Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity

Bug 34478: Manual - change to get and remove CSRF - boraccount

Browse source 
Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
This commit is contained in:
Martin Renvoize 2024-02-09 12:41:25 +00:00 committed by Jonathan Druart
parent ebe28ee344
commit 3fbaf6379e
Signed by: jonathan.druart
GPG key ID: A085E712BEF0E0F0
1 changed files with 3 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt
View file

@ -161,12 +161,11 @@
[% END %]
<a href="accountline-details.pl?accountlines_id=[% account.accountlines_id | uri %]" class="btn btn-default btn-xs details-action"><i class="fa fa-list"></i> Details</a>
[% IF account.is_debit && account.amountoutstanding > 0 %]
<form method="post" action="/cgi-bin/koha/members/paycollect.pl">
[% INCLUDE 'csrf-token.inc' %]
<form method="get" action="/cgi-bin/koha/members/paycollect.pl">
<input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"/>
<input type="hidden" name="pad_individual" value="1" />
<input type="hidden" name="pay_individual" value="1" />
<input type="hidden" name="debit_type_code" value="[% account.debit_type_code | html %]" />
<input type="hidden" name="amount" value="[% account.ammount | html %]" />
<input type="hidden" name="amount" value="[% account.amount | html %]" />
<input type="hidden" name="amountoutstanding" value="[% account.amountoutstanding | html %]"/>
<input type="hidden" name="description" value="[% account.description | html %]" />
<input type="hidden" name="itemnumber" value="[% account.itemnumber | html %]" />