From 2fed3f5b79df7a478dcb858a300637af28289713 Mon Sep 17 00:00:00 2001
From: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Date: Mon, 22 Jan 2024 11:56:37 +0000
Subject: [PATCH] Bug 34478: Manual fix - label-edit-profile (cud-save)

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
---
 .../prog/en/modules/labels/label-edit-profile.tt           | 7 ++++---
 labels/label-edit-profile.pl                               | 2 +-
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/label-edit-profile.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/labels/label-edit-profile.tt
index fc6c5bb060..a5b5798314 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/labels/label-edit-profile.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/labels/label-edit-profile.tt
@@ -56,7 +56,7 @@
                         <h1>New printer profile</h1>
                     [% END%]
 
-                    <form name="input" action="/cgi-bin/koha/labels/label-edit-profile.pl" method="get">
+                    <form name="input" action="/cgi-bin/koha/labels/label-edit-profile.pl" method="post">
                                     <fieldset class="rows"><legend>Profile settings</legend>
                                         <ol>
                                             <li>
@@ -132,10 +132,11 @@
                                         </ol>
                                     </fieldset>
                                     <fieldset class="action">
+                                        [% INCLUDE 'csrf-token.inc' %] 
+                                        <input type="hidden" name="op" value="cud-save" />
+                                        <input type="hidden" name="profile_id" value="[% profile_id | html %]" />
                                         <input type="submit" class="btn btn-primary" value="Save" />
                                         <a href="/cgi-bin/koha/labels/label-manage.pl?label_element=profile" class="cancel">Cancel</a>
-                                        <input type="hidden" name="op" value="save" />
-                                        <input type="hidden" name="profile_id" value="[% profile_id | html %]" />
                                     </fieldset>
                     </form>
 
diff --git a/labels/label-edit-profile.pl b/labels/label-edit-profile.pl
index fa315fc637..392d97be84 100755
--- a/labels/label-edit-profile.pl
+++ b/labels/label-edit-profile.pl
@@ -45,7 +45,7 @@ my @label_template = ();
 
 my $units = get_unit_values();
 
-if ($op eq 'cud-edit') {
+if ($op eq 'edit') {
     $profile = C4::Labels::Profile->retrieve(profile_id => $profile_id);
     $template_list = get_all_templates( { fields => [ qw( template_id template_code profile_id) ] } );
 }
-- 
2.39.5