]> git.koha-community.org Git - koha.git/commit
Bug 33702: Prevent ILL requests to be modified by somebody else
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Wed, 10 May 2023 05:37:57 +0000 (07:37 +0200)
committerArthur Suzuki <arthur.suzuki@biblibre.com>
Tue, 23 May 2023 18:43:32 +0000 (20:43 +0200)
commitffad8932522163f31b1d5b1d9a0f8a68a28132af
tree3a8b85ebfdf6e3d5bdd88149952018d8c88c30de
parent55d5c76e5a6a9e0f76e6bf50d1e7a8ef68bc118e
Bug 33702: Prevent ILL requests to be modified by somebody else

Same as previous patch, but for 'update' and 'cancreq'.
We remove the redirect, but here we only want to focus on the security
fix.

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Confirmed. Without this patch a patron can modify and cancel any ILL
request in the OPAC. With this patch the patron is redirected to the
404 page if modification or cancellation is attempted.

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
opac/opac-illrequests.pl