Bug 38401 - CSRF error when trying to send EDIFACT message for a basket and only one EAN defined
Summary: CSRF error when trying to send EDIFACT message for a basket and only one EAN ...
Status: RESOLVED DUPLICATE of bug 37993
Alias: None
Product: Koha
Classification: Unclassified
Component: Acquisitions (show other bugs)
Version: Main
Hardware: All All
: P5 - low normal
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-11-07 20:35 UTC by Nick Clemens (kidclamp)
Modified: 2024-11-07 20:42 UTC (History)
1 user (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Nick Clemens (kidclamp) 2024-11-07 20:35:28 UTC
IN the code, acqui/edi_ean.pl:

 41 if ( @eans == 1 ) {
 42     my $ean = $eans[0]->ean;
 43     print $query->redirect(
 44         "/cgi-bin/koha/acqui/basket.pl?basketno=$basketno&op=cud-ediorder&ean=$ean"
 45     );
 46 }


Redirect doesn't send the post variables, so the redirect fails with:
Programming error - op 'cud-ediorder' must not start with 'cud-' for GET http://localhost:8081/intranet/acqui/basket.pl?basketno=76&op=cud-ediorder&ean=REFW (referer: http://localhost:8081/cgi-bin/koha/acqui/basket.pl)


Work around, define a second EAN :-)
Comment 1 Lucas Gass (lukeg) 2024-11-07 20:42:17 UTC

*** This bug has been marked as a duplicate of bug 37993 ***