Bug 14423 : XSS issues in marc_subfields_structure
[koha.git] / serials / create-numberpattern.pl
blobf2c6d492c542a7f7245b7b088768909415f3d792
1 #!/usr/bin/perl
3 # Copyright 2011-2013 Biblibre SARL
5 # This file is part of Koha.
7 # Koha is free software; you can redistribute it and/or modify it
8 # under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 3 of the License, or
10 # (at your option) any later version.
12 # Koha is distributed in the hope that it will be useful, but
13 # WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with Koha; if not, see <http://www.gnu.org/licenses>.
20 use Modern::Perl;
21 use CGI;
22 use C4::Context;
23 use C4::Serials::Numberpattern;
24 use C4::Auth qw/check_cookie_auth/;
25 use URI::Escape;
27 my $input = new CGI;
29 my ($auth_status, $sessionID) = check_cookie_auth($input->cookie('CGISESSID'), { serials => '*' });
30 if ($auth_status ne "ok") {
31 print $input->header(-type => 'text/plain', -status => '403 Forbidden');
32 exit 0;
35 my $numberpattern;
36 foreach (qw/ numberingmethod label1 label2 label3 add1 add2 add3
37 every1 every2 every3 setto1 setto2 setto3 whenmorethan1 whenmorethan2
38 whenmorethan3 numbering1 numbering2 numbering3 locale /) {
39 $numberpattern->{$_} = $input->param($_);
41 # patternname is label in database
42 $numberpattern->{'label'} = $input->param('patternname');
44 # Check if pattern already exist in database
45 my $dbh = C4::Context->dbh;
46 my $query = qq{
47 SELECT id
48 FROM subscription_numberpatterns
49 WHERE STRCMP(label, ?) = 0
51 my $sth = $dbh->prepare($query);
52 my $rv = $sth->execute($numberpattern->{'label'});
53 my $numberpatternid;
54 if($rv == 0) {
55 # Pattern does not exists
56 $numberpatternid = AddSubscriptionNumberpattern($numberpattern);
57 } else {
58 ($numberpatternid) = $sth->fetchrow_array;
59 $numberpattern->{'id'} = $numberpatternid;
60 ModSubscriptionNumberpattern($numberpattern);
63 binmode STDOUT, ":encoding(UTF-8)";
64 print $input->header(-type => 'text/plain', -charset => 'UTF-8');
65 print "{\"numberpatternid\":\"$numberpatternid\"}";