Koha-clms/opac
Hammat Wele 95947d2b60
Bug 13342: Not logged user can place a review/comment
We are able to comment a notice even when no user is connected

To test

1. Log in to OPAC.
2. Find a Biblio and open the comments tab.
3. Open another tab/window, and log out from the account.
4. Return to the first tab.
5. Click "Post your comments on this title."
 --> We are able to post a comment
6. Apply the patch
7. Repeat step 1, 2, 3, 4, 5
 --> You should be redirected to the login page.

Signed-off-by: David Cook <dcook@prosentient.com.au>

Bug 13342: Tidy

Signed-off-by: David Cook <dcook@prosentient.com.au>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: wainuiwitikapark <wainuiwitikapark@catalyst.net.nz>
(cherry picked from commit 44d30ecc2c)
2025-07-24 18:05:26 +12:00
..
clubs Bug 35941: Limit club list to those from the logged in user 2024-02-22 13:02:53 +00:00
errors Bug 29420: HTTP status code incorrect when calling error pages directly under Plack/PSGI 2022-04-20 09:03:39 -10:00
external/overdrive
…
sci
…
sco Bug 19188: Use the Price template plugin with_symbol => 1 2023-01-31 17:53:26 +00:00
svc Bug 35942: OPAC user can enroll several times to the same club [23.05.x] 2024-03-04 17:34:39 +01:00
ilsdi.pl Bug 36867: Do not allow access to ILS-DI for IPs not explicitly listed in ILS-DI:AuthorizedIPs 2025-04-24 14:19:17 +00:00
maintenance.pl
…
oai.pl
…
opac-ISBDdetail.pl Bug 34836: Add patron check to isbd and marc detail pages 2023-10-17 14:34:14 +01:00
opac-MARCdetail.pl Bug 34836: Add patron check to isbd and marc detail pages 2023-10-17 14:34:14 +01:00
opac-account-pay-return.pl
…
opac-account-pay.pl
…
opac-account.pl Bug 29844: Fix ->search occurrences 2022-02-09 15:36:23 -10:00
opac-addbybiblionumber.pl Bug 26346: Add option to make public lists editable by all staff 2022-04-12 17:13:02 +02:00
opac-alert-subscribe.pl
…
opac-article-request-cancel.pl
…
opac-authorities-home.pl Bug 33803: Remove comment about tab width 2023-06-12 10:28:26 +00:00
opac-authoritiesdetail.pl Bug 21330: Allow XSLT for authority detail view in OPAC 2023-06-07 09:05:01 +00:00
opac-basket.pl Bug 33102: Display fields from biblioitems in OPAC/staff interface cart 2023-05-12 16:34:19 +01:00
opac-blocked.pl
…
opac-browse.pl
…
opac-browser.pl
…
opac-changelanguage.pl
…
opac-course-details.pl Bug 32445: (follow-up) Fix availability display on opac-course-details 2023-01-13 15:49:41 +00:00
opac-course-reserves.pl
…
opac-curbside-pickups.pl Bug 30650: Prevent pickup to be created on holiday 2022-07-29 15:00:51 -03:00
opac-detail.pl Bug 34694: Only check for IsAvailableForItemLevelRequest if is authenticated 2023-10-12 16:00:21 +00:00
opac-discharge.pl
…
opac-downloadcart.pl Bug 29697: Use flag embed_items 2022-07-22 15:24:11 -03:00
opac-downloadshelf.pl Bug 33069: Fix error in MARC download for OPAC lists 2023-05-12 16:35:37 +01:00
opac-export.pl Bug 37370: Return 400 if OpacExportOptions does not contain the passed format 2024-08-13 11:54:00 -03:00
opac-holdshistory.pl
…
opac-ics.pl Bug 30927: Improve formatting or iCal files for checkout due dates 2022-08-09 07:39:17 -03:00
opac-idref.pl
…
opac-illrequests.pl Bug 33702: (QA follow-up) Do not crash on borrowernumber 2023-05-22 16:06:48 +01:00
opac-image.pl Bug 33047: Return 404 instead of 500 when biblio does not exist 2023-07-18 14:06:50 +00:00
opac-imageviewer.pl
…
