View | Details | Raw Unified | Return to bug 34478
Collapse All | Expand All

(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/circ-menu.inc (-1 / +1 lines)
Lines 255-261 Link Here
255
                        </div>
255
                        </div>
256
                        <input type="hidden" name="uploadfilename" value="patron-photo.jpg" />
256
                        <input type="hidden" name="uploadfilename" value="patron-photo.jpg" />
257
                        <textarea id="uploadfiletext" name="uploadfiletext" style="display:none;"></textarea>
257
                        <textarea id="uploadfiletext" name="uploadfiletext" style="display:none;"></textarea>
258
                        <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
258
                        [% INCLUDE csrf-token.inc %]
259
                        <input type="hidden" name="filetype" value="image" />
259
                        <input type="hidden" name="filetype" value="image" />
260
                        <input type="hidden" name="cardnumber" value="[% patron.cardnumber | html %]" />
260
                        <input type="hidden" name="cardnumber" value="[% patron.cardnumber | html %]" />
261
                        <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
261
                        <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/basket/sendbasketform.tt (-1 / +1 lines)
Lines 33-39 Link Here
33
    </fieldset>
33
    </fieldset>
34
    <fieldset class="action"> <input type="submit" class="btn btn-primary" value="Send" /> <a class="cancel close" href="#">Cancel</a> </fieldset>
34
    <fieldset class="action"> <input type="submit" class="btn btn-primary" value="Send" /> <a class="cancel close" href="#">Cancel</a> </fieldset>
35
    <input type="hidden" name="bib_list" value="[% bib_list | html %]" />
35
    <input type="hidden" name="bib_list" value="[% bib_list | html %]" />
36
    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
36
    [% INCLUDE csrf-token.inc %]
37
</form>
37
</form>
38
38
39
[% END %]</div>
39
[% END %]</div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/apikeys.tt (-3 / +3 lines)
Lines 57-63 Link Here
57
57
58
                <form id="add-api-key" action="/cgi-bin/koha/members/apikeys.pl" method="post" style="display:none">
58
                <form id="add-api-key" action="/cgi-bin/koha/members/apikeys.pl" method="post" style="display:none">
59
                    <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
59
                    <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
60
                    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
60
                    [% INCLUDE csrf-token.inc %]
61
                    <input type="hidden" name="op" value="generate" />
61
                    <input type="hidden" name="op" value="generate" />
62
                    <fieldset class="brief">
62
                    <fieldset class="brief">
63
                        <legend>Generate new client id/secret pair</legend>
63
                        <legend>Generate new client id/secret pair</legend>
Lines 96-109 Link Here
96
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
96
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
97
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
97
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
98
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
98
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
99
                                                <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
99
                                                [% INCLUDE csrf-token.inc %]
100
                                                <input type="hidden" name="op" value="delete" />
100
                                                <input type="hidden" name="op" value="delete" />
101
                                                <button class="btn btn-default btn-xs delete" type="submit"><i class="fa fa-trash-can"></i> Delete</button>
101
                                                <button class="btn btn-default btn-xs delete" type="submit"><i class="fa fa-trash-can"></i> Delete</button>
102
                                            </form>
102
                                            </form>
103
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
103
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
104
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
104
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
105
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
105
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
106
                                                <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
106
                                                [% INCLUDE csrf-token.inc %]
107
                                                [% IF key.active %]
107
                                                [% IF key.active %]
108
                                                    <input type="hidden" name="op" value="revoke" />
108
                                                    <input type="hidden" name="op" value="revoke" />
109
                                                    <button class="btn btn-default btn-xs" type="submit"><i class="fa fa-times"></i> Revoke</button>
109
                                                    <button class="btn btn-default btn-xs" type="submit"><i class="fa fa-times"></i> Revoke</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/deletemem.tt (-1 / +1 lines)
