https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43296
Bug ID: 43296
Summary: Circulation statistics do not work with non-numeric
patron attribute codes
Initiative type: ---
Sponsorship ---
status:
Product: Koha
Version: Main
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: P5 - low
Component: Reports
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected]
Depends on: 42735
Target Milestone: ---
Bug42735 restricted patron attribute codes in circulation statistics to numeric
values.
Existing attributes with alphanumeric codes, such as SHOW_BCODE, no longer pass
validation. When selected as a row, Koha silently falls back to branch and
produces incorrect statistics. When selected as a column, Koha falls back to
datetime and may fail with a datetime isn't in GROUP BY DBI error.
Referenced Bugs:
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42735
[Bug 42735] [CVE-2026-70373] SQL Injection in reports/issues_stats.pl via
PeriodTypeSel / PeriodDaySel / PeriodMonthSel / Filter parameters (unvalidated
string context, no placeholders)
--
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/
