November 2009 - Koha-bugs - lists.koha-community.org

[Bug 3651] New: sending shelves and baskets
by bugzilla-daemon＠kohaorg.ec2.liblime.com 18 Feb '10

18 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3651 Summary: sending shelves and baskets Product: Koha Version: rel_3_2 Platform: PC OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: OPAC AssignedTo: nahuel.angelinetti(a)biblibre.com ReportedBy: nahuel.angelinetti(a)biblibre.com Estimated Hours: 0.0 Change sponsored?: --- Atm, sending shelves and baskets via OPAC can be used to SPAM or spoof the kohaadminemailaddress, it's really bad. Only logged in user must be able to send shelves and baskets, and their name must appear in the sent email. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 3

[Bug 3229] New: The "Sort By" feature for lists does not work
by bugzilla-daemon＠liblime.com 17 Feb '10

17 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3229 Summary: The "Sort By" feature for lists does not work Product: Koha Version: rel_3_0 Platform: PC OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Virtual Shelves AssignedTo: jmf(a)liblime.com ReportedBy: debra.denault(a)liblime.com Estimated Hours: 0.0 Change sponsored?: --- There is the ability to define how lists sort, by title or author, using the "Sort By" feature. It does not currently seem to work (i.e. sort by title or author). -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

2 16

[Bug 3775] New: Accounts::chargelostitem uses title, but title not available to it
by bugzilla-daemon＠kohaorg.ec2.liblime.com 17 Feb '10

17 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3775 Summary: Accounts::chargelostitem uses title, but title not available to it Product: Koha Version: HEAD Platform: All OS/Version: All Status: ASSIGNED Severity: normal Priority: PATCH-Sent Component: Command-line Utilities AssignedTo: dbavousett(a)ptfs.com ReportedBy: dbavousett(a)ptfs.com Estimated Hours: 0.0 Change sponsored?: --- Every item selected by longoverdue.pl results in an error of the form: Use of uninitialized value in concatenation (.) or string at /home/ebpl/kohaclone/C4/Accounts.pm line <foo> The INSERT at this point is attempting to create a new fine, and is trying to concat in the title from the hashref loop from the selection earlier in the routine. Since titles is not in either issues or items, it is an uninitialized value at this spot. This patch backs up and includes biblio.title to resolve this problem. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 6

[Bug 3770] New: 'Add to list' page does only offers the choice of adding to private lists
by bugzilla-daemon＠kohaorg.ec2.liblime.com 16 Feb '10

16 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3770 Summary: 'Add to list' page does only offers the choice of adding to private lists Product: Koha Version: HEAD Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Virtual Shelves AssignedTo: Sebastien.Hinderer(a)snv.jussieu.fr ReportedBy: oleonard(a)myacpl.org Estimated Hours: 0.0 Change sponsored?: --- Steps to reproduce: 1. In the staff client, create a new public list. 2. Search for a title, choose to add it to a list 3. The 'Add to list' pop-up/page will give you the option of adding to an existing list, but it will only list private lists. It should also offer any public lists owned by the user. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 6

[Bug 3638] New: Status of hold not changed when item checked in via SIP2 Interface
by bugzilla-daemon＠kohaorg.ec2.liblime.com 16 Feb '10

16 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3638 Summary: Status of hold not changed when item checked in via SIP2 Interface Product: Koha Version: HEAD Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: SIP2 AssignedTo: joe.atzberger(a)liblime.com ReportedBy: colin.campbell(a)ptfs-europe.com Estimated Hours: 0.0 Change sponsored?: --- When an Item is returned via SIP2 the unit is being correctly alerted that it is required for a hold and the details of the hold. However unlike a normal check in the status of the hold does not reflect that the item has been captured. This causes problems in the work flow, forcing sip2 checked in items to be manually checked in before the hold is shown as waiting or in transit to pickup location. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 2

[Bug 3449] New: Filtering tags by valid borrowernumber incorrectly displays error message
by bugzilla-daemon＠liblime.com 16 Feb '10

16 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3449 Summary: Filtering tags by valid borrowernumber incorrectly displays error message Product: Koha Version: HEAD Platform: All OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Tools AssignedTo: galen.charlton(a)liblime.com ReportedBy: oleonard(a)myacpl.org Estimated Hours: 0.0 Change sponsored?: --- As originally reported as part of Bug 2693, if you use the "filter" form on the tags review page to filter on a valid borrowernumber the page will display an error message even as it returns results: "ERROR: No match for user (51). FILTER REQUIRES BORROWERNUMBER (not name)." -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

