From e1294b6d91087b5d1050df623e5000cc46eb39c4 Mon Sep 17 00:00:00 2001
From: Mason James <mtj@kohaaloha.com>
Date: Wed, 3 May 2017 14:07:02 +1200
Subject: [PATCH] Bug 18124: add to members/deletemem.pl

---
 members/deletemem.pl | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/members/deletemem.pl b/members/deletemem.pl
index ff49b11f6f..d30e4a715f 100755
--- a/members/deletemem.pl
+++ b/members/deletemem.pl
@@ -147,19 +147,15 @@ if ( $op eq 'delete_confirm' or $countissues > 0 or $flags->{'CHARGES'}  or $is_
     if ( not $countissues > 0 and not $flags->{CHARGES} ne '' and not $is_guarantor and not $deletelocal == 0 ) {
         $template->param(
             op         => 'delete_confirm',
-            csrf_token => Koha::Token->new->generate_csrf(
-                {   id     => C4::Context->userenv->{id},
-                    secret => md5_base64( C4::Context->config('pass') ),
-                }
-            ),
+            csrf_token => Koha::Token->new->generate_csrf({ session_id => scalar $input->cookie('CGISESSID') }),
         );
     }
 } elsif ( $op eq 'delete_confirmed' ) {
 
     die "Wrong CSRF token"
-        unless Koha::Token->new->check_csrf({
-            id     => C4::Context->userenv->{id},
-            secret => md5_base64( C4::Context->config('pass') ),
+
+        unless Koha::Token->new->check_csrf( {
+            session_id => $input->cookie('CGISESSID'),
             token  => scalar $input->param('csrf_token'),
         });
     MoveMemberToDeleted($member);