gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 34478: Add missing CSRF token to POST forms 

This is the result of
  % perl csrf_add_missing_csrf.pl

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
This commit is contained in:
Jonathan Druart 2024-01-12 15:00:48 +01:00
parent 7e7159bf58
commit a3c0c92508
No known key found for this signature in database
GPG Key ID: A085E712BEF0E0F0
288 changed files with 548 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-search.inc
View File

@ -3,6 +3,7 @@
<div class="tab-content">
<div id="supplier_search" role="tabpanel" class="tab-pane active">
<form name="findsupplier" action="/cgi-bin/koha/acqui/booksellers.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="form-title">
<label class="control-label" for="supplier"><span class="control-text">Vendor search</span> <i class="fa fa-fw fa-upload" aria-hidden="true"></i></label>
</div>
@ -16,6 +17,7 @@
<div id="orders_search" role="tabpanel" class="tab-pane">
<form action="/cgi-bin/koha/acqui/histsearch.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="form-title">
<label class="control-label" for="order_title"><span class="control-text">Orders search</span> <i class="fa fa-fw fa-download" aria-hidden="true"></i></label>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-toolbar.inc
View File

@ -24,6 +24,7 @@
[% UNLESS ( basketcount OR subscriptioncount ) %]
<div class="btn-group">
<form action="/cgi-bin/koha/acqui/supplier.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete" />
<input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
<button class="btn btn-default" id="deletesupplier" type="submit"><i class="fa fa-trash-can"></i> Delete vendor</button>

1
koha-tmpl/intranet-tmpl/prog/en/includes/budgets-admin-search.inc
View File

@ -6,6 +6,7 @@
<div class="tab-content">
<div id="budgets_search" role="tabpanel" class="tab-pane active">
<form action="/cgi-bin/koha/admin/aqbudgets.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
<div class="form-title">

1
koha-tmpl/intranet-tmpl/prog/en/includes/checkin-search-box.inc
View File

@ -6,6 +6,7 @@
<div id="checkin_search" role="tabpanel" class="tab-pane">
[% END %]
<form method="post" action="/cgi-bin/koha/circ/returns.pl" autocomplete="off">
[% INCLUDE 'csrf-token.inc' %]
<div class="form-title">
<label class="control-label" for="ret_barcode"><span class="control-text">Check in</span> <i class="fa fa-fw fa-download" aria-hidden="true"></i></label>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/includes/checkouts-table.inc
View File

@ -16,6 +16,7 @@
</p>
</div>
<form name="issues" action="/cgi-bin/koha/tools/export.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<table id="issues-table" style="width: 100% !Important; display: none;">
<thead>
<tr>

1
koha-tmpl/intranet-tmpl/prog/en/includes/cities-admin-search.inc
View File

@ -4,6 +4,7 @@
<div class="tab-content">
<div id="city_search" role="tabpanel" class="tab-pane active">
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="form-title">
<label class="control-label" for="city_name_filter"><span class="control-text">Search cities</span> <i class="fa fa-fw fa-building" aria-hidden="true"></i></label>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/includes/contracts-admin-search.inc
View File

@ -4,6 +4,7 @@
<div class="tab-content">
<div id="contract_description_search" role="tabpanel" class="tab-pane active">
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="form-title">
<label class="control-label" for="searchfield"><span class="control-text">Search contracts</span> <i class="fa-solid fa-fw fa-pen-to-square" aria-hidden="true"></i></label>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/includes/currencies-admin-search.inc
View File

@ -4,6 +4,7 @@
<div class="tab-content">
<div id="currency_search" role="tabpanel" class="tab-pane active">
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="form-title">
<label class="control-label" for="description"><span class="control-text">Search currencies</span> <i class="fa-solid fa-fw fa-dollar-sign" aria-hidden="true"></i></label>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/includes/desks-admin-search.inc
View File

@ -4,6 +4,7 @@
<div class="tab-content">
<div id="desk_search" role="tabpanel" class="tab-pane active">
<form action="[% script_name|html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="form-title">
<label class="control-label" for="search_desk_name"><span class="control-text">Search desks</span> <i class="fa fa-fw fa-desktop" aria-hidden="true"></i></label>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/includes/letters-search.inc
View File

@ -4,6 +4,7 @@
<div class="tab-content">
<div id="notices_search" role="tabpanel" class="tab-pane active">
<form action="/cgi-bin/koha/tools/letter.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="form-title">
<label class="control-label" for="searchfield"><span class="control-text">Search notices</span> <i class="fa-solid fa-fw fa-comment-dots" aria-hidden="true"></i></label>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/includes/mana/mana-share-report.inc
View File

@ -2,6 +2,7 @@
<div class="modal-dialog modal-wide" role="document">
<div class="modal-content">
<form method="post" id="mana_share_form" action="/cgi-bin/koha/reports/guided_reports.pl">
[% INCLUDE 'csrf-token.inc' %]
<div class="modal-header">
<button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
<h3 id="mana_share_modal_label">Share with Mana</h3>

1
koha-tmpl/intranet-tmpl/prog/en/includes/member-search-box.inc
View File

@ -11,6 +11,7 @@
<div id="patron_search" role="tabpanel" class="tab-pane">
[% END %]
<form method="post" action="/cgi-bin/koha/members/member.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="quicksearch" value="1" />
<div class="form-title">

1
koha-tmpl/intranet-tmpl/prog/en/includes/members-toolbar.inc
View File

@ -119,6 +119,7 @@
<div class="modal-dialog">
<div class="modal-content">
<form method="post" action="/cgi-bin/koha/circ/add_message.pl" id="message_form" name="message_f">
[% INCLUDE 'csrf-token.inc' %]
<div class="modal-header">
<h3>Leave a message</h3>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/includes/modals/cataloguing_create_av.inc
View File

@ -6,6 +6,7 @@
<h3 id="avCreateLabel">Create a new authorized value</h3>
</div>
<form id="add_new_av" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="modal-body">
<fieldset class="rows">
<ol>

1
koha-tmpl/intranet-tmpl/prog/en/includes/modals/serials_multi_receiving.inc
View File

@ -2,6 +2,7 @@
<div class="modal-dialog">
<div class="modal-content">
<form action="/cgi-bin/koha/serials/serials-collection.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="modal-body">
<fieldset class="rows">
<legend>Multi receiving</legend>

3
koha-tmpl/intranet-tmpl/prog/en/includes/patron-detail-tabs.inc
View File

@ -150,6 +150,7 @@
[% WRAPPER tab_panel tabname="holds" %]
[% IF ( holds_count ) %]
<form action="/cgi-bin/koha/reserve/modrequest.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="from" value="circ" />
<table id="holds-table" style="width: 100% !Important;">
<thead>
@ -188,6 +189,7 @@
[% IF Koha.Preference('SuspendHoldsIntranet') %]
<form action="/cgi-bin/koha/reserve/modrequest_suspendall.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="action">
<input type="hidden" name="from" value="[% patronpage | html %]" />
<input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
@ -202,6 +204,7 @@
</form>
<form action="/cgi-bin/koha/reserve/modrequest_suspendall.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="action">
<input type="hidden" name="from" value="borrower" />
<input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />

