From 1aaf1021580e0d56087b2f6b5629f742e653b1a6 Mon Sep 17 00:00:00 2001 From: Aleisha Amohia Date: Mon, 2 Sep 2024 23:55:00 +0000 Subject: [PATCH] Bug 31632: (follow-up) CSRF protection for linking order to suggestion Signed-off-by: Andrew Fuerste Henry Signed-off-by: Emily Lamancusa --- acqui/newordersuggestion.pl | 2 +- koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt | 3 ++- .../intranet-tmpl/prog/en/modules/acqui/newordersuggestion.tt | 3 ++- 3 files changed, 5 insertions(+), 3 deletions(-) diff --git a/acqui/newordersuggestion.pl b/acqui/newordersuggestion.pl index fec5a2ef10..3c467892f7 100755 --- a/acqui/newordersuggestion.pl +++ b/acqui/newordersuggestion.pl @@ -129,7 +129,7 @@ if ( $op eq 'connectDuplicate' ) { ConnectSuggestionAndBiblio( $suggestionid, $duplicateNumber ); } -if ( $op eq 'link_order' and $link_order ) { +if ( $op eq 'cud-link_order' and $link_order ) { my $order = Koha::Acquisition::Orders->find($link_order); my $suggestion = Koha::Suggestions->find($suggestionid); $suggestion->update( { biblionumber => $order->biblionumber } ) if $order->biblionumber; diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt index 2c97d85a08..31b8fc1d9b 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt @@ -739,7 +739,7 @@
[% END %] [% UNLESS ( books_loo.suggestionid ) %] - [% tp('verb', 'Link suggestion') | html %] + [% tp('verb', 'Link suggestion') | html %] [% END %] [% END %] @@ -1028,6 +1028,7 @@ [% INCLUDE 'datatables.inc' %] [% INCLUDE 'columns_settings.inc' %] [% Asset.js("js/acq.js") | $raw %] + [% Asset.js("js/form-submit.js") | $raw %] [% INCLUDE 'calendar.inc' %]