From fe6927f95908295783056dae6a9f9fb4cad9b860 Mon Sep 17 00:00:00 2001
From: Pedro Amorim <pedro.amorim@ptfs-europe.com>
Date: Thu, 7 Mar 2024 10:46:48 +0000
Subject: [PATCH] Bug 35570: (QA follow-up): Standard backend: Bug 36243
 compatibility

Add FreeForm CSRF fix from https://github.com/PTFS-Europe/koha-ill-freeform/commit/c34be16ba34c840193ed5e043e6736fa0b1cb646 into this work.
This is to keep this work up to date with latest FreeForm's fixes.

Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
---
 Koha/ILL/Backend/intra-includes/create.inc   | 1 +
 Koha/ILL/Backend/intra-includes/edititem.inc | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/Koha/ILL/Backend/intra-includes/create.inc b/Koha/ILL/Backend/intra-includes/create.inc
index 7655644d50..54fc71a866 100644
--- a/Koha/ILL/Backend/intra-includes/create.inc
+++ b/Koha/ILL/Backend/intra-includes/create.inc
@@ -16,6 +16,7 @@
 [% IF whole.stage == "form" %]
 <h2>Create a manual ILL request</h2>
 <form id="create_form" method="POST" action="">
+  [% INCLUDE 'csrf-token.inc' %]
   <fieldset class="rows">
     <legend>General details</legend>
     <ol id="general-standard-fields">
diff --git a/Koha/ILL/Backend/intra-includes/edititem.inc b/Koha/ILL/Backend/intra-includes/edititem.inc
index 58dfb4bcae..d56d86e013 100644
--- a/Koha/ILL/Backend/intra-includes/edititem.inc
+++ b/Koha/ILL/Backend/intra-includes/edititem.inc
@@ -9,6 +9,7 @@
 [% IF whole.stage == "form" %]
   <h2>Edit a manual ILL request</h2>
   <form id="standard_edit_form" method="POST" action="">
+    [% INCLUDE 'csrf-token.inc' %]
     <fieldset class="rows">
       <legend>General details</legend>
       <ol id="general-standard-fields">
@@ -76,7 +77,7 @@
       <a class="cancel" href="/cgi-bin/koha/ill/ill-requests.pl">Cancel</a>
     </fieldset>
     <input type="hidden" name="illrequest_id" value="[% whole.value.other.illrequest_id | html %]" />
-    <input type="hidden" name="method" value="edititem" />
+    <input type="hidden" name="op" value="cud-edititem" />
     <input type="hidden" name="stage" value="form" />
     <input type="hidden" name="backend" value="Standard" />
   </form>
-- 
2.39.5