View | Details | Raw Unified | Return to bug 34478
Collapse All | Expand All

(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/circ-menu.inc (-1 / +1 lines)
Lines 255-261 Link Here
255
                        </div>
255
                        </div>
256
                        <input type="hidden" name="uploadfilename" value="patron-photo.jpg" />
256
                        <input type="hidden" name="uploadfilename" value="patron-photo.jpg" />
257
                        <textarea id="uploadfiletext" name="uploadfiletext" style="display:none;"></textarea>
257
                        <textarea id="uploadfiletext" name="uploadfiletext" style="display:none;"></textarea>
258
                        <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
258
                        [% INCLUDE 'csrf-token.inc' %]
259
                        <input type="hidden" name="filetype" value="image" />
259
                        <input type="hidden" name="filetype" value="image" />
260
                        <input type="hidden" name="cardnumber" value="[% patron.cardnumber | html %]" />
260
                        <input type="hidden" name="cardnumber" value="[% patron.cardnumber | html %]" />
261
                        <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
261
                        <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/basket/sendbasketform.tt (-1 / +1 lines)
Lines 33-39 Link Here
33
    </fieldset>
33
    </fieldset>
34
    <fieldset class="action"> <input type="submit" class="btn btn-primary" value="Send" /> <a class="cancel close" href="#">Cancel</a> </fieldset>
34
    <fieldset class="action"> <input type="submit" class="btn btn-primary" value="Send" /> <a class="cancel close" href="#">Cancel</a> </fieldset>
35
    <input type="hidden" name="bib_list" value="[% bib_list | html %]" />
35
    <input type="hidden" name="bib_list" value="[% bib_list | html %]" />
36
    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
36
    [% INCLUDE 'csrf-token.inc' %]
37
</form>
37
</form>
38
38
39
[% END %]</div>
39
[% END %]</div>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/apikeys.tt (-3 / +3 lines)
Lines 62-68 Link Here
62
62
63
                <form id="add-api-key" action="/cgi-bin/koha/members/apikeys.pl" method="post" style="display:none">
63
                <form id="add-api-key" action="/cgi-bin/koha/members/apikeys.pl" method="post" style="display:none">
64
                    <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
64
                    <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
65
                    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
65
                    [% INCLUDE 'csrf-token.inc' %]
66
                    <input type="hidden" name="op" value="generate" />
66
                    <input type="hidden" name="op" value="generate" />
67
                    <fieldset class="brief">
67
                    <fieldset class="brief">
68
                        <legend>Generate new client id/secret pair</legend>
68
                        <legend>Generate new client id/secret pair</legend>
Lines 101-114 Link Here
101
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
101
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
102
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
102
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
103
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
103
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
104
                                                <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
104
                                                [% INCLUDE 'csrf-token.inc' %]
105
                                                <input type="hidden" name="op" value="delete" />
105
                                                <input type="hidden" name="op" value="delete" />
106
                                                <button class="btn btn-default btn-xs delete" type="submit"><i class="fa fa-trash-can"></i> Delete</button>
106
                                                <button class="btn btn-default btn-xs delete" type="submit"><i class="fa fa-trash-can"></i> Delete</button>
107
                                            </form>
107
                                            </form>
108
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
108
                                            <form action="/cgi-bin/koha/members/apikeys.pl" method="post">
109
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
109
                                                <input type="hidden" name="patron_id" value="[% patron.id | html %]" />
110
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
110
                                                <input type="hidden" name="key" value="[% key.id | html %]" />
111
                                                <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
111
                                                [% INCLUDE 'csrf-token.inc' %]
112
                                                [% IF key.active %]
112
                                                [% IF key.active %]
113
                                                    <input type="hidden" name="op" value="revoke" />
113
                                                    <input type="hidden" name="op" value="revoke" />
114
                                                    <button class="btn btn-default btn-xs" type="submit"><i class="fa fa-times"></i> Revoke</button>
114
