -utf8 ); |
|
|
24 |
use Digest::MD5 qw(md5_base64); |
| 25 |
use Encode qw( encode ); |
| 24 |
use URI::Escape; |
26 |
use URI::Escape; |
| 25 |
use C4::Auth; |
27 |
use C4::Auth; |
| 26 |
|
28 |
|
|
Lines 36-41
use C4::Search::History;
Link Here
|
| 36 |
use Koha::Authority::Types; |
38 |
use Koha::Authority::Types; |
| 37 |
use Koha::SearchEngine::Search; |
39 |
use Koha::SearchEngine::Search; |
| 38 |
use Koha::SearchEngine::QueryBuilder; |
40 |
use Koha::SearchEngine::QueryBuilder; |
|
|
41 |
use Koha::Token; |
| 39 |
|
42 |
|
| 40 |
my $query = new CGI; |
43 |
my $query = new CGI; |
| 41 |
my $dbh = C4::Context->dbh; |
44 |
my $dbh = C4::Context->dbh; |
|
Lines 58-63
if ( $op eq "delete" ) {
Link Here
|
| 58 |
debug => 1, |
61 |
debug => 1, |
| 59 |
} |
62 |
} |
| 60 |
); |
63 |
); |
|
|
64 |
|
| 65 |
die "Wrong CSRF token" unless Koha::Token->new->check_csrf({ |
| 66 |
id => Encode::encode( 'UTF-8', $loggedinuser ), |
| 67 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
| 68 |
token => scalar $query->param('csrf_token'), |
| 69 |
}); |
| 70 |
|
| 61 |
&DelAuthority( $authid, 1 ); |
71 |
&DelAuthority( $authid, 1 ); |
| 62 |
|
72 |
|
| 63 |
if ( $query->param('operator') ) { |
73 |
if ( $query->param('operator') ) { |
|
Lines 111-116
if ( $op eq "do_search" ) {
Link Here
|
| 111 |
} |
121 |
} |
| 112 |
); |
122 |
); |
| 113 |
|
123 |
|
|
|
124 |
$template->param( |
| 125 |
csrf_token => Koha::Token->new->generate_csrf({ |
| 126 |
id => Encode::encode( 'UTF-8', $loggedinuser ), |
| 127 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
| 128 |
}), |
| 129 |
); |
| 130 |
|
| 114 |
# search history |
131 |
# search history |
| 115 |
if (C4::Context->preference('EnableSearchHistory')) { |
132 |
if (C4::Context->preference('EnableSearchHistory')) { |
| 116 |
if ( $startfrom == 1) { |
133 |
if ( $startfrom == 1) { |