https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36630

David Nind <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #165034|0                           |1
        is obsolete|                            |

--- Comment #2 from David Nind <[email protected]> ---
Created attachment 165035
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=165035&action=edit
Bug 36630: Change Post to GET to fix CSRF error on item search batch operations
buttons

This patch changes the form that submits to batchMod.pl from the Item search
results page. The form method does not need to be a POST.

    To recreate:

    1. Do an item search
    2. On the results page 'click Select visible rows'
    3. Click 'Batch operations' and select 'Batch item modification'
    4. See Programming error - op 'show' must start with 'cud-' for POST
http://localhost:8081/intranet/tools/batchMod.pl (referer:
http://localhost:8081/cgi-bin/koha/catalogue/itemsearch.pl)
    5. Click 'Batch operations' and select 'Batch item deletion'
    6. See the same error

    To test:
    1. Apply patch and repeat steps to recreate the issue
    2. See that the batchMod.pl page loads with no error.

Signed-off-by: David Nind <[email protected]>

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to