1
koha-tmpl/intranet-tmpl/prog/en/includes/patron-restrictions-tab.inc
View File

@ -54,6 +54,7 @@
[% IF CAN_user_borrowers_edit_borrowers && CAN_user_circulate_manage_restrictions %]
<p><a href="#" id="add_manual_restriction"><i class="fa fa-plus"></i> Add manual restriction</a></p>
<form method="post" action="/cgi-bin/koha/members/mod_debarment.pl" class="clearfix">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="borrowernumber" value="[% patron.borrowernumber | html %]" />
<input type="hidden" name="action" value="add" />
<fieldset class="rows" id="manual_restriction_form">

1
koha-tmpl/intranet-tmpl/prog/en/includes/patron-search-box.inc
View File

@ -6,6 +6,7 @@
<div id="circ_search" role="tabpanel" class="tab-pane">
[% END %]
<form action="/cgi-bin/koha/circ/circulation.pl" id="patronsearch" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="form-title">
<label class="control-label" for="findborrower"><span class="control-text">Check out</span> <i class="fa fa-fw fa-upload" aria-hidden="true"></i></label>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/includes/patron_messages.inc
View File

@ -338,6 +338,7 @@
<div class="modal-dialog">
<div class="modal-content">
<form method="post" action="/cgi-bin/koha/circ/add_message.pl" id="message_form" name="message_f">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="message_id" value="[% pm.message_id | html %]"/>
<div class="modal-header">
<h3>Edit message</h3>

1
koha-tmpl/intranet-tmpl/prog/en/includes/patrons-admin-search.inc
View File

@ -4,6 +4,7 @@
<div class="tab-content">
<div id="patron_category_search" role="tabpanel" class="tab-pane active">
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="form-title">
<label class="control-label" for="category_search"><span class="control-text">Search patron categories</span> <i class="fa fa-fw fa-id-card" aria-hidden="true"></i></label>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/includes/preservation-search.inc
View File

@ -3,6 +3,7 @@
<div id="header_search">
<div id="preservation_search" class="residentsearch">
<form name="find_stuff" action="/cgi-bin/koha/preservation/home.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<span class="form-title">
<label class="control-label">Preservation search</label>
</span>

1
koha-tmpl/intranet-tmpl/prog/en/includes/renew-search-box.inc
View File

@ -6,6 +6,7 @@
<div id="renew_search" role="tabpanel" class="tab-pane">
[% END %]
<form method="post" action="/cgi-bin/koha/circ/renew.pl" autocomplete="off">
[% INCLUDE 'csrf-token.inc' %]
<div class="form-title">
<label class="control-label" for="ren_barcode"><span class="control-text">Renew</span> <i class="fa fa-fw fa-retweet" aria-hidden="true"></i></label>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/includes/waiting_holds.inc
View File

@ -67,6 +67,7 @@
<td>[% reserveloo.item.enumchron | html %]</td>
<td>
<form name="cancelReserve" action="waitingreserves.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="borrowernumber" value="[% reserveloo.borrower.borrowernumber | html %]" />
<input type="hidden" name="itemnumber" value="[% reserveloo.item.itemnumber | html %]" />
<input type="hidden" name="fbr" value="[% reserveloo.item.holdingbranch | html %]" />

1
koha-tmpl/intranet-tmpl/prog/en/includes/z3950-admin-search.inc
View File

@ -4,6 +4,7 @@
<div class="tab-content">
<div id="z3950_search" role="tabpanel" class="tab-pane active">
<form action="/cgi-bin/koha/admin/z3950servers.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="form-title">
<label class="control-label" for="searchfield"><span class="control-text">Search Z39.50/SRU servers</span> <i class="fa fa-fw fa-search" aria-hidden="true"></i></label>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/acqui-home.tt
View File

@ -55,6 +55,7 @@
<fieldset>
<legend>Manage orders</legend>
<form name="findsupplier" action="/cgi-bin/koha/acqui/booksellers.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<p><label for="supplierpage">Vendor: </label><input type="text" size="25" name="supplier" id="supplierpage" class="focus" />
<input type="submit" class="btn btn-primary" value="Search" />
</p>

1
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/addorder.tt
View File

@ -15,6 +15,7 @@
<div class="container-fluid">
[% IF (not_enough_budget) %]
<form action="/cgi-bin/koha/acqui/addorder.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
[% FOREACH var IN vars_loop %]
[% FOREACH val IN var.values %]
<input type="hidden" name="[% var.name | html %]" value="[% val | html %]" />

1
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/addorderiso2709.tt
View File

@ -94,6 +94,7 @@
([% file_name | html %] staged on [% upload_timestamp | $KohaDates with_hours => 1 %])
</h1>
<form action="/cgi-bin/koha/acqui/addorderiso2709.pl" method="post" id="Aform" class="validated">
[% INCLUDE 'csrf-token.inc' %]
[% WRAPPER tabs id= "tabs" %]
[% WRAPPER tabs_nav %]
[% WRAPPER tab_item tabname= "records_to_import" bt_active= 1 %] <span>Select to import</span> [% END %]

6
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt
View File

@ -107,6 +107,7 @@
[% IF ( active && books_loop ) %]
<div class="btn-group">
<form action="/cgi-bin/koha/acqui/basket.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="email" />
<input type="hidden" name="basketno" value="[% basketno | html %]" />
<button type="submit" class="btn btn-default" id="emailvendorbutton"><i class="fa-solid fa-envelope"></i> E-mail order</button>
@ -310,6 +311,7 @@
<ol>
<li id="managedby">
<form action="/cgi-bin/koha/acqui/basket.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<span class="label">[% tp('Acquisitions basket managed by user', 'Managed by:') | html %]</span>
<div style="display:inline-block">
<ul id="users_names" style="padding-left:0">
@ -348,6 +350,7 @@
<span class="label">&nbsp;</span>
<div>
<form action="/cgi-bin/koha/acqui/basket.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<select id="select_managing_library" name="branch">
<option value="">(no library)</option>
[% FOREACH branch IN branches_loop %]
@ -407,6 +410,7 @@
<span class="label">&nbsp;</span>
<div style="float:left">
<form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<select id="basketgroupid" name="basketgroupid">
<option value="">No group</option>
[% FOREACH bg IN basketgroups %]
@ -914,6 +918,7 @@
<div class="modal" id="noteEditor" tabindex="-1" role="dialog" aria-labelledby="noteEditorLabel">
<div class="modal-dialog" role="document">
<form id="modify_order_notes" action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="modal-content">
<div class="modal-header">
<button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
@ -938,6 +943,7 @@
<div class="modal" id="dateEditor" tabindex="-1" role="dialog" aria-labelledby="dateEditorLabel">
<div class="modal-dialog" role="document">
<form id="modify_estimated_delivery_date" action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="modal-content">
<div class="modal-header">
<button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>

1
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basketgroup.tt
View File

@ -122,6 +122,7 @@
<div class="col-xs-6 col-xs-pull-6">
[% END %]
<form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post" id="groupingform">
[% INCLUDE 'csrf-token.inc' %]
<fieldset id="various" class="brief">
<ol>
[% UNLESS (closedbg) %]

1
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basketheader.tt
View File

@ -57,6 +57,7 @@
[% ELSE %]<h1>Add a basket to [% booksellername | html %]</h1>
[% END %]
<form name="Aform" action="[% script_name | html %]" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
<fieldset class="rows">
<ol>

