Bug 19086 Stored XSS in subscription-add.pl
[koha.git] / svc / hold / resume
blobca7eec22b95efd5148d511e7aedc0daf42285cbe
1 #!/usr/bin/perl
3 # Copyright 2015 ByWater Solutions
5 # This file is part of Koha.
7 # Koha is free software; you can redistribute it and/or modify it under the
8 # terms of the GNU General Public License as published by the Free Software
9 # Foundation; either version 3 of the License, or (at your option) any later
10 # version.
12 # Koha is distributed in the hope that it will be useful, but WITHOUT ANY
13 # WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
14 # A PARTICULAR PURPOSE. See the GNU General Public License for more details.
16 # You should have received a copy of the GNU General Public License along
17 # with Koha; if not, write to the Free Software Foundation, Inc.,
18 # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
20 use Modern::Perl;
22 use CGI;
23 use JSON qw(to_json);
25 use C4::Context;
26 use C4::Output qw(output_with_http_headers);
27 use C4::Auth qw(check_cookie_auth);
28 use Koha::DateUtils qw(dt_from_string);
29 use Koha::Holds;
31 my $input = new CGI;
33 my ( $auth_status, $sessionID ) =
34 check_cookie_auth( $input->cookie('CGISESSID'), { circulate => 'circulate_remaining_permissions' } );
36 if ( $auth_status ne "ok" ) {
37 print $input->header(-type => 'text/plain', -status => '403 Forbidden');
38 exit 0;
41 my $reserve_id = $input->param('reserve_id');
43 my $hold = Koha::Holds->find( $reserve_id );
45 unless ( $hold ) {
46 my $json = to_json( { success => 0, error => "HOLD_NOT_FOUND" } );
47 output_with_http_headers( $input, undef, $json, "json" );
48 exit;
51 $hold->resume();
53 my $json = to_json( { success => !$hold->suspend() } );
54 output_with_http_headers( $input, undef, $json, "json" );