                                                    <button class="btn btn-default btn-xs" type="submit"><i class="fa fa-times"></i> Revoke</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/deletemem.tt (-1 / +1 lines)
Lines 71-77 Link Here
71
            <h1>Are you sure you want to delete the patron [% patron.firstname | html %] [% patron.surname | html %]?</h1>
71
            <h1>Are you sure you want to delete the patron [% patron.firstname | html %] [% patron.surname | html %]?</h1>
72
            <p>This cannot be undone.</p>
72
            <p>This cannot be undone.</p>
73
            <form action="/cgi-bin/koha/members/deletemem.pl">
73
            <form action="/cgi-bin/koha/members/deletemem.pl">
74
                <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
74
                [% INCLUDE 'csrf-token.inc' %]
75
                <input type="hidden" name="member" value="[% patron.borrowernumber | html %]"/>
75
                <input type="hidden" name="member" value="[% patron.borrowernumber | html %]"/>
76
                <input type="hidden" name="op" value="delete_confirmed" />
76
                <input type="hidden" name="op" value="delete_confirmed" />
77
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
77
                <button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/mancredit.tt (-1 / +1 lines)
Lines 66-72 Link Here
66
                    <div role="tabpanel" class="tab-pane active">
66
                    <div role="tabpanel" class="tab-pane active">
67
                        <form action="/cgi-bin/koha/members/mancredit.pl" method="post" id="mancredit">
67
                        <form action="/cgi-bin/koha/members/mancredit.pl" method="post" id="mancredit">
68
                            <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
68
                            <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
69
                            <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
69
                            [% INCLUDE 'csrf-token.inc' %]
70
70
71
                            <fieldset class="rows">
71
                            <fieldset class="rows">
72
                                <legend>Manual credit</legend>
72
                                <legend>Manual credit</legend>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/maninvoice.tt (-1 / +1 lines)
Lines 75-81 Link Here
75
                [% END %]
75
                [% END %]
76
                <form action="/cgi-bin/koha/members/maninvoice.pl" method="post" id="maninvoice">
76
                <form action="/cgi-bin/koha/members/maninvoice.pl" method="post" id="maninvoice">
77
                    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
77
                    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
78
                    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
78
                    [% INCLUDE 'csrf-token.inc' %]
79
                    <fieldset class="rows">
79
                    <fieldset class="rows">
80
                        <legend>Manual invoice</legend>
80
                        <legend>Manual invoice</legend>
81
                        <ol>
81
                        <ol>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/member-flags.tt (-1 / +1 lines)
Lines 40-46 Link Here
40
[% INCLUDE 'members-toolbar.inc' %]
40
[% INCLUDE 'members-toolbar.inc' %]
41
41
42
<form id="flag_form" method="post" action="/cgi-bin/koha/members/member-flags.pl">
42
<form id="flag_form" method="post" action="/cgi-bin/koha/members/member-flags.pl">
43
    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
43
    [% INCLUDE 'csrf-token.inc' %]
44
    <input type="hidden" name="member" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
44
    <input type="hidden" name="member" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
45
    <input type="hidden" name="newflags" value="1" />
45
    <input type="hidden" name="newflags" value="1" />
46
    <h1>Set permissions for [% INCLUDE 'patron-title.inc' no_html = 1 %]</h1>
46
    <h1>Set permissions for [% INCLUDE 'patron-title.inc' no_html = 1 %]</h1>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/member-password.tt (-1 / +1 lines)
Lines 105-111 Link Here
105
    <div class="hint">Koha cannot display existing passwords. Leave the field blank to leave password unchanged.</div>
105
    <div class="hint">Koha cannot display existing passwords. Leave the field blank to leave password unchanged.</div>
106
</fieldset>
106
</fieldset>
107
    <fieldset class="action">
107
    <fieldset class="action">
108
        <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
108
        [% INCLUDE 'csrf-token.inc' %]
109
        <input type="submit" class="btn btn-primary" value="Save" />
109
        <input type="submit" class="btn btn-primary" value="Save" />
110
        <a class="cancel" href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% patron.borrowernumber | html %]">Cancel</a>
110
        <a class="cancel" href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% patron.borrowernumber | html %]">Cancel</a>
111
    </fieldset>
111
    </fieldset>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/memberentrygen.tt (-1 / +1 lines)
Lines 239-245 legend:hover { Link Here
239
                            <input type="hidden" name="check_member" value="[% check_member | html %]" />
239
                            <input type="hidden" name="check_member" value="[% check_member | html %]" />
240
                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html UNLESS opduplicate %]" />
240
