February 2014 - Koha-bugs - lists.koha-community.org

[Bug 11662] member-picupload.pl can write to arbitrary files on the server
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

1 0

[Bug 11661] edithelp.pl can be used to write arbitrary files to the server
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11661 Galen Charlton <gmcharlt(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to Master --- Comment #8 from Galen Charlton <gmcharlt(a)gmail.com> --- Pushed to master. Thanks, Chris! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11661] edithelp.pl can be used to write arbitrary files to the server
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

1 0

[Bug 11660] tools/pdfViewer.pl is vulnerable to displaying the contents of an arbitrary file on the server
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11660 Galen Charlton <gmcharlt(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to Master --- Comment #4 from Galen Charlton <gmcharlt(a)gmail.com> --- Pushed to master. Thanks, Chris! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11660] tools/pdfViewer.pl is vulnerable to displaying the contents of an arbitrary file on the server
by bugzilla-daemon＠bugs.koha-community.org 07 Feb '14

07 Feb '14

1 0

[Bug 11688] New: OrderPdfFormat cannot be configured nor localized
by bugzilla-daemon＠bugs.koha-community.org 06 Feb '14

06 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11688 Bug ID: 11688 Summary: OrderPdfFormat cannot be configured nor localized Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: I18N/L10N Assignee: koha-bugs(a)lists.koha-community.org Reporter: pasi.kallinen(a)pttk.fi QA Contact: testopia(a)bugs.koha-community.org CC: frederic(a)tamil.fr Syspref OrderPdfFormat takes a cryptic text string. Output is a PDF that cannot be configured. Both the perl code and the ODT-file (which is originally used as the layout of the PDF) have strings that need translation. The perl code has hard-coded locations for strings ... -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 1

[Bug 11035] New: Replace shortcut plugin jquery.hotkeys.min.js
by bugzilla-daemon＠bugs.koha-community.org 05 Feb '14

05 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11035 Bug ID: 11035 Summary: Replace shortcut plugin jquery.hotkeys.min.js Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: blocker Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: gmcharlt(a)gmail.com Reporter: philippe.blouin(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org (Not sure I have have the right Component or Severity, feedbacks welcomed). A sponsor asked for some specific keyboard shortcuts. After discussion a month ago with (oleonard, jcamins), it seemed a change of plugin was needed because the current one is not maintained and would limit our ability to upgrade jquery, simply. I was suggested a few independant ones, and implemented my feature with openjs's. This bug is ONLY about changing the plugin. It brings no new functionnality nor does it changes behavior. Enhancement to shortcut could bring a lot of discussion. Refression TESTING: 1) apply the patch, 2) in intranet, validate that the three available shortcuts (Alt-r, alt-u, alt-q) are still functionning perfectly. -- You are receiving this mail because: You are watching all bug changes.

1 21

[Bug 11664] New: No way to select all/unselect all on patron list
by bugzilla-daemon＠bugs.koha-community.org 05 Feb '14

05 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11664 Bug ID: 11664 Summary: No way to select all/unselect all on patron list Change sponsored?: --- Product: Koha Version: 3.14 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org CC: kyle(a)bywatersolutions.com On testing another patch I wondered why you can't select/unselect all patrons in a patron list to remove in batch. I think this would be a useful enhancement, as this seems to be the point of preferring checkboxes over a delete link. Also, why name the button "Update" when the purpose seems to always be deleting? -- You are receiving this mail because: You are watching all bug changes.

1 2

[Bug 11682] New: serials.status is too dependent on magic numbers
by bugzilla-daemon＠bugs.koha-community.org 05 Feb '14

05 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11682 Bug ID: 11682 Summary: serials.status is too dependent on magic numbers Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Serials Assignee: koha-bugs(a)lists.koha-community.org Reporter: gmcharlt(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: colin.campbell(a)ptfs-europe.com The status column in the serials table, which represents the receipt status of a serial issue, uses a slew of magic numbers. This can make it difficult to maintain the code and add new statuses. Ways to address this, ranging from simple to more complex, include: [1] Use named constants. [2] Changing serials.status from an integer to a varchar and using self-describing values, possibly in conjunction with a new authorized value list. [3] Create a new serial_issue_status column to manage the statuses. It might look like this: id INTEGER -- status ID name VARCHAR(255) -- label of status missing BOOLEAN -- whether or not the status should be considered to represent an issue that was never received [4] As with option 3, but allowing staff users to define new statuses. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 10

[Bug 11691] New: provide exports of the stock MARC templates on the website
by bugzilla-daemon＠bugs.koha-community.org 05 Feb '14

05 Feb '14

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11691 Bug ID: 11691 Summary: provide exports of the stock MARC templates on the website Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: new feature Priority: P5 - low Component: Websites, Mailing Lists, etc Assignee: wizzyrea(a)gmail.com Reporter: gmcharlt(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org I propose to create a service for the website that will maintain dumps of the MARC frameworks for each flavor and language found in the most recent stable release. The dumps, which would be provided in CSV and ODS format, would allow folks to update their frameworks from stock without having to fiddle with SQL scripts. -- You are receiving this mail because: You are watching all bug changes.

1 0