The template used to show the Z39.50 server administration page had a bug
that caused it to not correctly escape generated query strings. Because
the Z39.50 server name is used to lookup the server in order to edit or delete
it, when the server name is not passed correctly in the query string, it is
impossible to bring up the edit or delete forms (without manually entering
the escaped string.)

This patch corrects which template is filter used to escape those query strings.

To test:
(1) Login to intranet, go to Administration -> Z39.50 servers
(2) Select "New Z3.50 Server". Enter a server name that contains an ampersand 
(&)
    e.g.: "FOO & BAR". Enter other details and submit. Click OK to confirmation 
message.
(3) In the server list, click on the server name, the "Edit" or "Delete" buttons
    for the server.

The correct and full server details should be brought up.
---
 koha-tmpl/intranet-tmpl/prog/en/modules/admin/z3950servers.tt |    4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/z3950servers.tt 
b/koha-tmpl/intranet-tmpl/prog/en/modules/admin/z3950servers.tt
index 6e9a1ff..bfee594 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/z3950servers.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/admin/z3950servers.tt
@@ -285,9 +285,9 @@
                 [% ELSE %]
                     <tr>
                 [% END %]
-<td><a href="[% loo.script_name %]?op=add_form&amp;searchfield=[% loo.name 
|url %]">[% loo.name %]</a></td><td>[% loo.host %]:[% loo.port %]</td><td>[% 
loo.db %]</td><td>[% loo.userid %]</td><td>[% loo.password %]</td><td>[% IF ( 
loo.checked ) %]Yes[% ELSE %]No[% END %]</td><td>[% loo.rank %]</td>
+<td><a href="[% loo.script_name %]?op=add_form&amp;searchfield=[% loo.name 
|uri %]">[% loo.name %]</a></td><td>[% loo.host %]:[% loo.port %]</td><td>[% 
loo.db %]</td><td>[% loo.userid %]</td><td>[% loo.password %]</td><td>[% IF ( 
loo.checked ) %]Yes[% ELSE %]No[% END %]</td><td>[% loo.rank %]</td>
 
-<td>[% loo.syntax %]</td><td>[% loo.encoding %]</td><td>[% loo.timeout 
%]</td><td>[% loo.recordtype %]</td><td><a href="[% loo.script_name 
%]?op=add_form&amp;searchfield=[% loo.name |url %]">Edit</a></td><td><a 
href="[% loo.script_name %]?op=delete_confirm&amp;searchfield=[% loo.name |url 
%]">Delete</a></td>                </tr>
+<td>[% loo.syntax %]</td><td>[% loo.encoding %]</td><td>[% loo.timeout 
%]</td><td>[% loo.recordtype %]</td><td><a href="[% loo.script_name 
%]?op=add_form&amp;searchfield=[% loo.name |uri %]">Edit</a></td><td><a 
href="[% loo.script_name %]?op=delete_confirm&amp;searchfield=[% loo.name |uri 
%]">Delete</a></td>                </tr>
                 [% END %]</tbody>
 </table>
 
-- 
1.7.10.4

_______________________________________________
Koha-patches mailing list
Koha-patches@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-patches
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to