September 2018 - Koha-bugs - lists.koha-community.org

[Bug 15184] Ability to duplicate existing order lines to a given basket
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '18

07 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15184 --- Comment #47 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Created attachment 78536 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=78536&action=ed… Bug 15184: Do not copy items for serials -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 15184] Ability to duplicate existing order lines to a given basket
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '18

07 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15184 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #78340|0 |1 is obsolete| | --- Comment #46 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Created attachment 78535 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=78535&action=ed… Bug 15184: Remove the checkboxes on the last step -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 7534] New OPACAllowUserToChooseBranch setting for only showing libraries allowing holds
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '18

07 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7534 --- Comment #91 from Nick Clemens <nick(a)bywatersolutions.com> --- (In reply to Nick Clemens from comment #90) > Created attachment 78495 [details] [review] > Bug 7534: (RM follow-up) Fix TT syntax Followup pushed to master -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '18

07 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 --- Comment #249 from Nick Clemens <nick(a)bywatersolutions.com> --- (In reply to Jonathan Druart from comment #248) > Created attachment 78415 [details] [review] > Bug 13618: Do not use html filters with KohaSpan > > To recreate the issue: > Go to Home › Administration › Library groups > Create a new group > "Group <span class='name'>xxx</span> created." > > Signed-off-by: Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> Followup pushed to master -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 21315] New: test
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '18

07 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21315 Bug ID: 21315 Summary: test Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: alexbuckley(a)catalyst.net.nz QA Contact: testopia(a)bugs.koha-community.org -- You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 13779] sessionID declared twice in C4::Auth::checkauth()
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '18

07 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13779 Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=21325 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13779] sessionID declared twice in C4::Auth::checkauth()
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '18

07 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13779 --- Comment #8 from Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> --- Created attachment 78528 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=78528&action=ed… Bug 13779: (QA follow-up) Correct checkauth call in offline_circ/download.pl Script offline_circ/download.pl does not use the return values of checkauth. So should not assign them to bad chosen variables that do not correspond with checkauth but with get_template_and_user. Test plan: Look for $template, $loggedinuser, $cookie, $flags in the code. Signed-off-by: Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13779] sessionID declared twice in C4::Auth::checkauth()
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '18

07 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13779 Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #78452|0 |1 is obsolete| | --- Comment #7 from Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> --- Created attachment 78527 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=78527&action=ed… Bug 13779: sessionID declared twice in C4::Auth::checkauth() The bug is that $sessionID is declared twice in C4::Auth::checkauth(). At the moment, this doesn't actually create a problem, because no one seems to be using the $sessionID which is returned by checkauth(), except in the case of opac/external/overdrive/auth.pl which skips the second declartion as it doesn't require auth. This patch removes the redefining of the $sessionID variable. In terms of testing, try logging in with a username and password and see if it works. The only risk this patch would pose is breaking auth I would think, since nothing is actually using the return value from checkauth() for $sessionID. NOTE: It was initially defined near the top of the function (~line 791). I believe the scoping would mean the correct version of $sessionID would be used in the latter lines for the unset'ing. I have skimmed code to see if the sessionID return value is used. I did not test overdrive, as I do not know how. However, this is the only area, I think this could possibly break. This change makes sense to me. QA: Please test overdrive. opac/external/overdrive/auth.pl only checks if the value is set, so this patch might fix/break something there? opac/svc/overdrive same kind of check. Signed-off-by: Mark Tompsett <mtompset(a)hotmail.com> Signed-off-by: Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> This is a (tiny) code improvement. Now we consistently return the session id that is also stored in the returned cookie. (Which can be an 'anon' session.) Fact is that Koha almost everywhere ignores the returned session id and sometimes gets the session from the cookie (obviously). The session id is also passed to the template by get_template_and_user but never used in templates. As mentioned, the two overdrive scripts are the exception. But since both test on both $user && $sessionID, they will not choke on an anynonomous session id without userid. So theoretically fine, but not tested. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13779] sessionID declared twice in C4::Auth::checkauth()
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '18

07 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13779 Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Patch complexity|--- |Small patch Status|BLOCKED |Passed QA -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14364] Allow automatically canceled expired waiting holds to fill the next hold
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '18

07 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14364 Michal Denar <black23(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |black23(a)gmail.com -- You are receiving this mail because: You are watching all bug changes.

1 0