[Koha-cvs] koha/C4/Circulation Fines.pm

Bruno Toumi btoumi at ouestprovence.fr
Thu Apr 5 16:08:17 CEST 2007


CVSROOT:	/cvsroot/koha
Module name:	koha
Changes by:	Bruno Toumi <btoumi>	07/04/05 14:08:17

Modified files:
	C4/Circulation : Fines.pm 

Log message:
	bug fix : add security in check of notify_id

CVSWeb URLs:
http://cvs.savannah.gnu.org/viewcvs/koha/C4/Circulation/Fines.pm?cvsroot=koha&r1=1.24&r2=1.25

Patches:
Index: Fines.pm
===================================================================
RCS file: /cvsroot/koha/koha/C4/Circulation/Fines.pm,v
retrieving revision 1.24
retrieving revision 1.25
diff -u -b -r1.24 -r1.25
--- Fines.pm	4 Apr 2007 16:46:22 -0000	1.24
+++ Fines.pm	5 Apr 2007 14:08:17 -0000	1.25
@@ -1,6 +1,6 @@
 package C4::Circulation::Fines;
 
-# $Id: Fines.pm,v 1.24 2007/04/04 16:46:22 tipaul Exp $
+# $Id: Fines.pm,v 1.25 2007/04/05 14:08:17 btoumi Exp $
 
 # Copyright 2000-2002 Katipo Communications
 #
@@ -29,7 +29,7 @@
 use C4::Log; # logaction
 
 # set the version for version checking
-$VERSION = do { my @v = '$Revision: 1.24 $' =~ /\d+/g; 
+$VERSION = do { my @v = '$Revision: 1.25 $' =~ /\d+/g; 
 shift(@v) . "." . join("_", map {sprintf "%03d", $_ } @v); };
 
 =head1 NAME
@@ -658,7 +658,8 @@
     my $env;
     my $query=qq|    SELECT distinct(notify_id)
             FROM accountlines
-            WHERE borrowernumber=?|;
+            WHERE borrowernumber=?
+	    AND notify_id != 0|;
     my @notify;
     my $sth=$dbh->prepare($query);
         $sth->execute($borrowernumber);





More information about the Koha-cvs mailing list