CSRF: Fix OPAC

PTFS-Europe · Mar 7, 2024 · 6a37ce0 · 6a37ce0
1 parent c34be16
commit 6a37ce0
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/opac-includes/create.inc b/opac-includes/create.inc
@@ -17,6 +17,7 @@
 [% IF whole.stage == "form" %]
 <h2>Create a manual ILL request</h2>
 <form id="create_form" method="POST" action=[% here %]>
+  [% INCLUDE 'csrf-token.inc' %]
   <fieldset class="rows">
     <legend>General details</legend>
     <ol id="general-freeform-fields">
@@ -106,7 +107,7 @@
     <input id="ill-submit" class="btn btn-default" type="submit" value="Create"/>
     <a class="cancel" href="/cgi-bin/koha/opac-illrequests.pl">Cancel</a>
   </fieldset>
-  <input type="hidden" name="method" value="create" />
+  <input type="hidden" name="op" value="cud-create" />
   <input type="hidden" name="stage" value="form" />
   <input type="hidden" name="backend" value="FreeForm" />
 </form>