From 4354a4c1721b190a5980bd670862a88273c0c260 Mon Sep 17 00:00:00 2001
From: David Cook <dcook@prosentient.com.au>
Date: Wed, 14 Feb 2024 23:45:28 +0000
Subject: [PATCH] Bug 34478: Manual fix - Remove csrf_token from GET to
 sco-patron-image.pl

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
---
 koha-tmpl/opac-tmpl/bootstrap/en/modules/sco/sco-main.tt | 2 +-
 opac/sco/sco-patron-image.pl                             | 1 -
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/koha-tmpl/opac-tmpl/bootstrap/en/modules/sco/sco-main.tt b/koha-tmpl/opac-tmpl/bootstrap/en/modules/sco/sco-main.tt
index 58da120e71..a39f777b35 100644
--- a/koha-tmpl/opac-tmpl/bootstrap/en/modules/sco/sco-main.tt
+++ b/koha-tmpl/opac-tmpl/bootstrap/en/modules/sco/sco-main.tt
@@ -295,7 +295,7 @@
                 </div> <!-- / .span12/12 -->
                 [% IF ( display_patron_image ) %]
                     <div class="col-lg-2">
-                        <img src="/cgi-bin/koha/sco/sco-patron-image.pl?borrowernumber=[% borrowernumber | uri %]&csrf_token=[% csrf_token | uri %]" alt="" />
+                        <img src="/cgi-bin/koha/sco/sco-patron-image.pl?borrowernumber=[% borrowernumber | uri %]" alt="" />
                     </div>
                 [% END %]
             </div> <!-- / .row -->
diff --git a/opac/sco/sco-patron-image.pl b/opac/sco/sco-patron-image.pl
index e311e01fe6..18662e2bb7 100755
--- a/opac/sco/sco-patron-image.pl
+++ b/opac/sco/sco-patron-image.pl
@@ -41,7 +41,6 @@ unless ( in_iprange(C4::Context->preference('SelfCheckAllowByIPRanges')) ) {
 }
 
 my ($borrowernumber) = C4::Service->require_params('borrowernumber');
-my ($csrf_token) = C4::Service->require_params('csrf_token');
 
 my $patron = Koha::Patrons->find( $borrowernumber );
 my $patron_image = $patron->image;
-- 
2.39.5