Revert "Bug 17902: Fix possible SQL injection in serials editing"
[koha.git] / serials / acqui-search-result.pl
blobc159d294e89b19db401eff615fd2521b930b76c4
1 #!/usr/bin/perl
3 #script to show suppliers and orders
4 #written by chris@katipo.co.nz 23/2/2000
6 # Copyright 2000-2002 Katipo Communications
8 # This file is part of Koha.
10 # Koha is free software; you can redistribute it and/or modify it
11 # under the terms of the GNU General Public License as published by
12 # the Free Software Foundation; either version 3 of the License, or
13 # (at your option) any later version.
15 # Koha is distributed in the hope that it will be useful, but
16 # WITHOUT ANY WARRANTY; without even the implied warranty of
17 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 # GNU General Public License for more details.
20 # You should have received a copy of the GNU General Public License
21 # along with Koha; if not, see <http://www.gnu.org/licenses>.
24 =head1 NAME
26 acqui-search-result.pl
28 =head1 DESCRIPTION
30 TODO
32 =head1 PARAMETERS
34 =over 4
36 =item supplier
38 =back
40 =cut
43 use strict;
44 use warnings;
45 use C4::Auth;
46 use C4::Biblio;
47 use C4::Output;
48 use CGI qw ( -utf8 );
49 use C4::Acquisition qw( SearchOrders );
50 use Koha::DateUtils;
52 use Koha::Acquisition::Booksellers;
54 my $query=new CGI;
55 my ($template, $loggedinuser, $cookie)
56 = get_template_and_user({template_name => "serials/acqui-search-result.tt",
57 query => $query,
58 type => "intranet",
59 authnotrequired => 0,
60 flagsrequired => {serials => '*'},
61 debug => 1,
62 });
64 my $supplier=$query->param('supplier');
65 my @suppliers = Koha::Acquisition::Booksellers->search({ name => $supplier });
67 #build result page
68 my $loop_suppliers = [];
69 for my $s (@suppliers) {
70 my $orders = SearchOrders({
71 booksellerid => $s->id,
72 pending => 1
73 });
75 my $loop_basket = [];
76 for my $ord ( @{$orders} ) {
77 push @{$loop_basket}, {
78 basketno => $ord->{'basketno'},
79 total => $ord->{'count(*)'},
80 authorisedby => $ord->{'authorisedby'},
81 creationdate => output_pref( { str => $ord->{'creationdate'} } ),
82 closedate => output_pref( { str => $ord->{'closedate'} } ),
85 push @{$loop_suppliers}, {
86 loop_basket => $loop_basket,
87 aqbooksellerid => $s->id,
88 name => $s->name,
89 active => $s->active,
93 $template->param(loop_suppliers => $loop_suppliers,
94 supplier => $supplier,
95 count => scalar @suppliers);
97 output_html_with_http_headers $query, $cookie, $template->output;