Bug 19612: Fix XSS in members/memberentry.pl

[koha.git] / circ / hold-transfer-slip.pl

diff --git a/circ/hold-transfer-slip.pl b/circ/hold-transfer-slip.pl
index 8ae5d2a..bd09e21 100755 (executable)
--- a/circ/hold-transfer-slip.pl
+++ b/circ/hold-transfer-slip.pl
@@ -5,24 +5,24 @@
 #
 # This file is part of Koha.
 #
-# Koha is free software; you can redistribute it and/or modify it under the
-# terms of the GNU General Public License as published by the Free Software
-# Foundation; either version 2 of the License, or (at your option) any later
-# version.
+# Koha is free software; you can redistribute it and/or modify it
+# under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 3 of the License, or
+# (at your option) any later version.
 #
-# Koha is distributed in the hope that it will be useful, but WITHOUT ANY
-# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
-# A PARTICULAR PURPOSE.  See the GNU General Public License for more details.
+# Koha is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
 #
-# You should have received a copy of the GNU General Public License along
-# with Koha; if not, write to the Free Software Foundation, Inc.,
-# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+# You should have received a copy of the GNU General Public License
+# along with Koha; if not, see <http://www.gnu.org/licenses>.
 
 use strict;
 #use warnings; FIXME - Bug 2505
 use C4::Context;
 use C4::Output;
-use CGI;
+use CGI qw ( -utf8 );
 use C4::Auth qw/:DEFAULT get_session/;
 use C4::Reserves;
 
@@ -38,11 +38,10 @@ my $session = get_session($sessionID);
 
 my $biblionumber = $input->param('biblionumber');
 my $borrowernumber = $input->param('borrowernumber');
-my $transfer = $input->param('transfer');
 
 my ( $template, $loggedinuser, $cookie ) = get_template_and_user(
     {   
-        template_name   => "circ/printslip.tmpl",
+        template_name   => "circ/printslip.tt",
         query           => $input,
         type            => "intranet",
         authnotrequired => 0,
@@ -57,18 +56,9 @@ if ( my $letter = ReserveSlip ($session->param('branch') || $userenv->{branch},
     $slip = $letter->{content};
     $is_html = $letter->{is_html};
 }
-else {
-    $slip = "Reserve not found";
-}
-$template->param(
-    slip => $slip,
-    plain => !$is_html,
-    title => "Koha -- Circulation: Transfers",
-    stylesheet => C4::Context->preference("SlipCSS"),
-);
+$template->param( slip => $slip ) if ($slip);
+$template->param( caller => 'hold-transfer' );
+$template->param( plain => !$is_html );
 
 output_html_with_http_headers $input, $cookie, $template->output;
 
-
-
-