Bug 25898: Prohibit indirect object notation
[koha.git] / circ / hold-transfer-slip.pl
blobc0a3b6ea4cce0ce12d0495b174725b8c37c781d6
1 #!/usr/bin/perl
4 # Copyright 2008 LibLime
6 # This file is part of Koha.
8 # Koha is free software; you can redistribute it and/or modify it
9 # under the terms of the GNU General Public License as published by
10 # the Free Software Foundation; either version 3 of the License, or
11 # (at your option) any later version.
13 # Koha is distributed in the hope that it will be useful, but
14 # WITHOUT ANY WARRANTY; without even the implied warranty of
15 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 # GNU General Public License for more details.
18 # You should have received a copy of the GNU General Public License
19 # along with Koha; if not, see <http://www.gnu.org/licenses>.
21 use Modern::Perl;
22 use C4::Context;
23 use C4::Output;
24 use CGI qw ( -utf8 );
25 use C4::Auth qw/:DEFAULT get_session/;
26 use C4::Reserves;
28 use vars qw($debug);
30 BEGIN {
31 $debug = $ENV{DEBUG} || 0;
34 my $input = CGI->new;
35 my $sessionID = $input->cookie("CGISESSID");
36 my $session = get_session($sessionID);
38 my $reserve_id = $input->param('reserve_id');
40 my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
42 template_name => "circ/printslip.tt",
43 query => $input,
44 type => "intranet",
45 flagsrequired => { circulate => "circulate_remaining_permissions" },
46 debug => $debug,
50 my $userenv = C4::Context->userenv;
51 my ($slip, $is_html);
52 if ( my $letter = ReserveSlip ({
53 branchcode => $session->param('branch') || $userenv->{branch},
54 reserve_id => $reserve_id,
55 }) ) {
56 $slip = $letter->{content};
57 $is_html = $letter->{is_html};
59 $template->param( slip => $slip ) if ($slip);
60 $template->param( caller => 'hold-transfer' );
61 $template->param( plain => !$is_html );
63 output_html_with_http_headers $input, $cookie, $template->output;