Revert "Bug 17902: Fix possible SQL injection in serials editing"
[koha.git] / catalogue / showmarc.pl
bloba48a85260bf250d09981302392ac3ed32d311cd4
1 #!/usr/bin/perl
3 # Koha library project www.koha-community.org
5 # Copyright 2007 Liblime
6 # Parts copyright 2010 BibLibre
8 # This file is part of Koha.
10 # Koha is free software; you can redistribute it and/or modify it under the
11 # terms of the GNU General Public License as published by the Free Software
12 # Foundation; either version 3 of the License, or (at your option) any later
13 # version.
15 # Koha is distributed in the hope that it will be useful, but WITHOUT ANY
16 # WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
17 # A PARTICULAR PURPOSE. See the GNU General Public License for more details.
19 # You should have received a copy of the GNU General Public License along
20 # with Koha; if not, write to the Free Software Foundation, Inc.,
21 # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
23 use strict;
24 use warnings;
26 # standard or CPAN modules used
27 use CGI qw(:standard -utf8);
28 use DBI;
29 use Encode;
31 # Koha modules used
32 use C4::Context;
33 use C4::Output;
34 use C4::Auth;
35 use C4::Biblio;
36 use C4::ImportBatch;
37 use C4::XSLT ();
39 my $input= new CGI;
40 my $biblionumber= $input->param('id');
41 my $importid= $input->param('importid');
42 my $view= $input->param('viewas')||'';
44 my $record;
45 if ($importid) {
46 $record = C4::ImportBatch::GetRecordFromImportBiblio( $importid, 'embed_items' );
48 else {
49 $record =GetMarcBiblio($biblionumber);
51 if(!ref $record) {
52 print $input->redirect("/cgi-bin/koha/errors/404.pl");
53 exit;
56 if($view eq 'card' || $view eq 'html') {
57 my $xml = $importid ? $record->as_xml(): GetXmlBiblio($biblionumber);
58 my $xsl;
59 if ( $view eq 'card' ){
60 $xsl = C4::Context->preference('marcflavour') eq 'UNIMARC'
61 ? 'UNIMARC_compact.xsl' : 'compact.xsl';
63 else {
64 $xsl = 'plainMARC.xsl';
66 my $htdocs = C4::Context->config('intrahtdocs');
67 my ($theme, $lang) = C4::Templates::themelanguage($htdocs, $xsl, 'intranet', $input);
68 $xsl = "$htdocs/$theme/$lang/xslt/$xsl";
69 print $input->header(-charset => 'UTF-8'),
70 Encode::encode_utf8(C4::XSLT::engine->transform($xml, $xsl));
72 else {
73 my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
75 template_name => "catalogue/showmarc.tt",
76 query => $input,
77 type => "intranet",
78 authnotrequired => 0,
79 flagsrequired => { catalogue => 1 },
80 debug => 1,
83 $template->param( MARC_FORMATTED => $record->as_formatted );
84 output_html_with_http_headers $input, $cookie, $template->output;