1
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/cancelorder.tt
View File

@ -36,6 +36,7 @@
[% UNLESS ( confirmcancel ) %]
<form method="post" action="">
[% INCLUDE 'csrf-token.inc' %]
<div class="dialog alert">
<h1>Are you sure you want to cancel this order ([% ordernumber | html %])</h1>
<p>

3
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/duplicate_orders.tt
View File

@ -55,6 +55,7 @@
[% IF op == 'search' || op == 'select' %]
<form action="/cgi-bin/koha/acqui/duplicate_orders.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<legend>
[% IF op == 'search' %]
@ -137,6 +138,7 @@
[% IF op == 'select' && ( result_order_loop || selected_order_loop ) %]
<form method="post" action="/cgi-bin/koha/acqui/duplicate_orders.pl">
[% INCLUDE 'csrf-token.inc' %]
<div id="orders_to_copy" class="page-section">
<table id="table_orders">
<caption>
@ -184,6 +186,7 @@
[% ELSIF op == "batch_edit" %]
<form method="post" action="/cgi-bin/koha/acqui/duplicate_orders.pl" id="batch_edit_form">
[% INCLUDE 'csrf-token.inc' %]
<div id="accounting_details">
<p>Duplicate all the orders with the following accounting details:</p>
<fieldset class="rows" style="float:none;">

1
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/histsearch.tt
View File

@ -203,6 +203,7 @@
[% BLOCK filter_form %]
<form action="/cgi-bin/koha/acqui/histsearch.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
[% IF ( context == "sidebar" ) %]
<fieldset class="brief">
<h4>Search orders</h4>

1
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/invoice-files.tt
View File

@ -90,6 +90,7 @@
[% IF invoiceid %]
<br />
<form method="post" action="/cgi-bin/koha/acqui/invoice-files.pl" enctype="multipart/form-data">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<legend>Upload new file</legend>
<ol>

2
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/invoice.tt
View File

@ -61,6 +61,7 @@
<p>Vendor: <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid | uri %]">[% suppliername | html %]</a></p>
<form action="/cgi-bin/koha/acqui/invoice.pl" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<ol>
<li>
@ -147,6 +148,7 @@
</form>
<form action="/cgi-bin/koha/acqui/invoice.pl" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<input type="hidden" name="invoiceid" value="[% invoiceid | html %]" />
<h3>Adjustments</h3>

1
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/invoices.tt
View File

@ -167,6 +167,7 @@
<div id="merge_invoices">
<form id="merge_invoice_form" class="validated" action="/cgi-bin/koha/acqui/invoice.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<ol>
<li><h2>Merge invoices</h2></li>

3
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/lateorders.tt
View File

@ -54,6 +54,7 @@
[% END %]
[% IF lateorders.size %]
<form action="lateorders.pl" name="claim" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="send_alert" />
<input type="hidden" name="delay" value="[% delay | html %]" />
<input type="hidden" name="booksellerid" value="[% bookseller_filter.id | html %]" />
@ -280,6 +281,7 @@
<div class="modal" id="noteEditor" tabindex="-1" role="dialog" aria-labelledby="noteEditorLabel">
<div class="modal-dialog" role="document">
<form id="modify_order_notes" action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="modal-content">
<div class="modal-header">
<button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>
@ -304,6 +306,7 @@
<div class="modal" id="dateEditor" tabindex="-1" role="dialog" aria-labelledby="dateEditorLabel">
<div class="modal-dialog" role="document">
<form id="modify_estimated_delivery_date" action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div class="modal-content">
<div class="modal-header">
<button type="button" class="closebtn" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">&times;</span></button>

1
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/moddeliverydate.tt
View File

@ -38,6 +38,7 @@
<h1>Change estimated delivery date</h1>
<form action="/cgi-bin/koha/acqui/moddeliverydate.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="brief">
<label for="estimated_delivery_date">Estimated delivery date:</label>
<input type="text" id="estimated_delivery_date" size="10" name="estimated_delivery_date" class="flatpickr" value="[% estimated_delivery_date | html %]"/>

1
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/modordernotes.tt
View File

@ -48,6 +48,7 @@
<h1>Change order internal note (order no. [% ordernumber | html %])</h1>
[% END %]
<form action="/cgi-bin/koha/acqui/modordernotes.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="brief">
<label for="ordernotes">Note:</label>
<textarea id="ordernotes" name="ordernotes" rows="3" cols="30" class="focus">[% ordernotes | html %]</textarea>

2
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/neworderempty.tt
View File

@ -295,6 +295,7 @@
[% IF ( creationdate ) %]<li><span class="label">Open on:</span> [% creationdate | $KohaDates %]</li>[% END %]
[% IF ( closedate ) %]
<form action="/cgi-bin/koha/acqui/basketgroup.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<li><span class="label">Closed on:</span> [% closedate | $KohaDates %]</li>
[% IF ( basketgroups ) %]
<li>Basketgroup: <select id="basketgroupid" name="basketgroupid">
@ -320,6 +321,7 @@
[% END %]
<form action="/cgi-bin/koha/acqui/addorder.pl" method="post" class="validated noEnterSubmit" id="Aform" onsubmit="return Check(this);" >
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<legend>Patrons</legend>

1
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/supplier.tt
View File

@ -199,6 +199,7 @@
[% UNLESS ( enter ) %][% INCLUDE 'acquisitions-toolbar.inc' %][% END %]
[% IF ( enter ) %]
<form action="updatesupplier.pl" name="updatesupplier" style="display:block" class="validated" method="post">
[% INCLUDE 'csrf-token.inc' %]
<div id="toolbar" class="btn-toolbar">
<button class="btn btn-primary" type="submit"><i class="fa fa-save"></i> Save</button>
[% IF ( booksellerid ) %]

2
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/uncertainprice.tt
View File

@ -89,6 +89,7 @@
<div class="page-section">
<h2>Order lines with uncertain prices</h2>
<form action="[% scriptname | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
<label for="owner">Orders from:</label>
<select id="owner" name="owner">
@ -104,6 +105,7 @@
</form>
</div> <!-- /.page-section -->
<form action="[% scriptname | html %]" method="post" id="uncertainprices">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
<input type="hidden" name="op" value="validate" />

2
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/vendor_issues.tt
View File

@ -93,6 +93,7 @@
[% END %]
<form action="/cgi-bin/koha/acqui/vendor_issues.pl" name="Aform" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<input type="hidden" name="booksellerid" value="[% vendor.id | html %]" />
<input type="hidden" name="issue_id" value="[% issue.issue_id| html %]" />
@ -134,6 +135,7 @@
<div class="dialog alert">
<h1>Delete issue [% issue.issue_id | html %]?</h1>
<form action="/cgi-bin/koha/acqui/vendor_issues.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" />
<input type="hidden" name="issue_id" value="[% issue.issue_id | html %]" />
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>

2
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/z3950_search.tt
View File

