From beec6ef5dfb32653c7bc7dff648eef335b246870 Mon Sep 17 00:00:00 2001
From: Kyle M Hall <kyle@bywatersolutions.com>
Date: Fri, 19 Jan 2024 10:25:35 -0500
Subject: [PATCH] Bug 34478: Manual fix - delete baskets - Add csrf include

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
---
 koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt
index 8630431d5c..85393f33ae 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt
@@ -132,6 +132,7 @@
                                                 <div class="modal-footer">
                                                     <button type="button" class="btn btn-primary" data-dismiss="modal">Cancel</button>
                                                     <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
+                                                        [% INCLUDE 'csrf-token.inc' %]
                                                         <input type="hidden" name="op" value="cud-delete_confirm" />
                                                         <input type="hidden" name="basketno" value="[% basketno | html %]" />
                                                         <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
@@ -150,6 +151,7 @@
                                                 <div class="modal-footer">
                                                     <button type="button" class="btn btn-primary" data-dismiss="modal">Cancel</button>
                                                     <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
+                                                        [% INCLUDE 'csrf-token.inc' %]
                                                         <input type="hidden" name="op" value="cud-delete_confirm" />
                                                         <input type="hidden" name="basketno" value="[% basketno | html %]" />
                                                         <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
@@ -158,6 +160,7 @@
                                                     </form>
 
                                                     <form action="/cgi-bin/koha/acqui/basket.pl" method="post">
+                                                        [% INCLUDE 'csrf-token.inc' %]
                                                         <input type="hidden" name="op" value="cud-delete_confirm" />
                                                         <input type="hidden" name="basketno" value="[% basketno | html %]" />
                                                         <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
-- 
2.39.5