                            <input type="hidden" name="borrowernumber" value="[% borrowernumber | html UNLESS opduplicate %]" />
241
                            <input type="hidden" name="nodouble"  value="[% nodouble | html UNLESS opduplicate %]" />
241
                            <input type="hidden" name="nodouble"  value="[% nodouble | html UNLESS opduplicate %]" />
242
                            <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
242
                            [% INCLUDE 'csrf-token.inc' %]
243
                            [% IF ( step ) %]
243
                            [% IF ( step ) %]
244
                                <input type="hidden" name="step"  value="[% step | html %]" />
244
                                <input type="hidden" name="step"  value="[% step | html %]" />
245
                            [% END %]
245
                            [% END %]
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/paycollect.tt (-3 / +3 lines)
Lines 135-141 Link Here
135
    </ul>
135
    </ul>
136
136
137
    <form name="payindivfine" id="payindivfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
137
    <form name="payindivfine" id="payindivfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
138
    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
138
    [% INCLUDE 'csrf-token.inc' %]
139
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
139
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
140
    <input type="hidden" name="pay_individual" id="pay_individual" value="[% pay_individual | html %]" />
140
    <input type="hidden" name="pay_individual" id="pay_individual" value="[% pay_individual | html %]" />
141
    <input type="hidden" name="itemnumber" id="itemnumber" value="[% itemnumber | html %]" />
141
    <input type="hidden" name="itemnumber" id="itemnumber" value="[% itemnumber | html %]" />
Lines 231-237 Link Here
231
    </ul>
231
    </ul>
232
232
233
    <form name="woindivfine" id="woindivfine" action="/cgi-bin/koha/members/pay.pl" method="post" >
233
    <form name="woindivfine" id="woindivfine" action="/cgi-bin/koha/members/pay.pl" method="post" >
234
    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
234
    [% INCLUDE 'csrf-token.inc' %]
235
    <fieldset class="rows">
235
    <fieldset class="rows">
236
    <legend>Write off an individual charge</legend>
236
    <legend>Write off an individual charge</legend>
237
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
237
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
Lines 298-304 Link Here
298
    [% END %]
298
    [% END %]
299
299
300
    <form name="payfine" id="payfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
300
    <form name="payfine" id="payfine" method="post" action="/cgi-bin/koha/members/paycollect.pl">
301
    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
301
    [% INCLUDE 'csrf-token.inc' %]
302
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
302
    <input type="hidden" name="borrowernumber" id="borrowernumber" value="[% patron.borrowernumber | html %]" />
303
    <input type="hidden" name="selected_accts" id="selected_accts" value="[% selected_accts | html %]" />
303
    <input type="hidden" name="selected_accts" id="selected_accts" value="[% selected_accts | html %]" />
304
    <input type="hidden" name="total" id="total" value="[% total | html %]" />
304
    <input type="hidden" name="total" id="total" value="[% total | html %]" />
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/members/two_factor_auth.tt (-1 / +1 lines)
Lines 58-64 Link Here
58
                            <div class="two-factor-status">Status: Enabled</div>
58
                            <div class="two-factor-status">Status: Enabled</div>
59
59
60
                            <form id="two-factor-auth" action="/cgi-bin/koha/members/two_factor_auth.pl" method="post">
60
                            <form id="two-factor-auth" action="/cgi-bin/koha/members/two_factor_auth.pl" method="post">
61
                                <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
61
                                [% INCLUDE 'csrf-token.inc' %]
62
                                <input type="hidden" name="op" value="disable-2FA" />
62
                                <input type="hidden" name="op" value="disable-2FA" />
63
                                <input type="submit" value="Disable two-factor authentication" />
63
                                <input type="submit" value="Disable two-factor authentication" />
64
                            </form>
64
                            </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/import_borrowers.tt (-1 / +1 lines)
Lines 356-362 Link Here
356
        </fieldset>
356
        </fieldset>
357
357
358
        <fieldset class="action">
358
        <fieldset class="action">
359
            <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
359
            [% INCLUDE 'csrf-token.inc' %]
360
            <input type="submit" class="btn btn-primary" value="Import" />
360
            <input type="submit" class="btn btn-primary" value="Import" />
361
        </fieldset>
361
        </fieldset>
362
    </form>
362
    </form>
(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/picture-upload.tt (-1 / +1 lines)
Lines 148-154 Link Here
148
                        </ol>
148
                        </ol>
149
	            </fieldset>
149
	            </fieldset>
150
                    <fieldset class="action">
150
                    <fieldset class="action">
151
                        <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
151
