From 1d4b275332efa78e8560899b13957c9170beecc8 Mon Sep 17 00:00:00 2001
From: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Date: Fri, 9 Feb 2024 12:38:05 +0000
Subject: [PATCH] Bug 34478: Manual fix - convert link to form - boraccount.tt

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
---
 .../prog/en/modules/members/boraccount.tt         | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt
index 4b8e3f823c..735d306b11 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt
@@ -161,7 +161,20 @@
         [% END %]
         <a href="accountline-details.pl?accountlines_id=[% account.accountlines_id | uri %]" class="btn btn-default btn-xs details-action"><i class="fa fa-list"></i> Details</a>
         [% IF account.is_debit && account.amountoutstanding > 0 %]
-            <a class="btn btn-default btn-xs pay-action" href="/cgi-bin/koha/members/paycollect.pl?borrowernumber=[% account.borrowernumber | html %]&pay_individual=1&debit_type_code=[% account.debit_type_code | html %]&amount=[% account.amount | html %]&amountoutstanding=[% account.amountoutstanding | html %]&description=[% account.description | html %]&itemnumber=[% account.itemnumber | html %]&accountlines_id=[% account.accountlines_id | html %]&amp;csrf_token=[% csrf_token | html %]"><i class="fa-solid fa-money-bill-1"></i> Pay</a>
+            <form method="post" action="/cgi-bin/koha/members/paycollect.pl">
+                [% INCLUDE 'csrf-token.inc' %]
+                <input type="hidden" name="borrowernumber" value="[% account.borrowernumber | html %]"/>
+                <input type="hidden" name="pad_individual" value="1" />
+                <input type="hidden" name="debit_type_code" value="[% account.debit_type_code | html %]" />
+                <input type="hidden" name="amount" value="[% account.ammount | html %]" />
+                <input type="hidden" name="amountoutstanding" value="[% account.amountoutstanding | html %]"/>
+                <input type="hidden" name="description" value="[% account.description | html %]" />
+                <input type="hidden" name="itemnumber" value="[% account.itemnumber | html %]" />
+                <input type="hidden" name="accountlines_id" value="[% account.accountlines_id | html %]" />
+                <button type="submit" class="btn btn-default btn-xs pay-action">
+                    <i class="fa-solid fa-money-bill-1"></i> Pay</a>
+                </button>
+            </form>
         [% END %]
         [% IF account.is_credit && account.status != 'VOID' %]
           <form method="post" action="/cgi-bin/koha/members/boraccount.pl">
-- 
2.39.5