Bug 36789: (follow-up) Fix CSRF Token missing

Sponsored-by: LMS Cloud <https://www.lmscloud.de/>
Signed-off-by: David Nind <david@davidnind.com>
Signed-off-by: Olivier V <olivier.vezina@inLibro.com>
Signed-off-by: Paul Derscheid <paul.derscheid@lmscloud.de>
Signed-off-by: Martin Renvoize <martin.renvoize@openfifth.co.uk>
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
(cherry picked from commit 087ffd0eea)
Signed-off-by: Paul Derscheid <paul.derscheid@lmscloud.de>
This commit is contained in:
Thibaud Guillot 2024-06-10 12:15:03 +02:00 committed by Paul Derscheid
parent e7526d0169
commit 9f3ebef35b
No known key found for this signature in database
GPG Key ID: C25F9FD44CED595B
1 changed files with 1 additions and 0 deletions

View File

@ -403,6 +403,7 @@
);
result += `
<form name="checkout-transform" method="post" action="/cgi-bin/koha/circ/circulation.pl?borrowernumber=%s">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="cud-checkout"/>
<input type="hidden" name="borrowernumber" value="%s"/>
<input type="hidden" name="barcode" value="%s"/>