opac-issue-note.pl Bug 29544: (QA follow-up) Simplify code 2022-02-02 21:05:29 -10:00
opac-library.pl Bug 31775: Show single library 2022-10-17 08:25:55 -03:00
opac-main.pl Bug 28955: Impact News as well 2022-02-24 14:35:36 -10:00
opac-memberentry.pl Bug 36816: Remove warning 2025-03-31 13:30:19 +00:00
opac-messaging.pl Bug 31743: Change condition for messaging tab 2022-11-04 20:01:13 -03:00
opac-modrequest-suspend.pl
…
opac-modrequest.pl Bug 14783: (QA follow-up) Rename method and move tests 2022-10-17 15:43:22 -03:00
opac-mymessages.pl
…
opac-news-rss.pl
…
opac-overdrive-search.pl
…
opac-page.pl Bug 32251: Add a fallback for when language cookie was removed 2023-01-31 14:26:55 +00:00
opac-passwd.pl
…
opac-password-recovery.pl Bug 38772: Typo 'minPasswordPreference' system preference 2025-06-23 04:09:46 +00:00
opac-patron-consent.pl Bug 33197: Rename GDPR_Policy system preference 2023-05-12 15:50:56 +01:00
opac-patron-image.pl Bug 29931: (follow-up) Similar thing in opac-patron-image.pl 2022-03-15 22:30:50 -10:00
opac-privacy.pl Bug 29843: Use in opac/opac-privacy.pl 2022-02-10 14:44:23 -10:00
opac-ratings.pl
…
opac-readingrecord.pl Bug 33951: (QA follow-up) Import GetNormalizedOCLCNumber 2023-07-12 09:25:59 +00:00
opac-recall.pl Bug 30291: Changes to OPAC files 2022-05-05 11:17:36 -10:00
opac-recalls.pl Bug 30291: Changes to OPAC files 2022-05-05 11:17:36 -10:00
opac-registration-verify.pl Bug 23538: Email library when new patron self-registers 2022-09-23 09:37:54 -03:00
opac-renew.pl
…
opac-reportproblem.pl
…
opac-request-article.pl Bug 36072: opac-request-article should check syspref 2024-02-22 09:58:37 +00:00
opac-reserve.pl Bug 33302: Send and display errors when a hold cannot be placed on the OPAC 2023-05-15 12:09:10 +00:00
opac-reset-password.pl Bug 29925: Add a password reset page for expired passwords 2022-05-06 10:33:09 -10:00
opac-restrictedpage.pl
…
opac-retrieve-file.pl
…
opac-review.pl Bug 13342: Not logged user can place a review/comment 2025-07-24 18:05:26 +12:00
opac-routing-lists.pl Revert "Bug 36532: Protect opac-dismiss-message.pl from malicious usages" 2024-05-23 06:43:42 +00:00
opac-search-history.pl Bug 30377: Fix two CGI::param called in list context-warnings 2022-04-04 16:23:46 +02:00
opac-search.pl Bug 33819: Add page numbers to opac results breadcrumb 2023-10-17 17:35:39 +00:00
opac-sendbasket.pl Bug 36520: Sanitize input in opac-sendbasket.pl 2024-05-29 08:00:48 +00:00
opac-sendshelf.pl Bug 16522: (follow-up) MARC display templates and get_marc_host fixes 2023-01-31 17:15:27 +00:00
opac-serial-issues.pl
…
opac-shareshelf.pl
…
opac-shelves.pl Bug 28375: (follow-up) Use C4::Context->interface 2022-10-20 11:50:53 -03:00
opac-showmarc.pl
…
opac-showreviews.pl Bug 29697: Replace GetMarcBiblio occurrences with $biblio->metadata->record 2022-07-22 15:24:11 -03:00
opac-suggestions.pl Bug 29311: (QA follow-up) Fix an existing spelling typo 2023-04-16 18:46:30 +01:00
opac-tags.pl Bug 38969: Prevent XSS in tags/review.pl and Prevent JS error when adding tags with quote at the OPAC 2025-04-24 15:12:24 +00:00
opac-tags_subject.pl
…
opac-topissues.pl Bug 17018: Split AdvancedSearchTypes for staff and OPAC 2022-04-12 17:13:02 +02:00
opac-user.pl Bug 33957: Add normalized_oclc and only fetch when needed 2023-07-12 09:36:04 +00:00
tracklinks.pl Bug 30262: Trim whitespace off tracklinks.pl URLs 2022-08-31 08:46:11 -03:00
unapi
…