From 817da1134759373698c3575ce5af5ccef71fe481 Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Fri, 4 Aug 2023 11:06:16 +0200 Subject: [PATCH] Bug 34478: Add 'op' to opac-user.tt --- koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt | 1 + opac/opac-renew.pl | 3 +++ opac/opac-user.pl | 4 +++- 3 files changed, 7 insertions(+), 1 deletion(-) diff --git a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt index 50734dbbf2c..f2c3eab099a 100644 --- a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt +++ b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt @@ -564,6 +564,7 @@ [% INCLUDE 'csrf-token.inc' %] Renew + [% FOREACH ISSUE IN ISSUES %] [% IF ISSUE.status %] diff --git a/opac/opac-renew.pl b/opac/opac-renew.pl index db70a167169..dff4d5b21fb 100755 --- a/opac/opac-renew.pl +++ b/opac/opac-renew.pl @@ -31,6 +31,9 @@ use C4::Members; use Koha::Items; use Koha::Patrons; my $query = CGI->new; +my $op = $query->param('op') || q{}; + +die "op must be set" unless $op eq 'renew'; my ( $template, $borrowernumber, $cookie ) = get_template_and_user( { diff --git a/opac/opac-user.pl b/opac/opac-user.pl index 5f86bed3d6a..ec48ded4f5c 100755 --- a/opac/opac-user.pl +++ b/opac/opac-user.pl @@ -57,6 +57,8 @@ use Date::Calc qw( Date_to_Days Today ); my $query = CGI->new; +my $op = $query->param('op') || q{}; + # CAS single logout handling # Will print header and exit if ( C4::Context->preference('casAuthentication') ) { @@ -87,7 +89,7 @@ $template->param( shibbolethAuthentication => C4::Context->config('useshibboleth # get borrower information .... my $patron = Koha::Patrons->find( $borrowernumber ); -if( $query->param('update_arc') && C4::Context->preference("AllowPatronToControlAutorenewal") ){ +if( $op eq 'update_arc' && C4::Context->preference("AllowPatronToControlAutorenewal") ){ die "Wrong CSRF token" unless Koha::Token->new->check_csrf({ session_id => scalar $query->cookie('CGISESSID'), -- 2.25.1