Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity
Koha/koha-tmpl/intranet-tmpl/prog/en/modules/members
History
Nick Clemens d6f99f0df1 Bug 20701: Add csrf protection to maninvoice.pl 
TO test:
1 - Be signed in to Koha
2 - Add a manual invoice to an account, works fine
3 - Now do it via url: http://localhost:8081/cgi-bin/koha/members/maninvoice.pl?borrowernumber=5&type=test&amount=5&add=Save
4 - Apply patches
5 - Test that everything continues to work as expected (but more securely)
6 - Try adding a new invoice via URL
7 - Should get 'internal server error' and wrong csrf token in logs

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
2018-05-23 12:19:33 -03:00
..
tables
accountline-details.tt Bug 20719: USE Branches in TT files 2018-05-11 10:52:45 -03:00
apikeys.tt Bug 20803: Cannot search to hold or use print options from API keys interface 2018-05-23 11:44:10 -03:00
boraccount.tt Bug 20719: USE Branches in TT files 2018-05-11 10:52:45 -03:00
deletemem.tt Bug 20719: USE Branches in TT files 2018-05-11 10:52:45 -03:00
discharge.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00
discharges.tt Bug 20538: (follow-up) Update discharges request page with Asset plugin 2018-04-13 11:49:44 -03:00
files.tt Bug 20719: Add missing USE Branches to files.tt 2018-05-11 10:52:45 -03:00
holdshistory.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00
housebound.tt Bug 20719: USE Branches in TT files 2018-05-11 10:52:45 -03:00
mancredit.tt Bug 20719: USE Branches in TT files 2018-05-11 10:52:45 -03:00
maninvoice.tt Bug 20701: Add csrf protection to maninvoice.pl 2018-05-23 12:19:33 -03:00
member-flags.tt Bug 20100: Explain why the checkbox is disabled 2018-04-25 10:37:31 -03:00
member-password.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00
member.tt Bug 9302: Use new 'edit borrowers' permission 2018-04-20 13:34:41 -03:00
memberentrygen.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00
members-update.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00
merge-patrons.tt Bug 9302: Add error message if keeper patron is invalid 2018-04-20 13:34:41 -03:00
moremember-brief.tt Bug 19954: Update popup window templates to use Bootstrap grid: Patrons 2018-02-18 16:48:47 -03:00
moremember-print.tt Bug 12001: (QA follow-up) Fix patron account summary print 2018-02-23 10:57:30 -03:00
moremember-receipt.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00
moremember.tt Bug 20792: (bug 18789 follow-up) Fix patron edit page if TranslateNotices is set 2018-05-21 10:58:19 -03:00
nl-search.tt Bug 20719: USE Branches in TT files 2018-05-11 10:52:45 -03:00
notices.tt Bug 12123: Make iframe large enough to remove scroll bars 2018-04-19 12:32:14 -03:00
pay.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00
paycollect.tt Bug 18786: Add ability to create custom payment types 2018-04-19 12:32:21 -03:00
printfeercpt.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00
printinvoice.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00
purchase-suggestions.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00
readingrec.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00
routing-lists.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00
statistics.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00
update-child.tt Bug 20538: Remove the need of writing [% KOHA_VERSION %] everywhere 2018-04-13 11:49:44 -03:00