Bug 25898: Prohibit indirect object notation
[koha.git] / opac / sco / help.pl
blob22fb99a2d09de651e8b60ad229f3fadf5e2ffbde
1 #!/usr/bin/perl
3 # This code (originally from circulation.pl) has been modified by:
4 # Trendsetters,
5 # dan, and
6 # Christina Lee.
8 # This file is part of Koha.
10 # Koha is free software; you can redistribute it and/or modify it
11 # under the terms of the GNU General Public License as published by
12 # the Free Software Foundation; either version 3 of the License, or
13 # (at your option) any later version.
15 # Koha is distributed in the hope that it will be useful, but
16 # WITHOUT ANY WARRANTY; without even the implied warranty of
17 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 # GNU General Public License for more details.
20 # You should have received a copy of the GNU General Public License
21 # along with Koha; if not, see <http://www.gnu.org/licenses>.
24 use Modern::Perl;
25 use CGI qw ( -utf8 );
27 use C4::Auth qw(get_template_and_user in_iprange);
28 use C4::Output qw(output_html_with_http_headers);
30 my $query = CGI->new;
31 unless ( in_iprange(C4::Context->preference('SelfCheckAllowByIPRanges')) ) {
32 print $query->redirect("/cgi-bin/koha/opac-main.pl");
33 exit;
36 my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
38 template_name => "sco/help.tt",
39 query => $query,
40 type => "opac",
41 debug => 1,
42 authnotrequired => 1,
43 flagsrequired => { self_check => "self_checkout_module" },
47 if (C4::Context->preference('SelfCheckoutByLogin')) {
48 $template->param(SelfCheckoutByLogin => 1);
50 my $selfchecktimeout = 120;
51 if (C4::Context->preference('SelfCheckTimeout')) {
52 $selfchecktimeout = C4::Context->preference('SelfCheckTimeout');
55 $template->param(SelfCheckTimeout => $selfchecktimeout);
57 if (C4::Context->preference('SelfCheckHelpMessage')) {
58 $template->param(SelfCheckHelpMessage => C4::Context->preference('SelfCheckHelpMessage'));
61 $template->param(
62 SCOUserJS => C4::Context->preference('SCOUserJS'),
63 SCOUserCSS => C4::Context->preference('SCOUserCSS'),
66 output_html_with_http_headers $query, $cookie, $template->output;