Lines 66-72 Link Here
66
            <h1>Are you sure you want to delete the patron [% patron.firstname | html %] [% patron.surname | html %]?</h1>
66
            <h1>Are you sure you want to delete the patron [% patron.firstname | html %] [% patron.surname | html %]?</h1>
67
            <p>This cannot be undone.</p>
67
            <p>This cannot be undone.</p>
68
            <form action="/cgi-bin/koha/members/deletemem.pl">
68
            <form action="/cgi-bin/koha/members/deletemem.pl">
69
                <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
69
                [% INCLUDE csrf-token.inc %]
70
                <input type="hidden" name="member" value="[% patron.borrowernumber | html %]"/>
70
                <input type="hidden" name="member" value="[% patron.borrowernumber | html %]"/>
71
                <input type="hidden" name="op" value="delete_confirmed" />
71
                <input type="hidden" name="op" value="delete_confirmed" />
72
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
72
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/mancredit.tt (-1 / +1 lines)
Lines 63-69 Link Here
63
                    <div role="tabpanel" class="tab-pane active">
63
                    <div role="tabpanel" class="tab-pane active">
64
                        <form action="/cgi-bin/koha/members/mancredit.pl" method="post" id="mancredit">
64
                        <form action="/cgi-bin/koha/members/mancredit.pl" method="post" id="mancredit">
65
                            <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
65
                            <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
66
                            <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
66
                            [% INCLUDE csrf-token.inc %]
67
67
68
                            <fieldset class="rows">
68
                            <fieldset class="rows">
69
                                <legend>Manual credit</legend>
69
                                <legend>Manual credit</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/maninvoice.tt (-1 / +1 lines)
Lines 72-78 Link Here
72
                [% END %]
72
                [% END %]
73
                <form action="/cgi-bin/koha/members/maninvoice.pl" method="post" id="maninvoice">
73
                <form action="/cgi-bin/koha/members/maninvoice.pl" method="post" id="maninvoice">
74
                    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
74
                    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
75
                    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
75
                    [% INCLUDE csrf-token.inc %]
76
                    <fieldset class="rows">
76
                    <fieldset class="rows">
77
                        <legend>Manual invoice</legend>
77
                        <legend>Manual invoice</legend>
78
                        <ol>
78
                        <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/member-flags.tt (-1 / +1 lines)
Lines 37-43 Link Here
37
[% INCLUDE 'members-toolbar.inc' %]
37
[% INCLUDE 'members-toolbar.inc' %]
38
38
39
<form id="flag_form" method="post" action="/cgi-bin/koha/members/member-flags.pl">
39
<form id="flag_form" method="post" action="/cgi-bin/koha/members/member-flags.pl">
40
    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
40
    [% INCLUDE csrf-token.inc %]
41
    <input type="hidden" name="member" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
41
    <input type="hidden" name="member" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
42
    <input type="hidden" name="newflags" value="1" />
42
    <input type="hidden" name="newflags" value="1" />
43
    <h1>Set permissions for [% INCLUDE 'patron-title.inc' no_html = 1 %]</h1>
43
    <h1>Set permissions for [% INCLUDE 'patron-title.inc' no_html = 1 %]</h1>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/member-password.tt (-1 / +1 lines)
Lines 98-104 Link Here
98
    <div class="hint">Koha cannot display existing passwords. Leave the field blank to leave password unchanged.</div>
98
    <div class="hint">Koha cannot display existing passwords. Leave the field blank to leave password unchanged.</div>
99
</fieldset>
99
</fieldset>
100
    <fieldset class="action">
100
    <fieldset class="action">
101
        <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
101
        [% INCLUDE csrf-token.inc %]
102
        <input type="submit" class="btn btn-primary" value="Save" />
102
        <input type="submit" class="btn btn-primary" value="Save" />
103
        <a class="cancel" href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% patron.borrowernumber | html %]">Cancel</a>
103
        <a class="cancel" href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% patron.borrowernumber | html %]">Cancel</a>
104
    </fieldset>
104
    </fieldset>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/memberentrygen.tt (-1 / +1 lines)
Lines 237-243 legend:hover { Link Here
237
                            <input type="hidden" name="check_member" value="[% check_member | html %]" />
237
                            <input type="hidden" name="check_member" value="[% check_member | html %]" />
238
                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html UNLESS opduplicate %]" />
238
                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html UNLESS opduplicate %]" />
