]> git.koha-community.org Git - koha.git/commit
Bug 33702: Prevent ILL requests to be modified by somebody else
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Wed, 10 May 2023 05:37:57 +0000 (07:37 +0200)
committerTomas Cohen Arazi <tomascohen@theke.io>
Mon, 29 May 2023 12:21:50 +0000 (09:21 -0300)
commitb5cae12aef10b667d1c8a29adc85a97addb6a753
tree1118a66cabf895cf3606aa66911eec1e66000f29
parent1ad43fd47fea1c616f2a6c301b97940cd335ce95
Bug 33702: Prevent ILL requests to be modified by somebody else

Same as previous patch, but for 'update' and 'cancreq'.
We remove the redirect, but here we only want to focus on the security
fix.

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Confirmed. Without this patch a patron can modify and cancel any ILL
request in the OPAC. With this patch the patron is redirected to the
404 page if modification or cancellation is attempted.

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
opac/opac-illrequests.pl