                        [% INCLUDE 'csrf-token.inc' %]
152
                        <input type="hidden" name="op" value="Upload" />
152
                        <input type="hidden" name="op" value="Upload" />
153
                        <input type="submit" class="btn btn-primary" value="Upload" />
153
                        <input type="submit" class="btn btn-primary" value="Upload" />
154
						<a href="/cgi-bin/koha/tools/tools-home.pl" class="cancel">Cancel</a>
154
						<a href="/cgi-bin/koha/tools/tools-home.pl" class="cancel">Cancel</a>
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-memberentry.tt (-1 / +1 lines)
Lines 1053-1059 Link Here
1053
                                [% IF OPACPatronDetails %]
1053
                                [% IF OPACPatronDetails %]
1054
                                    <fieldset class="action">
1054
                                    <fieldset class="action">
1055
                                        <input type="hidden" name="action" value="update" />
1055
                                        <input type="hidden" name="action" value="update" />
1056
                                        <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
1056
                                        [% INCLUDE 'csrf-token.inc' %]
1057
                                        <input type="submit" class="btn btn-primary" value="Submit update request" />
1057
                                        <input type="submit" class="btn btn-primary" value="Submit update request" />
1058
                                    </fieldset>
1058
                                    </fieldset>
1059
                                [% END %]
1059
                                [% END %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-messaging.tt (-1 / +1 lines)
Lines 41-47 Link Here
41
                        <div class="alert alert-success"><p><strong>Settings updated</strong></p></div>
41
                        <div class="alert alert-success"><p><strong>Settings updated</strong></p></div>
42
                        [% END %]
42
                        [% END %]
43
                        <form action="/cgi-bin/koha/opac-messaging.pl" method="post" name="opacmessaging">
43
                        <form action="/cgi-bin/koha/opac-messaging.pl" method="post" name="opacmessaging">
44
                            <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
44
                            [% INCLUDE 'csrf-token.inc' %]
45
                            <input type="hidden" name="modify" value="yes" />
45
                            <input type="hidden" name="modify" value="yes" />
46
46
47
                            [% IF Koha.Preference( 'EnhancedMessagingPreferencesOPAC' )  %]
47
                            [% IF Koha.Preference( 'EnhancedMessagingPreferencesOPAC' )  %]
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-sendbasketform.tt (-1 / +1 lines)
Lines 35-41 Link Here
35
                                    <label for="comment">Comment:</label>
35
                                    <label for="comment">Comment:</label>
36
                                    <textarea id="comment" name="comment" rows="4" cols="40" class="form-control"></textarea>
36
                                    <textarea id="comment" name="comment" rows="4" cols="40" class="form-control"></textarea>
37
                                    <input type="hidden" name="bib_list" value="[% bib_list | html %]" />
37
                                    <input type="hidden" name="bib_list" value="[% bib_list | html %]" />
38
                                    <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
38
                                    [% INCLUDE 'csrf-token.inc' %]
39
                                </fieldset>
39
                                </fieldset>
40
                                [% IF Koha.Preference('OPACHoldRequests') || Koha.Preference('OpacRenewalAllowed') %]<p id="donotrequestbymail">Please do not use this mail to request or renew books.</p>[% END %]
40
                                [% IF Koha.Preference('OPACHoldRequests') || Koha.Preference('OpacRenewalAllowed') %]<p id="donotrequestbymail">Please do not use this mail to request or renew books.</p>[% END %]
41
                                <fieldset class="action">
41
                                <fieldset class="action">
(-)a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt (-2 / +1 lines)
Lines 245-251 Link Here
245
                                        <input type="radio" id="no-autorenew_checkouts" name="borrower_autorenew_checkouts" value="0" checked="checked" />
245
                                        <input type="radio" id="no-autorenew_checkouts" name="borrower_autorenew_checkouts" value="0" checked="checked" />
246
                                    </label>
246
                                    </label>
247
                                [% END %]
247
                                [% END %]
248
                        <input type="hidden" name="csrf_token" value="[% csrf_token | html %]" />
248
                        [% INCLUDE 'csrf-token.inc' %]
249
                        <input type="hidden" name="update_arc" value="1" />
249
                        <input type="hidden" name="update_arc" value="1" />
250
                        <input type="submit" value="Update auto-renewal preference" />
250
                        <input type="submit" value="Update auto-renewal preference" />
251
                    </form>
251
                    </form>
252
- 

Return to bug 34478