Lines 1282-1288
Link Here
|
1282 |
if (borrowernumber) { |
1282 |
if (borrowernumber) { |
1283 |
var managerlink = '<a href="/cgi-bin/koha/members/moremember.pl' |
1283 |
var managerlink = '<a href="/cgi-bin/koha/members/moremember.pl' |
1284 |
+ '?borrowernumber=' + borrowernumber + '">' |
1284 |
+ '?borrowernumber=' + borrowernumber + '">' |
1285 |
+ borrowername + '</a>'; |
1285 |
+ borrowername.escapeHtml() + '</a>'; |
1286 |
managedby_name.html(managerlink); |
1286 |
managedby_name.html(managerlink); |
1287 |
managedby.val(borrowernumber); |
1287 |
managedby.val(borrowernumber); |
1288 |
} |
1288 |
} |
Lines 1313-1321
Link Here
|
1313 |
success: function (data) { |
1313 |
success: function (data) { |
1314 |
var suggested = '<input type="hidden" id="suggestedby" name="suggestedby" value="' + data.borrowernumber + '" />'; |
1314 |
var suggested = '<input type="hidden" id="suggestedby" name="suggestedby" value="' + data.borrowernumber + '" />'; |
1315 |
suggested += '<a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=' + data.borrowernumber + '">'; |
1315 |
suggested += '<a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=' + data.borrowernumber + '">'; |
1316 |
suggested += data.surname + ', ' + data.firstname + ' (' + data.cardnumber + ')'; |
1316 |
suggested += data.surname.escapeHtml() + ', ' + data.firstname.escapeHtml() + ' (' + data.cardnumber.escapeHtml() + ')'; |
1317 |
suggested += '</a> '; |
1317 |
suggested += '</a> '; |
1318 |
suggested += data._strings.library_id.str + ' (' + data._strings.category_id.str + ')'; |
1318 |
suggested += data._strings.library_id.str.escapeHtml() + ' (' + data._strings.category_id.str.escapeHtml() + ')'; |
1319 |
$("#tdsuggestedby").html(suggested); |
1319 |
$("#tdsuggestedby").html(suggested); |
1320 |
|
1320 |
|
1321 |
}, |
1321 |
}, |
1322 |
- |
|
|