From 1a98ef7584c70bc92b3fc6750830f349530b2015 Mon Sep 17 00:00:00 2001
From: Kyle M Hall <kyle@bywatersolutions.com>
Date: Fri, 19 Jan 2024 09:11:40 -0500
Subject: [PATCH] Bug 34478: Manual fix - account payout

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
---
 .../intranet-tmpl/prog/en/modules/authorities/authorities.tt  | 4 ++--
 koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt | 4 ++--
 members/boraccount.pl                                         | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/authorities/authorities.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/authorities/authorities.tt
index c20b63d261..f9d27a0b44 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/authorities/authorities.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/authorities/authorities.tt
@@ -419,11 +419,11 @@
                         <h3>Duplicate record suspected</h3>
                         <p>Is this a duplicate of <a href="/cgi-bin/koha/authorities/detail.pl?authid=[% duplicateauthid | uri %]" class="popup" onclick="openWindow('/cgi-bin/koha/authorities/detail.pl?authid=[% duplicateauthid | html %]&amp;popup=1', 'DuplicateAuthority','800','600'); return false;" class="button">[% duplicateauthvalue | html %]</a> ?</p>
 
-                        <form action="authorities.pl" method="get">
+                        <form action="authorities.pl" method="post">
                             <input type="hidden" name="authid" value="[% duplicateauthid | html %]" />
                             <button type="submit" class="new"><i class="fa-solid fa-pencil" aria-hidden="true"></i> Yes: Edit existing authority</button>
                         </form>
-                        <form action="authorities.pl" method="get">
+                        <form action="authorities.pl" method="post">
                             <button class="new" onclick="confirmnotdup('items'); return false;"><i class="fa fa-save"></i> No: Save as new authority</button>
                         </form>
                     </div>
diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt
index 0e543e310f..c2e295dde2 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt
@@ -215,10 +215,10 @@
 
     <!-- Issue payout modal -->
     <div class="modal" id="issuePayoutModal" tabindex="-1" role="dialog" aria-labelledby="issuePayoutLabel">
-        <form  id="payout_form" action="/cgi-bin/koha/members/boraccount.pl" method="get" enctype="multipart/form-data" class="validated">
+        <form  id="payout_form" action="/cgi-bin/koha/members/boraccount.pl" method="post" enctype="multipart/form-data" class="validated">
             [% INCLUDE 'csrf-token.inc' %]
             <input type="hidden" name="accountlines_id" value="" id="payoutline">
-            <input type="hidden" name="action" value="payout">
+            <input type="hidden" name="action" value="cud-payout">
             <input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]">
             <div class="modal-dialog" role="document">
                 <div class="modal-content">
diff --git a/members/boraccount.pl b/members/boraccount.pl
index 7a2f129def..4a98adfcab 100755
--- a/members/boraccount.pl
+++ b/members/boraccount.pl
@@ -82,7 +82,7 @@ if ( $action eq 'void' ) {
     );
 }
 
-if ( $action eq 'payout' ) {
+if ( $action eq 'cud-payout' ) {
     output_and_exit_if_error($input, $cookie, $template, { check => 'csrf_token' });
     my $payment_id  = scalar $input->param('accountlines_id');
     my $payment     = Koha::Account::Lines->find($payment_id);
-- 
2.39.5