From fe4be8be6e82dfb20e66dc1d5f3ce8e70ce9f041 Mon Sep 17 00:00:00 2001
From: Nick Clemens <nick@bywatersolutions.com>
Date: Tue, 7 May 2024 12:01:33 +0000
Subject: [PATCH] Bug 30579: (follow-up) Fix rebase of multi holds form and add
 CSRF

This patch restores missing elemtns to multi-hold form and adds CSRF variables

Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
---
 .../prog/en/modules/reserve/request.tt        | 44 ++++++++++++++++++-
 1 file changed, 42 insertions(+), 2 deletions(-)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/reserve/request.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/reserve/request.tt
index 6a2a696d79..533e169476 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/reserve/request.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/reserve/request.tt
@@ -1049,8 +1049,10 @@
                                 <fieldset class="rows">
                                     <legend>Hold details</legend>
                                     <form action="placerequest.pl" method="post" name="form" id="hold-request-form">
-                                            <input type="hidden" name="multi_holds" id="multi_holds" value="1" />
-                                            <input type="hidden" name="request" value="any"/>
+                                        [% INCLUDE 'csrf-token.inc' %]
+                                        <input type="hidden" name="op" value="cud-placerequest" />
+                                        <input type="hidden" name="multi_holds" id="multi_holds" value="1" />
+                                        <input type="hidden" name="request" value="any"/>
                                         <input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
                                             [% FOREACH biblioloo IN biblioloop %]
                                                 <input type="hidden" name="biblionumber" id="biblionumber" value="[% biblioloo.biblionumber | html %]"/>
@@ -1061,6 +1063,44 @@
                                                 [% END %]
                                             [% END %]
 
+                                        <ol>
+
+                                            <li>
+                                                <span class="label">Patron:</span>
+                                                [% IF ( patron.borrowernumber ) %]
+                                                    [% INCLUDE 'patron-title.inc' patron => patron no_title => 1 hide_patron_infos_if_needed => 1 %]
+                                                [% ELSE %]
+                                                    Not defined yet
+                                                [% END %]
+                                            </li>
+
+
+                                            <li>
+                                                <label for="holdnotes">Notes:</label>
+                                                <textarea id="holdnotes" name="notes" cols="30" rows="1"></textarea>
+                                            </li>
+                                            <li>
+                                                <label for="pickup">Pickup at:</label>
+                                                <select name="pickup" id="pickup_multi" data-patron-id="[% patron.borrowernumber | html %]">
+                                                    <option value="" selected="selected"></option>
+                                                [% FOREACH pickup_location IN multi_pickup_locations %]
+                                                    <option value="[% pickup_location.branchcode | html %]">[% pickup_location.branchname | html %]</option>
+                                                [% END %]
+                                                </select>
+                                            </li>
+                                            [% IF ( Koha.Preference('AllowHoldDateInFuture') ) %]
+                                                <li>
+                                                    <label for="from">Hold starts on date:</label>
+                                                    <input id="reserve_date" name="reserve_date" id="from" size="10" type="text" data-date_to="expiration_date" class="flatpickr" data-flatpickr-futureinclusive="true" />
+                                                </li>
+                                            [% END %]
+
+                                            <li>
+                                                <label for="to">Hold expires on date:</label>
+                                                <input id="expiration_date" name="expiration_date" id="to" size="10" type="text" class="flatpickr" data-flatpickr-futuredate="true" />
+                                            </li>
+
+                                        </ol>
                                     <table id="requesttitles">
                                         <tr>
                                             <th>&nbsp;</th>
-- 
2.39.5