From 017b157b7d19338dfd46b8e389591827691d5582 Mon Sep 17 00:00:00 2001 From: David Cook Date: Tue, 13 Jan 2026 02:12:03 +0000 Subject: [PATCH] Bug 41599: Fix output_error in acquisitions_stats.pl This patch changes the incorrect usage of output_error in acquisitions_stats.pl so that it uses a HTTP status code instead of an arbitrary string. Test plan: 0. Apply the patch and koha-plack --restart kohadev 1. Go to http://localhost:8081/cgi-bin/koha/reports/acquisitions_stats.pl 2. Use your F12 HTML inspector to find the "Line" radio buttons that you've selected and remove the values for those elements 3. Click "Submit" at the bottom of the screen 4. Note that you get a 403 error (if bug 30803 applied - otherwise it's a 404 error) Signed-off-by: Jonathan Druart Signed-off-by: Martin Renvoize Signed-off-by: Lucas Gass --- reports/acquisitions_stats.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/reports/acquisitions_stats.pl b/reports/acquisitions_stats.pl index bb3c4ccf78..e5effc95c2 100755 --- a/reports/acquisitions_stats.pl +++ b/reports/acquisitions_stats.pl @@ -69,7 +69,7 @@ if ( || $column !~ /^(aqbasket|aqorders|aqbooksellers|items|biblioitems|aqbudgets)\.\w+$/ ) ) { - C4::Output::output_error( $input, 'Possible SQL injection' ); + C4::Output::output_error( $input, '403' ); exit; }