http://bugs.koha.org/cgi-bin/bugzilla3/show_bug.cgi?id=4221 Ian Walls <ian.walls@bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ian.walls@bywatersolutions.c | |om --- Comment #1 from Ian Walls <ian.walls@bywatersolutions.com> 2010-04-07 15:59:59 --- For the staff client, all four values (defaultSortField, defaultSortOrder, OPACdefaultSortField and OPACdefaultSortOrder) need to be explicitly set. Upon first installation, they are NULL, which prevents them from being respected in the staff client. The dependence on OPACdefaultSortField and OPACdefaultSortOrder is erroneous and will be patched. For the OPAC, only the OPACdefaultSort* values must both be set. However, there is a security hole whereby anyone can activate any named TMPL_VAR in opac-results.tmpl by adding "&sort_by=TMPL_VAR" (try &sort_by=koha_spsuggest in any search for an example). -- Configure bugmail: http://bugs.koha.org/cgi-bin/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.