@ -83,6 +83,7 @@ tr.selected td {
[% INCLUDE 'messages.inc' %]
[% IF ( opsearch ) %]
<form method="post" action="z3950_search.pl" name="f" class="checkboxed">
[% INCLUDE 'csrf-token.inc' %]
<div class="row">
<div class="col-sm-6">
<h1>Order from external source</h1>
@ -247,6 +248,7 @@ tr.selected td {
</div>
<form method="post" action="z3950_search.pl" id="page_form" name="page_form" class="checkboxed">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" id="op" value="do_search" />
<input type="hidden" name="current_page" id="current_page" value="[% current_page | html %]" />
<input type="hidden" id="searchtitle" name="title" value="[% title | html %]" />

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/additional-fields.tt
View File

@ -197,6 +197,7 @@
<h1>[% tx("New field for table '{table_name}'", { table_name = tablename } ) | html %]</h1>
[% END %]
<form action="" name="add_form" id="add_field" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<ol>
<li>

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/admin-home.tt
View File

@ -57,6 +57,7 @@
<div class="col-md-6 sysprefs">
[% IF ( CAN_user_parameters_manage_sysprefs ) %]
<form action="/cgi-bin/koha/admin/preferences.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset>
<h4><a href="/cgi-bin/koha/admin/preferences.pl">System preferences</a></h4>
<p>Manage system preferences like MARC flavor, date format, administrator email, and templates.</p>

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/adveditorshortcuts.tt
View File

@ -45,6 +45,7 @@
</ul>
<form id="adveditor_shortcuts" method="post" action="/cgi-bin/koha/admin/adveditorshortcuts.pl">
[% INCLUDE 'csrf-token.inc' %]
<fieldset>
<input type=hidden name="op" value="save" />

5
koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqbudgetperiods.tt
View File

@ -156,6 +156,7 @@
[% IF ( duplicate_form ) %]
<h1>Duplicate budget</h1>
<form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" id="add_modify_budget" name="f" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<input type="hidden" name="op" value="duplicate_budget" />
<input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
@ -225,6 +226,7 @@
<h1>New budget</h1>
[% END %]
<form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" id="add_modify_budget" name="f" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<!-- ################################################################################# -->
<!-- display information about the budget period that must be added or modified -->
@ -317,11 +319,13 @@
<!-- ############################################################# -->
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" />
<input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
</form>
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
</form>
[% END %]
@ -368,6 +372,7 @@
</tbody>
</table>
<form action="/cgi-bin/koha/admin/aqbudgetperiods.pl" name="f" method="post" id="move_form">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<ol>
<li>

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqbudgets.tt
View File

@ -278,6 +278,7 @@
<!-- create add/mod entry form -->
[% IF op == 'add_form' && !error_not_authorised_to_modify %]
<form action="/cgi-bin/koha/admin/aqbudgets.pl" id="edit_fund" name="Aform" method="post">
[% INCLUDE 'csrf-token.inc' %]
<h1>
[% IF ( budget_id ) %]
[% IF ( budget_period_description ) %]
@ -468,6 +469,7 @@
</table>
<form action="/cgi-bin/koha/admin/aqbudgets.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" />
<input type="hidden" name="budget_id" value="[% budget_id | html %]" />
<input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />

4
koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqcontract.tt
View File

@ -103,6 +103,7 @@
[% IF ( add_form ) %]
<div class="page-section">
<form name="Aform" action="/cgi-bin/koha/admin/aqcontract.pl" id="add_modify_contract" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
<input type="hidden" name="checked" value="0" />
@ -147,6 +148,7 @@
[% IF ( add_validate ) %]
<h1>Data recorded</h1>
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="submit" class="btn btn-primary" value="OK" />
</form>
[% END %]
@ -162,6 +164,7 @@
<tr><th scope="row">Vendor:</th><td>[% booksellername | html %]</td></tr>
</table>
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" />
<input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
<input type="hidden" name="contractnumber" value="[% contractnumber | html %]" />
@ -177,6 +180,7 @@
[% IF ( delete_confirmed ) %]
<h1>Contract deleted</h1>
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="booksellerid" value="[% booksellerid | html %]" />
<input type="submit" class="btn btn-primary" value="OK" />
</form>

3
koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqplan.tt
View File

@ -47,6 +47,7 @@
[% INCLUDE 'budgets-admin-toolbar.inc' %]
<form method="post" id="Aform" name="Aform" action="/cgi-bin/koha/admin/aqplan.pl">
[% INCLUDE 'csrf-token.inc' %]
<h1>[% PROCESS planning plan=authcat %]</h1>
<input type="hidden" name="authcat" value="[% authcat | html %]" />
<!-- Budget Lines -->
@ -203,6 +204,7 @@
<aside>
<form method="post" action="/cgi-bin/koha/admin/aqplan.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="budget_period_id" value="[% budget_period_id | html %]" />
<fieldset class="brief">
<h4>Filter</h4>
@ -263,6 +265,7 @@
</form>
[% IF ( budget_lines ) %]
<form method="post" action="/cgi-bin/koha/admin/aqplan.pl">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="brief">
<h4>Export</h4>
<ol>

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/audio_alerts.tt
View File

@ -40,6 +40,7 @@
<form id="new-alert-form" action="audio_alerts.pl" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<h1><span class="create-alert">New alert</span><span class="edit-alert">Edit alert</span></h1>
<fieldset class="rows">
<legend class="sr-only">Audio alert details</legend>
@ -89,6 +90,7 @@
</form>
<form id="delete-alert-form" action="audio_alerts.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<h1>Audio alerts</h1>
[%IF !( Koha.Preference('AudioAlerts') ) %]
<div class="dialog alert">

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/auth_subfields_structure.tt
View File

@ -101,6 +101,7 @@
[% ELSE %][% action | html %][% END %]</h1>
<div class="hint">You can drag and drop the subfield tabs to change the order.</div>
<form action="[% script_name | html %]" name="Aform" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<input type="hidden" name="tagfield" value="[% tagfield | html %]" />
<input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
@ -303,6 +304,7 @@
<div class="dialog alert">
<h1>Confirm deletion of subfield <span class="ex">'[% ass.tagsubfield | html %]'?</span></h1>
<form action="[% delete_link | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" />
<table>
<tr><th scope="row">Subfield:</th> <td>[% ass.tagsubfield | html %]</td></tr>

5
koha-tmpl/intranet-tmpl/prog/en/modules/admin/auth_tag_structure.tt
View File

@ -138,6 +138,7 @@
[% END %]
</h2>
<form action="[% script_name | html %]" name="Aform" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
[% IF ( heading_modify_tag_p ) %]<input type="hidden" name="modif" value="1" />[% END %]
<input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
@ -193,6 +194,7 @@
<div class="dialog alert">
<h3>[% tx("Confirm deletion of tag '{searchfield}'", { searchfield = searchfield }) | html %]</h3>
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<table>
<tr><th scope="row">Tag: </th><td>[% searchfield | html %] [% liblibrarian | html %]</td></tr>
</table>
@ -211,6 +213,7 @@
<div class="dialog message"> <h3>Data deleted</h3>
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
<input type="hidden" name="searchfield" value="[% searchfield | html %]" />
<input type="submit" value="OK" class="btn btn-primary" />
@ -219,6 +222,7 @@
[% IF ( authtype_create ) %]
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="authtype_create_confirm" />
<input type="hidden" name="authtypecode" value="[% authtypecode | html %]" />
Create authority framework for [% authtypecode | html %] using
@ -239,6 +243,7 @@
[% IF ( else ) %]
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset>
<label for="searchfield"><strong>Search for tag:</strong></label>
<input type="text" id="searchfield" name="searchfield" size="4" value="[% searchfield | html %]" />

