dcd1f5d48c
Here we go, next step then. As we did not fix the performance issue when autofiltering the variables (see bug 20975), the only solution we have is to add the filters explicitely. This patch has been autogenerated (using add_html_filters.pl, see next pathces) and add the html filter to all the variables displayed in the template. Exceptions are made (using the new 'raw' TT filter) to the variable we already listed in the previous versions of this patch. To test: - Use t/db_dependent/Koha/Patrons.t to populate your DB with autogenerated data which contain <script> tags - Remove them from borrower_debarments.comments (there are allowed here) update borrower_debarments set comment="html tags possible here"; - From the interface hit page and try to catch alert box. If you find one it means you find a possible XSS. To know where it comes from: * note the exact URL where you found it * note the alert box content * Dump your DB and search for the string in the dump to identify its location (for instance table.field) Next: * Ideally we would like to use the raw filter when it is not necessary to HTML escape the variables (in big loop for instance) * Provide a QA script to catch missing filters (we want html, uri, url or raw, certainly others that I am forgetting now) * Replace the html filters with uri when needed (!) Signed-off-by: Owen Leonard <oleonard@myacpl.org> Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com> Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
37 lines
3.9 KiB
Text
37 lines
3.9 KiB
Text
[% INCLUDE 'help-top.inc' %]
|
|
|
|
<h1>Rotating Collections</h1>
|
|
|
|
<p>Rotating Collections is a tool for managing collections of materials that frequently get shifted from library to library. It adds the ability to store not only an item's home library and current location, but also information about where it is supposed to be transferred to next to ensure that all items in the collection are sent to the correct library. When an item in a rotating collection is checked in, library staff are notified that the item is part of a rotating collection and which branch it should be sent to if it is not at the correct one.</p>
|
|
|
|
<p style="color: #990000"><strong>Important:</strong> <a href="http://koha-community.org/manual/[% helpVersion | html %]/en/html/administration.html#automaticitemreturn">AutomaticItemReturn</a> (system preference) must be set to "Don't automatically transfer items to their home library when they are returned" for Rotating Collections to function properly.</p>
|
|
|
|
<ul>
|
|
</li>To create a new rotating collection, click the "New Collection" button, fill in the Title and Description, and click Submit. Once submitted you'll see "Collection Name added successfully"; click "Return to rotating collections home" to return to the main Rotating Collections management page (or click Rotating Collections in the sidebar).</li>
|
|
<li>To add items to a collection, click "Add or remove items" next to the collection's name in the list of collections. Under "Add or remove items" scan or type in the barcode of the item you wish to add to the collection, and hit Enter or click Submit if necessary.</li>
|
|
<li>To remove an item from a collection, either click Remove next to the item's barcode in the list of items within the collection or check the "Remove item from collection" box next to the Barcode text box under "Add or remove items", and scan or type in the barcode, clicking Submit or hitting Enter if necessary. Note: The "Remove item from collection" checkbox will remain checked as long as you are on the "Add or remove items" page, unless you uncheck it, to facilitate quickly removing a number of items at a time by scanning their barcodes.</li>
|
|
</ul>
|
|
|
|
<br>
|
|
|
|
<h2>Transfer a Rotating Collection</h2>
|
|
|
|
<p>Transferring a collection will:</p>
|
|
<ul>
|
|
<li>Change the current location of the items in that collection to the library it is to be transferred to</li>
|
|
<li>Initiate a transfer from its original current location/holding library to the current location/holding library it is to be rotated to. When a library receives a collection they will need to check in the items to complete the transfer.</li>
|
|
</ul>
|
|
|
|
<p>You can transfer a collection in one of two ways:</p>
|
|
<ul>
|
|
<li>From the main Rotating Collections page, click on Transfer next to the title of the collection you wish to transfer; choose the library you wish to transfer the collection to and click "Transfer collection".</li>
|
|
<li>Or, from the "add or remove items" page for a collection, you can click the Transfer button, choose the library you wish to transfer the collection to and click "Transfer Collection".</li>
|
|
</ul>
|
|
|
|
<p style="color: #990000"><strong>Important:</strong> In order to complete the transfer process, the library receiving the rotating collection should check in all items from the collection as they receive them. This will clear the transfer so that the items are no longer shown as being "in transit".</p>
|
|
|
|
<p>If an item in a rotating collection is checked in at a library other than the one it is supposed to be transferred to, a notification will appear notifying library staff that the item is part of a rotating collection, also letting them know where the item needs to be sent.</p>
|
|
|
|
<p><strong>See the full documentation for Rotating Collections in the <a href="http://koha-community.org/manual/[% helpVersion | html %]/en/html/tools.html#rotating-collections">manual</a> (online).</strong></p>
|
|
|
|
[% INCLUDE 'help-bottom.inc' %]
|