| Summary: | CSRF error when trying to send EDIFACT message for a basket and only one EAN defined | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Nick Clemens (kidclamp) <nick> | 
| Component: | Acquisitions | Assignee: | Bugs List <koha-bugs> | 
| Status: | RESOLVED DUPLICATE | QA Contact: | Testopia <testopia> | 
| Severity: | normal | ||
| Priority: | P5 - low | CC: | lucas | 
| Version: | Main | ||
| Hardware: | All | ||
| OS: | All | ||
| GIT URL: | Initiative type: | --- | |
| Sponsorship status: | --- | Crowdfunding goal: | 0 | 
| Patch complexity: | --- | Documentation contact: | |
| Documentation submission: | Text to go in the release notes: | ||
| Version(s) released in: | Circulation function: | ||
IN the code, acqui/edi_ean.pl: 41 if ( @eans == 1 ) { 42 my $ean = $eans[0]->ean; 43 print $query->redirect( 44 "/cgi-bin/koha/acqui/basket.pl?basketno=$basketno&op=cud-ediorder&ean=$ean" 45 ); 46 } Redirect doesn't send the post variables, so the redirect fails with: Programming error - op 'cud-ediorder' must not start with 'cud-' for GET http://localhost:8081/intranet/acqui/basket.pl?basketno=76&op=cud-ediorder&ean=REFW (referer: http://localhost:8081/cgi-bin/koha/acqui/basket.pl) Work around, define a second EAN :-)