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/authorised_values.tt
View File

@ -124,6 +124,7 @@
[% END %]
<form action="/cgi-bin/koha/admin/authorised_values.pl" name="Aform" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
[% IF action_add_category %]
<ol>
@ -312,6 +313,7 @@
</form>
[% UNLESS category.is_system %]
<form id="delete_category" action="/cgi-bin/koha/admin/authorised_values.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_category" />
<input type="hidden" name="category_name" value="[% category.category_name | html %]" />
<button type="submit"><i class="fa fa-plus"></i> Delete category '[% category.category_name | html %]' </button>

3
koha-tmpl/intranet-tmpl/prog/en/modules/admin/authtypes.tt
View File

@ -106,6 +106,7 @@
[% IF op == 'add_form' %]
<form action="/cgi-bin/koha/admin/authtypes.pl" name="Aform" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<h1>
[% IF authority_type.authtypecode.defined %]
[% IF authority_type.authtypecode %]
@ -172,6 +173,7 @@
[% ELSE %]
<h1>Confirm deletion of authority structure definition for <span class="ex">'[% authority_type.authtypetext | html %]' ([% authority_type.authtypecode | html %])</span></h1>
<form action="/cgi-bin/koha/admin/authtypes.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" />
<input type="hidden" name="authtypecode" value="[% authority_type.authtypecode | html %]" />
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>
@ -258,6 +260,7 @@
<h3 id="importLabelexportModal_[% authority_type.authtypecode | html %][% loop.count | html %]">Import [% authority_type.authtypecode | html %] authority type (fields and subfields) from a spreadsheet file (.csv, .ods)</h3>
</div>
<form action="/cgi-bin/koha/admin/import_export_authtype.pl" name="form_i_[% authority_type.authtypecode | html %]" id="form_i_[% authority_type.authtypecode | html %]" method="post" enctype="multipart/form-data" class="form_import">
[% INCLUDE 'csrf-token.inc' %]
<div class="modal-body">
<input type="hidden" name="authtypecode" value="[% authority_type.authtypecode | html %]" />
<input type="hidden" name="action" value="import" />

4
koha-tmpl/intranet-tmpl/prog/en/modules/admin/biblio_framework.tt
View File

@ -115,6 +115,7 @@
[% END %]
</h1>
<form action="/cgi-bin/koha/admin/biblio_framework.pl" name="Aform" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<fieldset class="rows">
<ol>
@ -156,6 +157,7 @@
[% ELSE %]
<h1>[% tx("Confirm deletion of framework '{framework}' ({frameworkcode})?", { framework = framework.frameworktext, frameworkcode = framework.frameworkcode }) | html %]</h1>
<form class="inline" action="/cgi-bin/koha/admin/biblio_framework.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" />
<input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this framework</button>
@ -229,6 +231,7 @@
<h1 id="importLabelexportModal_[% framework.frameworkcode | html %][% frameworks.count | html %]">Import default framework structure (fields and subfields) from a spreadsheet file (.csv or .ods)</h1>
</div> <!-- /.modal-header -->
<form action="/cgi-bin/koha/admin/import_export_framework.pl" name="form_i_default" id="form_i_default" method="post" enctype="multipart/form-data" class="form_import">
[% INCLUDE 'csrf-token.inc' %]
<div class="modal-body">
<input type="hidden" name="frameworkcode" value="default" />
<input type="hidden" name="action" value="import" />
@ -299,6 +302,7 @@
<h1 id="importLabelexportModal_[% loo.frameworkcode | html %][% loop.count | html %]">Import [% loo.frameworkcode | html %] framework structure (fields and subfields) from a spreadsheet file (.csv or .ods)</h1>
</div> <!-- /.modal-header -->
<form action="/cgi-bin/koha/admin/import_export_framework.pl" name="form_i_[% loo.frameworkcode | html %]" id="form_i_[% loo.frameworkcode | html %]" method="post" enctype="multipart/form-data" class="form_import">
[% INCLUDE 'csrf-token.inc' %]
<div class="modal-body">
<input type="hidden" name="frameworkcode" value="[% loo.frameworkcode | html %]" />
<input type="hidden" name="action" value="import" />

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/branch_transfer_limits.tt
View File

@ -65,6 +65,7 @@
[% END %]
<form method="post" action="branch_transfer_limits.pl">
[% INCLUDE 'csrf-token.inc' %]
[% WRAPPER tab_panels %]
[% FOREACH codes_loo IN codes_loop %]
[% WRAPPER tab_panel tabname=codes_loo.code %]

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/branches.tt
View File

@ -127,6 +127,7 @@
[% END %]
</h1>
<form action="/cgi-bin/koha/admin/branches.pl" id="Aform" name="Aform" class="validated" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<input type="hidden" name="op" value="add_validate" />
[% IF library %]
@ -318,6 +319,7 @@
[% IF op == 'delete_confirm' and not ( items_count or patrons_count )%]
<div class="dialog alert">
<form action="/cgi-bin/koha/admin/branches.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<h1>Are you sure you want to delete [% library.branchname | html %] ([% library.branchcode | html %])?</h1>
<input type="hidden" name="op" value="delete_confirmed" />
<input type="hidden" name="branchcode" value="[% library.branchcode | html %]" />

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/cash_registers.tt
View File

@ -103,6 +103,7 @@
[% END %]
</h1>
<form action="/cgi-bin/koha/admin/cash_registers.pl" id="Aform" name="Aform" class="validated" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<input type="hidden" name="op" value="add_validate" />

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/categories.tt
View File

@ -115,6 +115,7 @@
[% IF op == 'add_form' %]
<form id="category_form" action="/cgi-bin/koha/admin/categories.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<input type="hidden" name="checked" value="0" />
[% IF category %]
@ -529,6 +530,7 @@
</div> <!-- /.page-section -->
<form action="/cgi-bin/koha/admin/categories.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="action">
[% IF patrons_in_category > 0 %]
<input type="submit" class="btn btn-primary" value="OK" />

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/cities.tt
View File

@ -102,6 +102,7 @@
[% END %]
<form action="/cgi-bin/koha/admin/cities.pl" name="Aform" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<input type="hidden" name="cityid" value="[% city.cityid | html %]" />
@ -159,6 +160,7 @@
</tr>
</table>
<form action="/cgi-bin/koha/admin/cities.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" />
<input type="hidden" name="cityid" value="[% city.cityid | html %]" />
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>

3
koha-tmpl/intranet-tmpl/prog/en/modules/admin/classsources.tt
View File

@ -149,6 +149,7 @@
<h1>New classification source</h1>
[% END %]
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_source_validate" />
<fieldset class="rows">
<ol>
@ -213,6 +214,7 @@
<h1>New filing rule</h1>
[% END %]
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_sort_rule_validate" />
<fieldset class="rows">
<ol>
@ -259,6 +261,7 @@
<h1>New splitting rule</h1>
[% END %]
<form action="[% script_name | html %]" name="Aform" class="validated" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_split_rule_validate" />
<fieldset class="rows">
<ol>

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/columns_settings.tt
View File

