From 97780ea81593bc4af563e2db80f30b712eac9712 Mon Sep 17 00:00:00 2001 From: Pedro Amorim Date: Mon, 20 Oct 2025 15:44:42 +0000 Subject: [PATCH] [24.11] Bug 41057: Return 404 if creating backend is not an OPAC backend --- opac/opac-illrequests.pl | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/opac/opac-illrequests.pl b/opac/opac-illrequests.pl index a4cf46b8125..468c694a735 100755 --- a/opac/opac-illrequests.pl +++ b/opac/opac-illrequests.pl @@ -43,7 +43,11 @@ my $query = CGI->new; our $params = $query->Vars(); # if illrequests is disabled, leave immediately -if ( ! C4::Context->preference('ILLModule') ) { +my $reduced = C4::Context->preference('ILLOpacbackends'); +my $opac_backends = Koha::ILL::Request::Config->new->available_backends( $reduced ); +if ( ! C4::Context->preference('ILLModule') + || ( $params->{backend} && !grep { $_ eq $params->{backend} } @$opac_backends ) ) +{ print $query->redirect("/cgi-bin/koha/errors/404.pl"); exit; } @@ -55,7 +59,6 @@ my ( $template, $loggedinuser, $cookie ) = get_template_and_user({ }); # Are we able to actually work? -my $reduced = C4::Context->preference('ILLOpacbackends'); my $backends = Koha::ILL::Request::Config->new->available_backends($reduced); my $backends_available = ( scalar @{$backends} > 0 ); $template->param( backends_available => $backends_available ); -- 2.39.5