239
                            <input type="hidden" name="nodouble"  value="[% nodouble | html UNLESS opduplicate %]" />
239
                            <input type="hidden" name="nodouble"  value="[% nodouble | html UNLESS opduplicate %]" />
240
                            <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
240
                            [% INCLUDE csrf-token.inc %]
241
                            [% IF ( step ) %]
241
                            [% IF ( step ) %]
242
                                <input type="hidden" name="step"  value="[% step | html %]" />
242
                                <input type="hidden" name="step"  value="[% step | html %]" />
243
                            [% END %]
243
                            [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/paycollect.tt (-3 / +3 lines)
Lines 132-138 Link Here
132
    </ul>
132
    </ul>
133
133
134
    <form name="payindivfine" id="payindivfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
134
    <form name="payindivfine" id="payindivfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
135
    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
135
    [% INCLUDE csrf-token.inc %]
136
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
136
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
137
    <input type="hidden" name="pay_individual" id="pay_individual" value="[% pay_individual | html %]" />
137
    <input type="hidden" name="pay_individual" id="pay_individual" value="[% pay_individual | html %]" />
138
    <input type="hidden" name="itemnumber" id="itemnumber" value="[% itemnumber | html %]" />
138
    <input type="hidden" name="itemnumber" id="itemnumber" value="[% itemnumber | html %]" />
Lines 228-234 Link Here
228
    </ul>
228
    </ul>
229
229
230
    <form name="woindivfine" id="woindivfine" action="/cgi-bin/koha/members/pay.pl" method="post" >
230
    <form name="woindivfine" id="woindivfine" action="/cgi-bin/koha/members/pay.pl" method="post" >
231
    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
231
    [% INCLUDE csrf-token.inc %]
232
    <fieldset class="rows">
232
    <fieldset class="rows">
233
    <legend>Write off an individual charge</legend>
233
    <legend>Write off an individual charge</legend>
234
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
234
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
Lines 295-301 Link Here
295
    [% END %]
295
    [% END %]
296
296
297
    <form name="payfine" id="payfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
297
    <form name="payfine" id="payfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
298
    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
298
    [% INCLUDE csrf-token.inc %]
299
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
299
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
300
    <input type="hidden" name="selected_accts" id="selected_accts" value="[% selected_accts | html %]" />
300
    <input type="hidden" name="selected_accts" id="selected_accts" value="[% selected_accts | html %]" />
301
    <input type="hidden" name="total" id="total" value="[% total | html %]" />
301
    <input type="hidden" name="total" id="total" value="[% total | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/two_factor_auth.tt (-1 / +1 lines)
Lines 53-59 Link Here
53
                            <div class="two-factor-status">Status: Enabled</div>
53
                            <div class="two-factor-status">Status: Enabled</div>
54
54
55
                            <form id="two-factor-auth" action="/cgi-bin/koha/members/two_factor_auth.pl" method="post">
55
                            <form id="two-factor-auth" action="/cgi-bin/koha/members/two_factor_auth.pl" method="post">
56
                                <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
56
                                [% INCLUDE csrf-token.inc %]
57
                                <input type="hidden" name="op" value="disable-2FA" />
57
                                <input type="hidden" name="op" value="disable-2FA" />
58
                                <input type="submit" value="Disable two-factor authentication" />
58
                                <input type="submit" value="Disable two-factor authentication" />
59
                            </form>
59
                            </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/import_borrowers.tt (-1 / +1 lines)
Lines 356-362 Link Here
356
        </fieldset>
356
        </fieldset>
357
357
358
        <fieldset class="action">
358
        <fieldset class="action">
359
            <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
359
            [% INCLUDE csrf-token.inc %]
360
            <input type="submit" class="btn btn-primary" value="Import" />
360
            <input type="submit" class="btn btn-primary" value="Import" />
361
        </fieldset>
361
        </fieldset>
362
    </form>
362
    </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/picture-upload.tt (-1 / +1 lines)
Lines 148-154 Link Here
148
                        </ol>
148
                        </ol>
149
	            </fieldset>
149
	            </fieldset>
150
                    <fieldset class="action">
150
                    <fieldset class="action">
151
                        <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
151
                        [% INCLUDE csrf-token.inc %]
152
