From 7ee27205cd5f7d30cd43a8c9074c103bbe18300e Mon Sep 17 00:00:00 2001 From: Amit Gupta Date: Wed, 22 Jan 2020 21:37:22 +0530 Subject: [PATCH] Bug 22990: Add CSRF protection to Koha pages --- .../prog/en/modules/members/boraccount.tt | 11 +++++++---- .../intranet-tmpl/prog/en/modules/members/pay.tt | 1 + .../prog/en/modules/suggestion/suggestion.tt | 8 ++++++-- members/boraccount.pl | 15 ++++++++++----- members/pay.pl | 7 +++++++ members/setstatus.pl | 1 + suggestion/suggestion.pl | 7 +++++-- 7 files changed, 37 insertions(+), 13 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt index 4b0452b2db..19edbd6891 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt @@ -44,7 +44,7 @@
[% INCLUDE 'members-toolbar.inc' %] -
+
[% INCLUDE 'csrf-token.inc' %]
@@ -111,14 +111,14 @@ [% END %] Details [% IF account.is_debit && account.amountoutstanding > 0 %] - Pay + Pay [% END %] [% IF account.is_credit && account.status != 'VOID' %] - Void payment + Void payment [% END %] [% IF account.is_debit && account.amount == account.amountoutstanding && account.status != 'CANCELLED' && !(account.debit_type_code == 'PAYOUT') %]
- + [% INCLUDE 'csrf-token.inc' %]