|
Lines 19-25
use Modern::Perl;
Link Here
|
| 19 |
|
19 |
|
| 20 |
use CGI qw ( -utf8 ); |
20 |
use CGI qw ( -utf8 ); |
| 21 |
use Digest::MD5 qw( md5_base64 md5_hex ); |
21 |
use Digest::MD5 qw( md5_base64 md5_hex ); |
| 22 |
use Encode qw( encode ); |
|
|
| 23 |
use JSON; |
22 |
use JSON; |
| 24 |
use List::MoreUtils qw( any each_array uniq ); |
23 |
use List::MoreUtils qw( any each_array uniq ); |
| 25 |
use String::Random qw( random_string ); |
24 |
use String::Random qw( random_string ); |
|
Lines 223-230
elsif ( $action eq 'update' ) {
Link Here
|
| 223 |
my $borrower = GetMember( borrowernumber => $borrowernumber ); |
222 |
my $borrower = GetMember( borrowernumber => $borrowernumber ); |
| 224 |
die "Wrong CSRF token" |
223 |
die "Wrong CSRF token" |
| 225 |
unless Koha::Token->new->check_csrf({ |
224 |
unless Koha::Token->new->check_csrf({ |
| 226 |
id => Encode::encode( 'UTF-8', $borrower->{userid} ), |
225 |
session_id => scalar $cgi->cookie('CGISESSID'), |
| 227 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
|
|
| 228 |
token => scalar $cgi->param('csrf_token'), |
226 |
token => scalar $cgi->param('csrf_token'), |
| 229 |
}); |
227 |
}); |
| 230 |
|
228 |
|
|
Lines 244-251
elsif ( $action eq 'update' ) {
Link Here
|
| 244 |
invalid_form_fields => $invalidformfields, |
242 |
invalid_form_fields => $invalidformfields, |
| 245 |
borrower => \%borrower, |
243 |
borrower => \%borrower, |
| 246 |
csrf_token => Koha::Token->new->generate_csrf({ |
244 |
csrf_token => Koha::Token->new->generate_csrf({ |
| 247 |
id => Encode::encode( 'UTF-8', $borrower->{userid} ), |
245 |
session_id => scalar $cgi->cookie('CGISESSID'), |
| 248 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
|
|
| 249 |
}), |
246 |
}), |
| 250 |
); |
247 |
); |
| 251 |
$template->param( patron_attribute_classes => GeneratePatronAttributesForm( $borrowernumber, $attributes ) ); |
248 |
$template->param( patron_attribute_classes => GeneratePatronAttributesForm( $borrowernumber, $attributes ) ); |
|
Lines 290-297
elsif ( $action eq 'update' ) {
Link Here
|
| 290 |
borrower => GetMember( borrowernumber => $borrowernumber ), |
287 |
borrower => GetMember( borrowernumber => $borrowernumber ), |
| 291 |
patron_attribute_classes => GeneratePatronAttributesForm( $borrowernumber, $attributes ), |
288 |
patron_attribute_classes => GeneratePatronAttributesForm( $borrowernumber, $attributes ), |
| 292 |
csrf_token => Koha::Token->new->generate_csrf({ |
289 |
csrf_token => Koha::Token->new->generate_csrf({ |
| 293 |
id => Encode::encode( 'UTF-8', $borrower->{userid} ), |
290 |
session_id => scalar $cgi->cookie('CGISESSID'), |
| 294 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
|
|
| 295 |
}), |
291 |
}), |
| 296 |
); |
292 |
); |
| 297 |
} |
293 |
} |
|
Lines 305-312
elsif ( $action eq 'edit' ) { #Display logged in borrower's data
Link Here
|
| 305 |
guarantor => scalar Koha::Patrons->find($borrowernumber)->guarantor(), |
301 |
guarantor => scalar Koha::Patrons->find($borrowernumber)->guarantor(), |
| 306 |
hidden => GetHiddenFields( $mandatory, 'modification' ), |
302 |
hidden => GetHiddenFields( $mandatory, 'modification' ), |
| 307 |
csrf_token => Koha::Token->new->generate_csrf({ |
303 |
csrf_token => Koha::Token->new->generate_csrf({ |
| 308 |
id => Encode::encode( 'UTF-8', $borrower->{userid} ), |
304 |
session_id => scalar $cgi->cookie('CGISESSID'), |
| 309 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
|
|
| 310 |
}), |
305 |
}), |
| 311 |
); |
306 |
); |
| 312 |
|
307 |
|