Bug 25898: Prohibit indirect object notation
[koha.git] / members / update-child.pl
blob0789ea553f08b4263b1b61fe0690e9407f6f2c5a
1 #!/usr/bin/perl
3 # Copyright 2000-2002 Katipo Communications
5 # This file is part of Koha.
7 # Koha is free software; you can redistribute it and/or modify it
8 # under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 3 of the License, or
10 # (at your option) any later version.
12 # Koha is distributed in the hope that it will be useful, but
13 # WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with Koha; if not, see <http://www.gnu.org/licenses>.
20 =head1 updatechild.pl
22 script to update a child member to (usually) an adult member category
24 - if called with op=multi, will return all available non child categories, for selection.
25 - if called with op=update, script will update member record via Koha::Patron->store.
27 =cut
29 use Modern::Perl;
30 use CGI qw ( -utf8 );
31 use C4::Context;
32 use C4::Auth;
33 use C4::Output;
34 use Koha::Patrons;
35 use Koha::Patron::Categories;
36 use Koha::Patrons;
38 # use Smart::Comments;
40 my $dbh = C4::Context->dbh;
41 my $input = CGI->new;
43 my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
45 template_name => "members/update-child.tt",
46 query => $input,
47 type => "intranet",
48 flagsrequired => { borrowers => 'edit_borrowers' },
49 debug => 1,
53 my $borrowernumber = $input->param('borrowernumber');
54 my $catcode = $input->param('catcode');
55 my $cattype = $input->param('cattype');
56 my $op = $input->param('op');
58 my $logged_in_user = Koha::Patrons->find( $loggedinuser );
60 my $patron_categories = Koha::Patron::Categories->search_limited({ category_type => 'A' }, {order_by => ['categorycode']});
61 if ( $op eq 'multi' ) {
62 # FIXME - what are the possible upgrade paths? C -> A , C -> S ...
63 # currently just allowing C -> A
64 $template->param(
65 MULTI => 1,
66 borrowernumber => $borrowernumber,
67 patron_categories => $patron_categories,
69 output_html_with_http_headers $input, $cookie, $template->output;
71 elsif ( $op eq 'update' ) {
72 my $patron = Koha::Patrons->find( $borrowernumber );
73 output_and_exit_if_error( $input, $cookie, $template, { module => 'members', logged_in_user => $logged_in_user, current_patron => $patron } );
75 my $adult_category;
76 if ( $patron_categories->count == 1 ) {
77 $adult_category = $patron_categories->next;
78 } else {
79 $adult_category = $patron_categories->search({'me.categorycode' => $catcode })->next;
82 # Just in case someone is trying something bad
83 # But we should not hit that with a normal use of the interface
84 die "You are doing something wrong updating this child" unless $adult_category;
86 $_->delete() for $patron->guarantor_relationships();
88 $patron->categorycode($adult_category->categorycode);
89 $patron->store;
91 # FIXME We should not need that
92 # We could redirect with a friendly message
93 if ( $patron_categories->count > 1 ) {
94 $template->param(
95 SUCCESS => 1,
96 borrowernumber => $borrowernumber,
98 output_html_with_http_headers $input, $cookie, $template->output;
100 else {
101 print $input->redirect(
102 "/cgi-bin/koha/members/moremember.pl?borrowernumber=$borrowernumber"