|
Lines 19-25
use Modern::Perl;
Link Here
|
| 19 |
|
19 |
|
| 20 |
use CGI qw ( -utf8 ); |
20 |
use CGI qw ( -utf8 ); |
| 21 |
use Digest::MD5 qw( md5_base64 md5_hex ); |
21 |
use Digest::MD5 qw( md5_base64 md5_hex ); |
| 22 |
use Encode qw( encode ); |
|
|
| 23 |
use String::Random qw( random_string ); |
22 |
use String::Random qw( random_string ); |
| 24 |
|
23 |
|
| 25 |
use C4::Auth; |
24 |
use C4::Auth; |
|
Lines 200-207
elsif ( $action eq 'update' ) {
Link Here
|
| 200 |
my $borrower = GetMember( borrowernumber => $borrowernumber ); |
199 |
my $borrower = GetMember( borrowernumber => $borrowernumber ); |
| 201 |
die "Wrong CSRF token" |
200 |
die "Wrong CSRF token" |
| 202 |
unless Koha::Token->new->check_csrf({ |
201 |
unless Koha::Token->new->check_csrf({ |
| 203 |
id => Encode::encode( 'UTF-8', $borrower->{userid} ), |
202 |
session_id => scalar $cgi->cookie('CGISESSID'), |
| 204 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
|
|
| 205 |
token => scalar $cgi->param('csrf_token'), |
203 |
token => scalar $cgi->param('csrf_token'), |
| 206 |
}); |
204 |
}); |
| 207 |
|
205 |
|
|
Lines 221-228
elsif ( $action eq 'update' ) {
Link Here
|
| 221 |
invalid_form_fields => $invalidformfields, |
219 |
invalid_form_fields => $invalidformfields, |
| 222 |
borrower => \%borrower, |
220 |
borrower => \%borrower, |
| 223 |
csrf_token => Koha::Token->new->generate_csrf({ |
221 |
csrf_token => Koha::Token->new->generate_csrf({ |
| 224 |
id => Encode::encode( 'UTF-8', $borrower->{userid} ), |
222 |
session_id => scalar $cgi->cookie('CGISESSID'), |
| 225 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
|
|
| 226 |
}), |
223 |
}), |
| 227 |
); |
224 |
); |
| 228 |
|
225 |
|
|
Lines 262-269
elsif ( $action eq 'update' ) {
Link Here
|
| 262 |
nochanges => 1, |
259 |
nochanges => 1, |
| 263 |
borrower => GetMember( borrowernumber => $borrowernumber ), |
260 |
borrower => GetMember( borrowernumber => $borrowernumber ), |
| 264 |
csrf_token => Koha::Token->new->generate_csrf({ |
261 |
csrf_token => Koha::Token->new->generate_csrf({ |
| 265 |
id => Encode::encode( 'UTF-8', $borrower->{userid} ), |
262 |
session_id => scalar $cgi->cookie('CGISESSID'), |
| 266 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
|
|
| 267 |
}), |
263 |
}), |
| 268 |
); |
264 |
); |
| 269 |
} |
265 |
} |
|
Lines 285-292
elsif ( $action eq 'edit' ) { #Display logged in borrower's data
Link Here
|
| 285 |
guarantor => scalar Koha::Patrons->find($borrowernumber)->guarantor(), |
281 |
guarantor => scalar Koha::Patrons->find($borrowernumber)->guarantor(), |
| 286 |
hidden => GetHiddenFields( $mandatory, 'modification' ), |
282 |
hidden => GetHiddenFields( $mandatory, 'modification' ), |
| 287 |
csrf_token => Koha::Token->new->generate_csrf({ |
283 |
csrf_token => Koha::Token->new->generate_csrf({ |
| 288 |
id => Encode::encode( 'UTF-8', $borrower->{userid} ), |
284 |
session_id => scalar $cgi->cookie('CGISESSID'), |
| 289 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
|
|
| 290 |
}), |
285 |
}), |
| 291 |
); |
286 |
); |
| 292 |
|
287 |
|