@ -13,6 +13,7 @@
[% END %]
<div class="pagelist">
<form method="post" action="/cgi-bin/koha/admin/columns_settings.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="action" value="save" />
<input type="hidden" name="module" value="[% modulename | html %]" />
[% IF module.keys and module.keys.size > 0 %]

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/credit_types.tt
View File

@ -84,6 +84,7 @@
[% END %]
<form action="/cgi-bin/koha/admin/credit_types.pl" name="Aform" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<fieldset class="rows">
<ol>

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/curbside_pickup.tt
View File

@ -64,6 +64,7 @@
<div class="dialog message">The [% pref_CurbsidePickup_link | $raw | $KohaSpan %] preference is not enabled, do not forget to enable it to turn the feature on.</div>
[% END %]
<form method="post" class="form">
[% INCLUDE 'csrf-token.inc' %]
<div id="curbside_pickup_tabs" class="toptabs">
<ul class="nav nav-tabs" role="tablist">
[% FOREACH l IN libraries %]

4
koha-tmpl/intranet-tmpl/prog/en/modules/admin/currency.tt
View File

@ -110,6 +110,7 @@
</h1>
<form action="/cgi-bin/koha/admin/currency.pl" name="Aform" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<fieldset class="rows">
<legend class="sr-only">New currency entry form</legend>
@ -180,6 +181,7 @@
<span>Deletion not possible</span>
</p>
<form action="/cgi-bin/koha/admin/currency.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
</form>
</div>
@ -195,11 +197,13 @@
</tr>
</table>
<form action="/cgi-bin/koha/admin/currency.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" />
<input type="hidden" name="currency_code" value="[% currency.currency | html %]" />
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this currency</button>
</form>
<form action="/cgi-bin/koha/admin/currency.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
</form>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/debit_types.tt
View File

@ -83,6 +83,7 @@
[% END %]
<form action="/cgi-bin/koha/admin/debit_types.pl" name="Aform" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<fieldset class="rows">
<ol>

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/desks.tt
View File

@ -99,6 +99,7 @@
[% END %]
<form action="/cgi-bin/koha/admin/desks.pl" name="Aform" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<input type="hidden" name="desk_id" value="[% desk.desk_id | html %]" />
@ -155,6 +156,7 @@
</tr>
</table>
<form action="/cgi-bin/koha/admin/desks.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" />
<input type="hidden" name="desk_id" value="[% desk.desk_id | html %]" />
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/edi_accounts.tt
View File

@ -85,6 +85,7 @@
[% IF acct_form %]
<form action="/cgi-bin/koha/admin/edi_accounts.pl" name="Actform" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="save" />
[% IF account %]
<input type="hidden" name="id" value="[% account.id | html %]" />
@ -281,6 +282,7 @@
</tr>
</table>
<form action="/cgi-bin/koha/admin/edi_accounts.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<table>
</table>
<input type="hidden" name="op" value="delete_confirmed" />

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/edi_ean_accounts.tt
View File

@ -84,6 +84,7 @@
[% IF ean_form %]
<form action="/cgi-bin/koha/admin/edi_ean_accounts.pl" name="Eanform" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="save" />
[% IF ean %]
<input type="hidden" name="oldbranchcode" value="[% ean.branch.branchcode | html %]" />
@ -160,6 +161,7 @@
</h1>
<form action="/cgi-bin/koha/admin/edi_ean_accounts.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" />
<input type="hidden" name="id" value="[% ean.id | html %]" />
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/identity_provider_domains.tt
View File

@ -87,6 +87,7 @@
<h1>[% tx("New identity provider domain for '{identity_provider_code}'", {identity_provider_code = identity_provider_code}) | html %]</h1>
<form action="/cgi-bin/koha/admin/identity_providers.pl" id="add" name="add" class="validated" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add" />
<input type="hidden" name="domain_ops" value="1" />
<input type="hidden" name="identity_provider_id" value="[%- identity_provider_id | html -%]" />
@ -168,6 +169,7 @@
<h1>[% tx("Modify identity provider domain '{domain}'", {domain = identity_provider_domain.domain}) | html %]</h1>
<form action="/cgi-bin/koha/admin/identity_providers.pl" id="edit_save" name="edit_save" class="validated" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="edit_save" />
<input type="hidden" name="domain_ops" value="1" />
<input type="hidden" name="identity_provider_id" value="[%- identity_provider_id | html -%]" />

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/identity_providers.tt
View File

@ -83,6 +83,7 @@
<h1>New identity provider</h1>
<form action="/cgi-bin/koha/admin/identity_providers.pl" id="add" name="add" class="validated" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add" />
<fieldset class="rows">
<legend id="identity_provider_basic">Basic configuration</legend>
@ -237,6 +238,7 @@
<h1>[% tx("Modify identity provider '{id_provider}'", {id_provider = identity_provider.code}) | html %]</h1>
<form action="/cgi-bin/koha/admin/identity_providers.pl" id="edit_save" name="edit_save" class="validated" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="edit_save" />
<input type="hidden" name="identity_provider_id" value="[%- identity_provider.identity_provider_id | html -%]" />
<fieldset class="rows">

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/ill_batch_statuses.tt
View File

@ -74,6 +74,7 @@
[% END %]
<form action="/cgi-bin/koha/admin/ill_batch_statuses.pl" name="Aform" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<fieldset class="rows">
<ol>

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/items_search_field.tt
View File

@ -59,6 +59,7 @@
</h1>
<form action="/cgi-bin/koha/admin/items_search_field.pl" method="POST" id="search_fields">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
[% INCLUDE 'admin-items-search-field-form.inc' field=field %]
[% IF (field) %]

3
koha-tmpl/intranet-tmpl/prog/en/modules/admin/itemtypes.tt
View File

@ -150,6 +150,7 @@
<h1>New item type</h1>
[% END %]
<form action="/cgi-bin/koha/admin/itemtypes.pl" name="Aform" method="post" id="itemtypeentry">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<fieldset class="rows">
<ol>
@ -374,10 +375,12 @@
<tr><th scope="row">Rental charge</th><td>[% itemtype.rentalcharge | $Price %]</td></tr>
</table>
<form action="/cgi-bin/koha/admin/itemtypes.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" /><input type="hidden" name="itemtype" value="[% itemtype.itemtype | html %]" />
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete this item type</button>
</form>
<form action="/cgi-bin/koha/admin/itemtypes.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not delete</button>
</form>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/koha2marclinks.tt
View File

@ -37,6 +37,7 @@
<div class="dialog message">If you make any change to the mappings, you must ask your administrator to run misc/batchRebuildBiblioTables.pl.</div>
<form action="/cgi-bin/koha/admin/koha2marclinks.pl" method="post" id="koha2marc">
[% INCLUDE 'csrf-token.inc' %]
[% IF error_add %]
<div class="dialog alert">Failed to add mapping for [% error_info | html %]</div>

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/localization.tt
View File

@ -17,6 +17,7 @@
<div class="col-sm-12">
<h1>Localization</h1>
<form id="add_translation" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="entity" value="[% entity | html %]" />
<input type="hidden" name="code" value="[% code | html %]" />
<input type="hidden" name="interface" value="[% interface_side | html %]" />

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/marc-overlay-rules.tt
View File

