https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38325

            Bug ID: 38325
           Summary: Cannot delete invoice while viewing it
 Change sponsored?: ---
           Product: Koha
           Version: Main
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P5 - low
         Component: Acquisitions
          Assignee: koha-bugs@lists.koha-community.org
          Reporter: p...@chetcolibrary.org
        QA Contact: testo...@bugs.koha-community.org
            Blocks: 36192

In the list of invoices in invoices.pl, an invoice that can be deleted (because
nothing has ever been received into it) has a Delete action that uses
submit-form-link and works with CSRF protection.

In invoice.pl where you are viewing an individual invoice, the Delete link
still thinks that invoice.pl?op=delete will work, which it won't.


Referenced Bugs:

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36192
[Bug 36192] [OMNIBUS] CSRF Protection for Koha
-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.
_______________________________________________
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to