To reproduce: 1. Go to Administration > System Preferences > Local Use 2. Attempt to delete a local system preference --> The confirmation page displays a blank name and value 3. Click "Yes, delete" --> The system preference is still there
Created attachment 167718 [details] [review] Bug 37091: Correct op parameter in systempreferences.pl To test: 1. Go to Administration > System Preferences > Local Use 2. Attempt to delete a local system preference --> The confirmation page displays a blank name and value 3. Click "Yes, delete" --> The system preference is still there 4. Apply patch, restart_all, and reload page 5. Attempt to delete the system preference again --> The confirmation page displays correct information 6. Click "Yes, delete" --> The system preference is deleted successfully
Created attachment 167764 [details] [review] Bug 37091: Correct op parameter in systempreferences.pl To test: 1. Go to Administration > System Preferences > Local Use 2. Attempt to delete a local system preference --> The confirmation page displays a blank name and value 3. Click "Yes, delete" --> The system preference is still there 4. Apply patch, restart_all, and reload page 5. Attempt to delete the system preference again --> The confirmation page displays correct information 6. Click "Yes, delete" --> The system preference is deleted successfully Signed-off-by: David Nind <david@davidnind.com>
Testing notes (using KTD): 1. Before the patch, I get an error trace when trying to delete a local use system preference (either an existing one or a new one): Can't call method "delete" on an undefined value at /kohadevbox/koha/C4/Context.pm line 436 ..... 2. After the patch, and after the local use system preference is deleted, the body of the page is blank, rather than listing the remaining local use system preferences. The system preference categories are listed on the left, the breadrumb is just "Administration", Search system preferences is selected in the header, and the browser page title is "Local use system preferences > Administration > Koha". I'm not sure what it did before the CSRF patch, and whether this needs fixing as well.
The proposed patch removes "cud-" prefix in .pl whereas it is a delete operation. The fix should be to add the "cud-" prefix in templates
(In reply to Julian Maurice from comment #4) > The proposed patch removes "cud-" prefix in .pl whereas it is a delete > operation. The fix should be to add the "cud-" prefix in templ Please don#t hesitate to set FQA - it helps to alert and keep things moving.
Ah sorry, I didn't want to send that. I started to write it and noticed I was wrong... so please ignore. I will probably pass QA in a few minutes :)
Created attachment 167964 [details] [review] Bug 37091: Correct op parameter in systempreferences.pl To test: 1. Go to Administration > System Preferences > Local Use 2. Attempt to delete a local system preference --> The confirmation page displays a blank name and value 3. Click "Yes, delete" --> The system preference is still there 4. Apply patch, restart_all, and reload page 5. Attempt to delete the system preference again --> The confirmation page displays correct information 6. Click "Yes, delete" --> The system preference is deleted successfully Signed-off-by: David Nind <david@davidnind.com> Signed-off-by: Julian Maurice <julian.maurice@biblibre.com>
(In reply to Julian Maurice from comment #6) > Ah sorry, I didn't want to send that. I started to write it and noticed I > was wrong... so please ignore. I will probably pass QA in a few minutes :) All good then, thanks!
Pushed for 24.11! Well done everyone, thank you!
Backported to 24.05.x for upcoming 24.05.02
Full CSRF not in 23.11.x
No changes required to the manual. There are no changes to the page - it is fixing things so that they now work as they should!