Bug 25898: Prohibit indirect object notation
[koha.git] / reserve / modrequest.pl
blobb2d138378a6b0d3cf96e1d859b2c55f81d2e5790
1 #!/usr/bin/perl
3 #script to modify reserves/requests
4 #written 2/1/00 by chris@katipo.oc.nz
5 #last update 27/1/2000 by chris@katipo.co.nz
8 # Copyright 2000-2002 Katipo Communications
10 # This file is part of Koha.
12 # Koha is free software; you can redistribute it and/or modify it
13 # under the terms of the GNU General Public License as published by
14 # the Free Software Foundation; either version 3 of the License, or
15 # (at your option) any later version.
17 # Koha is distributed in the hope that it will be useful, but
18 # WITHOUT ANY WARRANTY; without even the implied warranty of
19 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 # GNU General Public License for more details.
22 # You should have received a copy of the GNU General Public License
23 # along with Koha; if not, see <http://www.gnu.org/licenses>.
25 use Modern::Perl;
26 use CGI qw ( -utf8 );
27 use List::MoreUtils qw( uniq );
28 use C4::Output;
29 use C4::Reserves;
30 use C4::Auth;
31 use Koha::DateUtils qw( dt_from_string );
33 my $query = CGI->new;
34 my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
36 template_name => "about.tt",
37 query => $query,
38 type => "intranet",
39 flagsrequired => { catalogue => 1 },
40 debug => 1,
44 my @reserve_id = $query->multi_param('reserve_id');
45 my @rank = $query->multi_param('rank-request');
46 my @borrower = $query->multi_param('borrowernumber');
47 my @reservedates = $query->multi_param('reservedate');
48 my @expirationdates = $query->multi_param('expirationdate');
49 my @branch = $query->multi_param('pickup');
50 my @itemnumber = $query->multi_param('itemnumber');
51 my @biblionumber = $query->multi_param('biblionumber');
52 my $count=@rank;
54 @biblionumber = uniq @biblionumber;
56 my $CancelBiblioNumber = $query->param('CancelBiblioNumber');
57 my $CancelBorrowerNumber = $query->param('CancelBorrowerNumber');
58 my $CancelItemnumber = $query->param('CancelItemnumber');
60 # 2 possibilitys : cancel an item reservation, or modify or cancel the queded list
62 # 1) cancel an item reservation by function ModReserveCancelAll (in reserves.pm)
63 if ($CancelBorrowerNumber) {
64 ModReserveCancelAll($CancelItemnumber, $CancelBorrowerNumber);
65 $biblionumber[0] = $CancelBiblioNumber,
68 # 2) Cancel or modify the queue list of reserves (without item linked)
69 else {
70 for (my $i=0;$i<$count;$i++){
71 undef $itemnumber[$i] if !$itemnumber[$i];
72 my $suspend_until = $query->param( "suspend_until_" . $reserve_id[$i] );
73 my $cancellation_reason = $query->param("cancellation-reason");
74 my $params = {
75 rank => $rank[$i],
76 reserve_id => $reserve_id[$i],
77 expirationdate => $expirationdates[$i] ? dt_from_string($expirationdates[$i]) : undef,
78 branchcode => $branch[$i],
79 itemnumber => $itemnumber[$i],
80 defined $suspend_until ? ( suspend_until => $suspend_until ) : (),
81 cancellation_reason => $cancellation_reason,
83 if (C4::Context->preference('AllowHoldDateInFuture')) {
84 $params->{reservedate} = $reservedates[$i] ? dt_from_string($reservedates[$i]) : undef;
87 ModReserve($params);
91 my $from=$query->param('from');
92 $from ||= q{};
93 if ( $from eq 'borrower'){
94 print $query->redirect("/cgi-bin/koha/members/moremember.pl?borrowernumber=$borrower[0]");
95 } elsif ( $from eq 'circ'){
96 print $query->redirect("/cgi-bin/koha/circ/circulation.pl?borrowernumber=$borrower[0]");
97 } else {
98 my $url = "/cgi-bin/koha/reserve/request.pl?";
99 $url .= "biblionumbers=" . join('/', @biblionumber);
100 print $query->redirect($url);