2 5

[Bug 3654] New: Authorized Values Page Edits
by bugzilla-daemon＠kohaorg.ec2.liblime.com 16 Feb '10

16 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3654 Summary: Authorized Values Page Edits Product: Koha Version: HEAD Platform: PC OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: System Administration AssignedTo: nengard(a)gmail.com ReportedBy: nengard(a)gmail.com Estimated Hours: 0.0 Change sponsored?: --- The Authorized Values page says that's it's just for cataloging - but Authorized Values are used for more than that now - so this page needs some text editing. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 7

[Bug 3652] New: XSS vulnerabilities
by bugzilla-daemon＠kohaorg.ec2.liblime.com 16 Feb '10

16 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3652 Summary: XSS vulnerabilities Product: Koha Version: rel_3_2 Platform: All OS/Version: All Status: NEW Severity: critical Priority: P5 Component: Templates AssignedTo: mjr(a)ttllp.co.uk ReportedBy: mjr(a)ttllp.co.uk Estimated Hours: 0.0 Change sponsored?: --- Koha has several XSS attack opportunities. There are two approaches to fixing this: 1. identify and ESCAPE="HTML" (or URL or JS) all places in the templates which are vulnerable; 2. set default_escape => "HTML" in C4::Output and identify the places in the templates which require ESCAPE="0" (unescaped) output. 1 (default permit) seems less secure than 2. 2 will break some things in the short term. This seems like a generalisation of bug #2690. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 2

[Bug 3586] New: errors pages are sent with HTTP 200 OK header
by bugzilla-daemon＠kohaorg.ec2.liblime.com 15 Feb '10

15 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3586 Summary: errors pages are sent with HTTP 200 OK header Product: Koha Version: rel_3_2 Platform: All URL: http://koha/cgi-bin/koha/errors/404.pl OS/Version: All Status: NEW Severity: normal Priority: P5 Component: Browser compatibility AssignedTo: joe.atzberger(a)liblime.com ReportedBy: mjr(a)ttllp.co.uk CC: oleonard(a)myacpl.org, gmcharlt(a)gmail.com Estimated Hours: 0.0 Change sponsored?: --- All of the errors scripts send results back to clients with HTTP 200 OK header. This leads to some clients taking incorrect actions. To see the fault, try curl -I http://koha/cgi-bin/koha/errors/404.pl and look at the first line of output. Looks to me like C4::Output::output_html_with_http_headers doesn't pass status code to C4::Output::output_with_http_headers and the errors scripts don't send error codes anyway. -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 5

[Bug 3622] New: basket group
by bugzilla-daemon＠kohaorg.ec2.liblime.com 15 Feb '10

15 Feb '10

http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=3622 Summary: basket group Product: Koha Version: rel_3_2 Platform: PC OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Acquisitions AssignedTo: paul.poulain(a)biblibre.com ReportedBy: paul.poulain(a)biblibre.com Estimated Hours: 0.0 Change sponsored?: --- When closing a basket (basket.pl op=attachbasket) : - don't display a basketgroup list if there are no basketgroup available - fill the basketgroup name (case of a new basketgroup) with the basket name (pre-typed by default) - on 1st line: Attach to <basketgrouplist> or create new basketgroup <input> - "close basketgroup ..." => "close basketgroup" - add an option to leave basket ungrouped - "Change basketgroup" => "OK" basketgroup.pl - add an option to delete a basketgroup (while unclosed) - calculating of the baskettotal does not work for ungrouped baskets - add a date on basketgroup to know when a basketgroup has been closed - add basketgroup owner (ie: creator) - add basketgroup: not javascript anymore. Opens a page, with the new basketgroup, and the list of ungrouped baskets. The librarian can drag and drop, then save. A button let choose "close & print", that print the PDF, and close the basketgroup. After saving, return to basketgroup page. - basketgroup name => must be unique (check for duplicate) - on the main basketgroup page, just have a list of basketgroups : Name / status / date closed / basketgroup owner / reopen - print - modify - delete (reopen & print only available if closed, modify & delete only available if not closed) -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 4