@ -80,6 +80,7 @@
<div class="page-section">
<form action="/cgi-bin/koha/admin/marc-overlay-rules.pl" method="POST" id="marc-overlay-rules-form">
[% INCLUDE 'csrf-token.inc' %]
<table id="marc-overlay-rules">
<thead><tr>
<th>Rule</th>
@ -288,6 +289,7 @@
</div> <!-- /.page-section -->
<form action="/cgi-bin/koha/admin/marc-overlay-rules.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="redo-matching" />
</form>

3
koha-tmpl/intranet-tmpl/prog/en/modules/admin/marc_subfields_structure.tt
View File

@ -94,6 +94,7 @@
<div class="hint">You can drag and drop the subfield tabs to change the order.</div>
<form action="[% script_name | html %]" name="Aform" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<input type="hidden" name="tagfield" value="[% tagfield | html %]" />
<input type="hidden" name="frameworkcode" value="[% frameworkcode | html %]" />
@ -321,6 +322,7 @@
<p>Description: [% mss.liblibrarian | html_entity %]</p>
<form action="[% delete_link | html %]" method="post"><input type="hidden" name="op" value="delete_confirmed" />
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="tagfield" value="[% mss.tagfield | html %]" />
<input type="hidden" name="tagsubfield" value="[% mss.tagsubfield | html %]" />
<input type="hidden" name="frameworkcode" value="[% mss.frameworkcode | html %]" />
@ -329,6 +331,7 @@
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="tagfield" value="[% mss.tagfield | html %]" />
<input type="hidden" name="tagsubfield" value="[% mss.tagsubfield | html %]" />
<input type="hidden" name="frameworkcode" value="[% mss.frameworkcode | html %]" />

5
koha-tmpl/intranet-tmpl/prog/en/modules/admin/marctagstructure.tt
View File

@ -125,6 +125,7 @@
[% IF ( add_form ) %]
<form action="[% script_name | html %]" name="Aform" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<legend>
@ -199,6 +200,7 @@
<p>Tag: [% searchfield | html %]</p>
<p>Description: [% liblibrarian | html %]</p>
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" />
<input type="hidden" name="searchfield" value="[% searchfield | html %]" />
<input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
@ -214,12 +216,14 @@
<div class="dialog message"><h3>Tag deleted</h3>
<form action="[% script_name | html %]" method="post"><input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
[% INCLUDE 'csrf-token.inc' %]
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> OK</button>
</form></div>
[% END %]
[% IF ( framework_create ) %]
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="framework_create_confirm" />
<input type="hidden" name="frameworkcode" value="[% framework.frameworkcode | html %]" />
Create framework for [% framework.frameworkcode | html %] ([% framework.frameworktext | html %]) using
@ -236,6 +240,7 @@
[% IF ( else ) %]
<form name="f" action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset style="padding:.5em;">
<label for="tag_search"><strong>Search for tag:</strong> </label>
<input type="text" name="searchfield" id="tag_search" size="4" value="[% searchfield | html %]" />

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/matching-rules.tt
View File

@ -114,6 +114,7 @@
<h1>New record matching rule</h1>
[% END %]
<form action="[% script_name | html %]" name="Aform" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="[% confirm_op | html %]" />
<fieldset class="rows">
<ol>
@ -428,6 +429,7 @@
<div class="dialog alert">
<h1>Confirm deletion of record matching rule <span class="ex">'[% code | html %]' ([% description | html %])</span>?</h1>
<form action="[% script_name | html %]" name="Aform" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="[% confirm_op | html %]" />
<input type="hidden" name="matcher_id" value="[% matcher_id | html %]" />
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete record matching rule</button>

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/oai_set_mappings.tt
View File

@ -49,6 +49,7 @@
[% END %]
<form action="/cgi-bin/koha/admin/oai_set_mappings.pl" method="post" id="mappingform">
[% INCLUDE 'csrf-token.inc' %]
<div class="page-section">
<table id="mappings">
<thead>

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/oai_sets.tt
View File

@ -59,6 +59,7 @@
[% IF ( op_new || op_mod ) %]
<form method="post" action="/cgi-bin/koha/admin/oai_sets.pl" class="validated">
[% INCLUDE 'csrf-token.inc' %]
[% IF ( op_new ) %]
<h1>New OAI set</h1>
<input type="hidden" name="op" value="savenew" />

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/overdrive.tt
View File

@ -39,6 +39,7 @@
<h1>OverDrive library authnames</h1>
<form action="/cgi-bin/koha/admin/overdrive.pl" name="overdrive_form" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="update" />
<fieldset>
<table id="od_info">

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/patron-attr-types.tt
View File

@ -86,6 +86,7 @@
</div>
[% END %]
<form action="[% script_name | html %]" class="validated" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="[% confirm_op | html %]" />
<fieldset class="rows">
<ol>
@ -266,6 +267,7 @@
[% tx("Confirm deletion of patron attribute type '{code}' ({description})?", { code = code, description = description }) | html %]
</h1>
<form action="[% script_name | html %]" name="Aform" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="[% confirm_op | html %]" />
<input type="hidden" name="code" value="[% code | html %]" />
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete patron attribute type</button>

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/restrictions.tt
View File

@ -94,6 +94,7 @@
[% IF op == 'add_form' %]
<form id="restriction_form" action="/cgi-bin/koha/admin/restrictions.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add_validate" />
<input type="hidden" name="checked" value="0" />
[% IF restriction %]
@ -168,6 +169,7 @@
<h1>Confirm restriction type deletion</h1>
<p>Are you sure you want to delete '[% PROCESS restriction_type_description restriction_type=restriction %]'?</p>
<form action="/cgi-bin/koha/admin/restrictions.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="delete_confirmed" />
<input type="hidden" name="code" value="[% restriction.code | html %]" />
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, delete</button>

3
koha-tmpl/intranet-tmpl/prog/en/modules/admin/searchengine/elasticsearch/mappings.tt
View File

@ -91,11 +91,13 @@ a.add, a.delete {
<div class="dialog alert">
<h3>The current mappings you see on the screen will be erased and replaced by the mappings in the mappings.yaml file.</h3>
<form method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="reset_confirmed" />
<button type="submit" class="approve"><i class="fa fa-fw fa-check"></i> Yes, reset mappings</button>
</form>
<form method="post">
[% INCLUDE 'csrf-token.inc' %]
<button type="submit" class="deny"><i class="fa fa-fw fa-times"></i> No, do not reset mappings</button>
</form>
</div>
@ -114,6 +116,7 @@ a.add, a.delete {
</div>
<form id="es_mappings" method="post">
[% INCLUDE 'csrf-token.inc' %]
[% WRAPPER tabs id= "tabs" %]

3
koha-tmpl/intranet-tmpl/prog/en/modules/admin/share_content.tt
View File

@ -68,6 +68,7 @@
[% END %]
<form id="mana_preference" method="post" class="clearfix">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<ol>
<li>
@ -117,6 +118,7 @@
[% IF Koha.Preference('ManaToken') %]
<form id="mana_token" method="post" class="clearfix">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<legend>Mana KB token</legend>
<ol>
@ -134,6 +136,7 @@
</form>
[% ELSE %]
<form id="mana_request" method="post" class="clearfix">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows" id="mana_subscription">
<ol>
<li>

