Bug 25898: Prohibit indirect object notation
[koha.git] / opac / opac-showmarc.pl
bloba30e3e5fdd9013a61325a476032df2c53deab754
1 #!/usr/bin/perl
3 # Copyright 2007 Liblime
5 # This file is part of Koha.
7 # Koha is free software; you can redistribute it and/or modify it
8 # under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 3 of the License, or
10 # (at your option) any later version.
12 # Koha is distributed in the hope that it will be useful, but
13 # WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with Koha; if not, see <http://www.gnu.org/licenses>.
20 use Modern::Perl;
22 # standard or CPAN modules used
23 use CGI qw ( -utf8 );
24 use Encode;
26 # Koha modules used
27 use C4::Context;
28 use C4::Output;
29 use C4::Auth;
30 use C4::Biblio;
31 use C4::ImportBatch;
32 use C4::XSLT ();
33 use C4::Templates;
34 use Koha::RecordProcessor;
36 my $input = CGI->new;
37 my ( $template, $loggedinuser, $cookie ) = get_template_and_user({
38 template_name => "opac-showmarc.tt",
39 query => $input,
40 type => "opac",
41 authnotrequired => ( C4::Context->preference("OpacPublic") ? 1 : 0 ),
42 debug => 1,
43 });
45 my $biblionumber = $input->param('id');
47 unless ( $biblionumber ) {
48 print $input->redirect("/cgi-bin/koha/errors/400.pl");
49 exit;
52 my $biblio;
53 $biblio = Koha::Biblios->find( $biblionumber, { prefetch => [ 'metadata' ] } );
55 unless ( $biblio ) {
56 print $input->redirect('/cgi-bin/koha/errors/404.pl');
57 exit;
60 my $view= $input->param('viewas') || 'marc';
62 my $record_processor = Koha::RecordProcessor->new(
64 filters => 'ViewPolicy',
65 options => {
66 interface => 'opac',
67 frameworkcode => $biblio->frameworkcode
72 my $record = $biblio->metadata->record;
74 if(!ref $record) {
75 print $input->redirect("/cgi-bin/koha/errors/404.pl");
76 exit;
79 $record_processor->process($record);
81 if ($view eq 'card' || $view eq 'html') {
82 my $xml = $record->as_xml;
83 my $xsl = $view eq 'card' ? 'compact.xsl' : 'plainMARC.xsl';
84 my $htdocs = C4::Context->config('opachtdocs');
85 my ($theme, $lang) = C4::Templates::themelanguage($htdocs, $xsl, 'opac', $input);
86 $xsl = "$htdocs/$theme/$lang/xslt/$xsl";
87 output_html_with_http_headers $input, undef, Encode::encode_utf8(C4::XSLT::engine->transform($xml, $xsl));
89 else { #view eq marc
90 $template->param( MARC_FORMATTED => $record->as_formatted );
91 output_html_with_http_headers $input, $cookie, $template->output;