                        <input type="hidden" name="op" value="Upload" />
152
                        <input type="hidden" name="op" value="Upload" />
153
                        <input type="submit" class="btn btn-primary" value="Upload" />
153
                        <input type="submit" class="btn btn-primary" value="Upload" />
154
						<a href="/cgi-bin/koha/tools/tools-home.pl" class="cancel">Cancel</a>
154
						<a href="/cgi-bin/koha/tools/tools-home.pl" class="cancel">Cancel</a>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-memberentry.tt (-1 / +1 lines)
Lines 1053-1059 Link Here
1053
                                [% IF OPACPatronDetails %]
1053
                                [% IF OPACPatronDetails %]
1054
                                    <fieldset class="action">
1054
                                    <fieldset class="action">
1055
                                        <input type="hidden" name="action" value="update" />
1055
                                        <input type="hidden" name="action" value="update" />
1056
                                        <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
1056
                                        [% INCLUDE csrf-token.inc %]
1057
                                        <input type="submit" class="btn btn-primary" value="Submit update request" />
1057
                                        <input type="submit" class="btn btn-primary" value="Submit update request" />
1058
                                    </fieldset>
1058
                                    </fieldset>
1059
                                [% END %]
1059
                                [% END %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-messaging.tt (-1 / +1 lines)
Lines 41-47 Link Here
41
                        <div class="alert alert-success"><p><strong>Settings updated</strong></p></div>
41
                        <div class="alert alert-success"><p><strong>Settings updated</strong></p></div>
42
                        [% END %]
42
                        [% END %]
43
                        <form action="/cgi-bin/koha/opac-messaging.pl" method="post" name="opacmessaging">
43
                        <form action="/cgi-bin/koha/opac-messaging.pl" method="post" name="opacmessaging">
44
                            <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
44
                            [% INCLUDE csrf-token.inc %]
45
                            <input type="hidden" name="modify" value="yes" />
45
                            <input type="hidden" name="modify" value="yes" />
46
46
47
                            [% IF Koha.Preference( 'EnhancedMessagingPreferencesOPAC' )  %]
47
                            [% IF Koha.Preference( 'EnhancedMessagingPreferencesOPAC' )  %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-sendbasketform.tt (-1 / +1 lines)
Lines 35-41 Link Here
35
                                    <label for="comment">Comment:</label>
35
                                    <label for="comment">Comment:</label>
36
                                    <textarea id="comment" name="comment" rows="4" cols="40" class="form-control"></textarea>
36
                                    <textarea id="comment" name="comment" rows="4" cols="40" class="form-control"></textarea>
37
                                    <input type="hidden" name="bib_list" value="[% bib_list | html %]" />
37
                                    <input type="hidden" name="bib_list" value="[% bib_list | html %]" />
38
                                    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
38
                                    [% INCLUDE csrf-token.inc %]
39
                                </fieldset>
39
                                </fieldset>
40
                                [% IF Koha.Preference('OPACHoldRequests') || Koha.Preference('OpacRenewalAllowed') %]<p id="donotrequestbymail">Please do not use this mail to request or renew books.</p>[% END %]
40
                                [% IF Koha.Preference('OPACHoldRequests') || Koha.Preference('OpacRenewalAllowed') %]<p id="donotrequestbymail">Please do not use this mail to request or renew books.</p>[% END %]
41
                                <fieldset class="action">
41
                                <fieldset class="action">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt (-2 / +1 lines)
Lines 245-251 Link Here
245
                                        <input type="radio" id="no-autorenew_checkouts" name="borrower_autorenew_checkouts" value="0" checked="checked" />
245
                                        <input type="radio" id="no-autorenew_checkouts" name="borrower_autorenew_checkouts" value="0" checked="checked" />
246
                                    </label>
246
                                    </label>
247
                                [% END %]
247
                                [% END %]
248
                        <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
248
                        [% INCLUDE csrf-token.inc %]
249
                        <input type="hidden" name="update_arc" value="1" />
249
                        <input type="hidden" name="update_arc" value="1" />
250
                        <input type="submit" value="Update auto-renewal preference" />
250
                        <input type="submit" value="Update auto-renewal preference" />
251
                    </form>
251
                    </form>
252
- 

Return to bug 34478