Lines 200-206
elsif ( $action eq 'update' ) {
Link Here
|
200 |
my $borrower = GetMember( borrowernumber => $borrowernumber ); |
200 |
my $borrower = GetMember( borrowernumber => $borrowernumber ); |
201 |
die "Wrong CSRF token" |
201 |
die "Wrong CSRF token" |
202 |
unless Koha::Token->new->check_csrf({ |
202 |
unless Koha::Token->new->check_csrf({ |
203 |
id => $borrower->{userid}, |
203 |
id => Encode::encode( 'UTF-8', $borrower->{userid} ), |
204 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
204 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
205 |
token => scalar $cgi->param('csrf_token'), |
205 |
token => scalar $cgi->param('csrf_token'), |
206 |
}); |
206 |
}); |
Lines 221-227
elsif ( $action eq 'update' ) {
Link Here
|
221 |
invalid_form_fields => $invalidformfields, |
221 |
invalid_form_fields => $invalidformfields, |
222 |
borrower => \%borrower, |
222 |
borrower => \%borrower, |
223 |
csrf_token => Koha::Token->new->generate_csrf({ |
223 |
csrf_token => Koha::Token->new->generate_csrf({ |
224 |
id => $borrower->{userid}, |
224 |
id => Encode::encode( 'UTF-8', $borrower->{userid} ), |
225 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
225 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
226 |
}), |
226 |
}), |
227 |
); |
227 |
); |
Lines 262-268
elsif ( $action eq 'update' ) {
Link Here
|
262 |
nochanges => 1, |
262 |
nochanges => 1, |
263 |
borrower => GetMember( borrowernumber => $borrowernumber ), |
263 |
borrower => GetMember( borrowernumber => $borrowernumber ), |
264 |
csrf_token => Koha::Token->new->generate_csrf({ |
264 |
csrf_token => Koha::Token->new->generate_csrf({ |
265 |
id => $borrower->{userid}, |
265 |
id => Encode::encode( 'UTF-8', $borrower->{userid} ), |
266 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
266 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
267 |
}), |
267 |
}), |
268 |
); |
268 |
); |
Lines 285-291
elsif ( $action eq 'edit' ) { #Display logged in borrower's data
Link Here
|
285 |
guarantor => scalar Koha::Patrons->find($borrowernumber)->guarantor(), |
285 |
guarantor => scalar Koha::Patrons->find($borrowernumber)->guarantor(), |
286 |
hidden => GetHiddenFields( $mandatory, 'modification' ), |
286 |
hidden => GetHiddenFields( $mandatory, 'modification' ), |
287 |
csrf_token => Koha::Token->new->generate_csrf({ |
287 |
csrf_token => Koha::Token->new->generate_csrf({ |
288 |
id => $borrower->{userid}, |
288 |
id => Encode::encode( 'UTF-8', $borrower->{userid} ), |
289 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
289 |
secret => md5_base64( Encode::encode( 'UTF-8', C4::Context->config('pass') ) ), |
290 |
}), |
290 |
}), |
291 |
); |
291 |
); |