From 1cadd39cd89dc2091d688e6c3ad49b5b02a2eefd Mon Sep 17 00:00:00 2001
From: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Date: Tue, 30 Apr 2024 12:12:12 +0000
Subject: [PATCH] Bug 18360: (follow-up) Fix for CSRF

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
---
 koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt
index abc7ceed97..c815cadc75 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt
@@ -854,6 +854,7 @@
                                             </tbody>
                                         </table> <!-- /#cancelledorderst -->
                                         <form id="delete_order_form" method="post">
+                                            [% INCLUDE 'csrf-token.inc' %]
                                             <input type="hidden" name="op" value="cud-delete-order"/>
                                             <input type="hidden" name="ordernumber" value=""/>
                                             <input type="hidden" name="basketno" value="[% basketno | html %]"/>
-- 
2.39.5