From dce068d8b82c15fbf7bbe57bb9ab0e8a5e93b621 Mon Sep 17 00:00:00 2001 From: Baptiste Wojtkowski Date: Wed, 16 Jul 2025 13:38:06 +0200 Subject: [PATCH] Bug 23258: fix CSRF issues --- circ/batch_holding.pl | 4 ++-- .../intranet-tmpl/prog/en/modules/circ/batch_holding.tt | 6 ++++-- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/circ/batch_holding.pl b/circ/batch_holding.pl index 900c1f0b7b..8d6c6979b4 100755 --- a/circ/batch_holding.pl +++ b/circ/batch_holding.pl @@ -66,7 +66,7 @@ if ($op) { } } -if ($op eq "show"){ +if ($op eq "cud-show"){ my $filefh = $input->upload('uploadfile'); my $filecontent = $input->param('filecontent'); my $branch = $input->param('branch'); @@ -131,7 +131,7 @@ if ($op eq "show"){ ); } -elsif ($op eq "result") { +elsif ($op eq "cud-result") { my $branch = $input->param('branch'); my $action = $input->param('action'); my @itemnumbers = $input->multi_param('holdable'); diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/batch_holding.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/batch_holding.tt index e67a4a41a5..023b70c8d3 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/batch_holding.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/batch_holding.tt @@ -46,6 +46,7 @@ [% IF (holdloop) %]

[% action %] holds on the following barcodes

+ [% INCLUDE 'csrf-token.inc' %] - + @@ -97,6 +98,7 @@ [% ELSE %]

Batch holding

+ [% INCLUDE 'csrf-token.inc' %]
Use a barcode file
    @@ -146,7 +148,7 @@
- +
[% END %] -- 2.30.2