From 30fcf2f0893753f9feb3b7e7e5f18d4b3340a545 Mon Sep 17 00:00:00 2001
From: Nick Clemens <nick@bywatersolutions.com>
Date: Fri, 26 Jan 2024 11:58:07 -0500
Subject: [PATCH] Bug 34478: Manual fix - Switch to post, update op -
 neworderempty_duplicate

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
---
 acqui/neworderempty.pl                                       | 3 ++-
 .../prog/en/modules/acqui/neworderempty_duplicate.tt         | 5 +++--
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/acqui/neworderempty.pl b/acqui/neworderempty.pl
index 28a734add9..1ec08269f6 100755
--- a/acqui/neworderempty.pl
+++ b/acqui/neworderempty.pl
@@ -117,6 +117,7 @@ my $import_batch_id = $input->param('import_batch_id'); # if this is filled, we
 my $from_subscriptionid  = $input->param('from_subscriptionid');
 my $data;
 my $new = 'no';
+my $op = $input->param('op') || q{};
 
 our ( $template, $loggedinuser, $cookie, $userflags ) = get_template_and_user(
     {
@@ -173,7 +174,7 @@ if ( $ordernumber eq '' and defined $params->{'breedingid'}){
     my $duplicatetitle;
 #look for duplicates
     ($biblionumber,$duplicatetitle) = FindDuplicate($marcrecord);
-    if($biblionumber && !$input->param('use_external_source')) {
+    if($biblionumber && $op ne 'cud-use_external_source') {
         #if duplicate record found and user did not decide yet, first warn user
         #and let them choose between using a new record or an existing record
         Load_Duplicate($duplicatetitle);
diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/neworderempty_duplicate.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/neworderempty_duplicate.tt
index b3ceaee804..efddbbee1d 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/neworderempty_duplicate.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/neworderempty_duplicate.tt
@@ -67,13 +67,14 @@
 
 <div class="col-sm-4">
 <div style="border: 1px solid #DDD; padding:1em;">
-<form method="get" action="/cgi-bin/koha/acqui/neworderempty.pl">
+<form method="post" action="/cgi-bin/koha/acqui/neworderempty.pl">
+    [% INCLUDE 'csrf-token.inc' %]
 <h4>Create new record</h4>
 <p>Create a new record by importing the external (duplicate) record.</p>
 <input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
 <input type="hidden" name="basketno" value="[% basketno | html %]" />
 <input type="hidden" name="breedingid" value="[% breedingid | html %]" />
-<input type="hidden" name="use_external_source" value="1" />
+<input type="hidden" name="op" value="cud-use_external_source" />
 <input type="submit" class="btn btn-primary" value="Create new" />
 </form>
 </div>
-- 
2.39.5