From 580fa86f25c9bf90015507d0279023b5741f1fe9 Mon Sep 17 00:00:00 2001
From: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Date: Mon, 6 Jan 2025 14:26:33 +0100
Subject: [PATCH] Bug 38829: Sanitize GetLateOrMissingIssues inputs

Signed-off-by: Magnus Enger <magnus@libriotech.no>
The new test fails without this patch, and passes
when it is applied.

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: wainuiwitikapark <wainuiwitikapark@catalyst.net.nz>
---
 C4/Serials.pm | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/C4/Serials.pm b/C4/Serials.pm
index 3298b06cd9..9490203f59 100644
--- a/C4/Serials.pm
+++ b/C4/Serials.pm
@@ -1875,6 +1875,8 @@ sub GetLateOrMissingIssues {
     my ( $supplierid, $serialid, $order ) = @_;
 
     return unless ( $supplierid or $serialid );
+    return if defined $supplierid && !looks_like_number($supplierid);
+    return if defined $serialid   && !looks_like_number($serialid);
 
     my $dbh = C4::Context->dbh;