Bug 34478: Manual fix - Switch to post, update op, add missing include - basket

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
This commit is contained in:
Nick Clemens 2024-01-26 11:27:52 -05:00 committed by Jonathan Druart
parent 0e1239e93b
commit 43a4a705bf
No known key found for this signature in database
GPG Key ID: A085E712BEF0E0F0
2 changed files with 12 additions and 4 deletions

View File

@ -183,7 +183,7 @@ if ( $op eq 'cud-delete_confirm' ) {
}
$op = 'list';
} elsif ($op eq 'close') {
} elsif ($op eq 'cud-close') {
my $confirm = $query->param('confirm') || $confirm_pref eq '2';
if ($confirm) {

View File

@ -94,7 +94,13 @@
</div>
[% ELSE %]
<div class="btn-group">
<a href="/cgi-bin/koha/acqui/basket.pl?op=close&amp;basketno=[% basketno | uri %]&amp;booksellerid=[% booksellerid | uri %]" class="btn btn-default" id="closebutton"><i class="fa fa-times-circle"></i> Close basket</a>
<form method="post" action="/cgi-bin/koha/acqui/basket.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="cud-close">
<input type="hidden" name="bookseller" value="[% booksellerid | html %]">
<button type="submit" class="btn btn-default" id="close button"><i class="fa fa-times-circle"></i> Close basket</button>
<input type="hidden" name="basketno" value="[% basketno | html %]">
</form>
</div>
[% END %]
@ -102,6 +108,7 @@
[% IF Koha.Preference('EDIFACT') && ediaccount %]
<div class="btn-group"><form action="/cgi-bin/koha/acqui/edi_ean.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="cud-ediorder" />
<input type="hidden" name="basketno" value="[% basketno | html %]" />
<input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
@ -863,7 +870,8 @@
[% IF ( confirm_close ) %]
<div id="closebasket_needsconfirmation" class="dialog alert">
<form method="get" action="/cgi-bin/koha/acqui/basket.pl">
<form method="post" action="/cgi-bin/koha/acqui/basket.pl">
[% INCLUDE 'csrf-token.inc' %]
<h1>Are you sure you want to close basket [% basketname | html %]?</h1>
[% IF ( CAN_user_acquisition_group_manage ) %]
<p>
@ -872,7 +880,7 @@
</p>
[% END %]
<input type="hidden" id="basketno" value="[% basketno | html %]" name="basketno" />
<input type="hidden" value="close" name="op" />
<input type="hidden" value="cud-close" name="op" />
<input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
<input type="hidden" name="confirm" value="1" />
<input type="hidden" name="basketgroupname" value="[% basketgroupname | html %]" />