9
koha-tmpl/intranet-tmpl/prog/en/modules/admin/smart-rules.tt
View File

@ -92,6 +92,7 @@
</form>
[% IF ( definedbranch ) %]
<form action="/cgi-bin/koha/admin/clone-rules.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<label for="tobranch"><strong>Clone these rules to:</strong></label>
<input type="hidden" name="frombranch" value="[% current_branch | html %]" />
<select name="tobranch" id="tobranch">
@ -105,6 +106,7 @@
<div class="page-section">
<form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add" />
<input type="hidden" name="branch" value="[% current_branch | html %]"/>
<table id="default-circulation-rules">
@ -621,6 +623,7 @@
<h2>Default checkout, hold and return policy[% IF humanbranch %] for [% Branches.GetName( humanbranch ) | html %][% END %]</h2>
<p>You can set a default maximum number of checkouts, hold policy and return policy that will be used if none is defined below for a particular item type or category.</p>
<form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="set-branch-defaults" />
<input type="hidden" name="branch" value="[% current_branch | html %]"/>
<table>
@ -815,6 +818,7 @@
no limit applies, except possibly for a limit you define for a specific item type.
</p>
<form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add-branch-cat" />
<input type="hidden" name="branch" value="[% current_branch | html %]"/>
<table>
@ -894,6 +898,7 @@
[% END %]
<p>Specify if waiting holds can be cancelled for a given patron category.</p>
<form id="set-waiting-hold-cancellation" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="set-waiting-hold-cancellation" />
<input type="hidden" name="branch" value="[% current_branch | html %]"/>
<table>
@ -978,6 +983,7 @@
[% END %]
<p>Specify the maximum number simultaneous current article requests a patron of a given category can have.</p>
<form id="set-article-requests-daily-limit" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add-open-article-requests-limit" />
<input type="hidden" name="branch" value="[% current_branch | html %]"/>
<table>
@ -1032,6 +1038,7 @@
[% END %]
<p>Specify the article request fee for a given patron category.</p>
<form id="set-article-request-fee" method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="set-article-request-fee" />
<input type="hidden" name="branch" value="[% current_branch | html %]"/>
<table>
@ -1092,6 +1099,7 @@
[% END %]
<p>Specify the default policy for lost item fees on return.</p>
<form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="mod-refund-lost-item-fee-rule" />
<input type="hidden" name="branch" value="[% current_branch | html %]" />
<table>
@ -1294,6 +1302,7 @@
</ul>
<form method="post" action="/cgi-bin/koha/admin/smart-rules.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add-branch-item" />
<input type="hidden" name="branch" value="[% current_branch | html %]"/>
<table>

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/sms_providers.tt
View File

@ -80,6 +80,7 @@
<div id="sms_add_form">
<form id="sms_form" action="sms_providers.pl" method="post" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<legend>Add an SMS cellular provider</legend>
<input type="hidden" id="id" name="id" value="" />

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/smtp_servers.tt
View File

@ -80,6 +80,7 @@
[% IF op == 'add_form' %]
<h1>New SMTP server</h1>
<form action="/cgi-bin/koha/admin/smtp_servers.pl" id="add" name="add" class="validated" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add" />
<fieldset class="rows">
<ol>
@ -153,6 +154,7 @@
[% END %]
<form action="/cgi-bin/koha/admin/smtp_servers.pl" id="edit_save" name="edit_save" class="validated" method="post">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="edit_save" />
<input type="hidden" name="smtp_server_id" value="[%- smtp_server.id | html -%]" />
<fieldset class="rows">

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/sru_modmapping.tt
View File

@ -21,6 +21,7 @@
<h1>SRU search field mapping for bibliographic records</h1>
<form id="form01" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<div class="row">
<div class="col-xs-6">

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/sru_modmapping_auth.tt
View File

@ -18,6 +18,7 @@
[% INCLUDE 'messages.inc' %]
<h1>SRU search field mapping for authorities</h1>
<form id="form01" method="post">
[% INCLUDE 'csrf-token.inc' %]
<fieldset class="rows">
<div class="row">
<div class="col-xs-6">

2
koha-tmpl/intranet-tmpl/prog/en/modules/admin/systempreferences.tt
View File

@ -290,6 +290,7 @@
<button type="submit" class="approve"><i class="fa fa-check" aria-hidden="true"></i> Yes, delete</button>
</form>
<form class="inline" action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<button type="submit" class="deny"><i class="fa fa-remove" aria-hidden="true"></i> No, do not delete</button>
</form>
</div>
@ -299,6 +300,7 @@
<div class="dialog message">
<h1>Data deleted</h1>
<form action="[% script_name | html %]" method="post">
[% INCLUDE 'csrf-token.inc' %]
<button type="submit">Back to system preferences</button>
</form>
</div>

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/transport-cost-matrix.tt
View File

@ -56,6 +56,7 @@
</div>[% END %]
<form method="post" action="/cgi-bin/koha/admin/transport-cost-matrix.pl" id="cost_matrix_form">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="set-cost-matrix" />
<fieldset id="transport-cost-matrix">
<div class="help">

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/usage_statistics.tt
View File

@ -65,6 +65,7 @@
[% END %]
<form id="category_form" action="/cgi-bin/koha/admin/usage_statistics.pl" method="post">
[% INCLUDE 'csrf-token.inc' %]
<h1>Modify the statistics you share with the Koha community</h1>
<div class="row">
<div class="col-xs-12 col-sm-6">

1
koha-tmpl/intranet-tmpl/prog/en/modules/admin/z3950servers.tt
View File

@ -83,6 +83,7 @@
[% IF ( add_form ) %]
<form action="[% script_name | html %]" name="Aform" method="post" id="serverentry">
[% INCLUDE 'csrf-token.inc' %]
[% IF op == 'edit' %]
<h1>[% tx("Modify {servertype} server '{servername}'", { servertype = servertype, servername = server.servername }) | html %]</h1>
<input type="hidden" name="id" value="[% server.id | html %]" />

2
koha-tmpl/intranet-tmpl/prog/en/modules/auth.tt
View File

@ -123,6 +123,7 @@
[% END # /IF identity_providers.size %]
<form action="[% script_name | html %]" method="post" name="loginform" id="loginform" class="validated">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="koha_login_context" value="intranet" />
[% FOREACH INPUT IN INPUTS %]
[% NEXT IF INPUT.name == "koha_login_context" %]
@ -207,6 +208,7 @@
[% END %]
[% ELSIF TwoFA_prompt %]
<form action="[% script_name | html %]" method="post" name="loginform" id="loginform" autocomplete="off">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="koha_login_context" value="intranet" />
[% FOREACH INPUT IN INPUTS %]
<input type="hidden" name="[% INPUT.name | html %]" value="[% INPUT.value | html %]" />

1
koha-tmpl/intranet-tmpl/prog/en/modules/authorities/authorities.tt
View File

@ -430,6 +430,7 @@
[% END # /IF duplicateauthid %]
<form method="post" id="f" name="f" action="/cgi-bin/koha/authorities/authorities.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="add" />
<input type="hidden" name="addfield_field" value="" />
<input type="hidden" name="repeat_field" value="" />

Some files were not shown because too many files have changed in this diff Show More