Bug 36739: Correct CSRF change to budget deletions
authorOwen Leonard <oleonard@myacpl.org>
Wed, 1 May 2024 11:04:41 +0000 (11:04 +0000)
committerKatrin Fischer <katrin.fischer@bsz-bw.de>
Fri, 17 May 2024 10:03:53 +0000 (12:03 +0200)
commitb40d8e90bd598301dfd4d1122501cb8bff3279a4
tree24b0a85059628f9cc2e397d323716d8119b6b8f4
parentb71ee66dd7c62c6dbb39e5d24a16a37b2183288b
Bug 36739: Correct CSRF change to budget deletions

This is another instance of the deletion confirmation step getting
mistakenly auto-updated as if it were the deletion step. The
'delete_confirm' doesn't need the 'cud-' prefix, only the
'delete_confirmed' step.

To test, apply the patch and restart services.

- Test the process of deleting a budget.
- On the confirmation step you should see the name of the budget you're
  about to delete.
- After confirming, the deletion should complete correctly.

Signed-off-by: Caroline Cyr La Rose <caroline.cyr-la-rose@inlibro.com>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
admin/aqbudgetperiods.pl