Skip to content
This repository

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP

Nov 28, 2011

  1. Clay Fouts

    [#21464023] (followup) Security: arbitrary file inclusion

    ctfliblime authored

Nov 25, 2011

  1. Clay Fouts

    [#21464023] Security: arbitrary file inclusion

    Poor input cleansing can allow a well-constructed cookie
    to return the contents of arbitrary file system objects.
    ctfliblime authored

Sep 30, 2011

  1. Clay Fouts

    Merge pull request #184 from hgq/15_05_pt18095857_1_02

    15 05 pt18095857 1 02
    ctfliblime authored
  2. Clay Fouts

    Merge pull request #163 from dlbptfs/summary_info_01-02

    Summary info 01 02
    ctfliblime authored

Sep 14, 2011

  1. hgq

    LLK 1.2 PT#18095857 accountno is dependent on borrowernumber

    hgq authored

Aug 30, 2011

  1. dlbptfs

    SIP2 modifications for 1.2

    Patron summary info was still sending back HASH values rather than item
    barcodes.  The renew all response was also adjusted to indicate correctly
    whether a specific item was renewed or not.
    dlbptfs authored

Jul 20, 2011

  1. Clay Fouts

    Merge pull request #72 from dlbptfs/MTPL_SIP_01_02

    Mtpl sip 01 02
    ctfliblime authored
  2. dlbptfs

    Change order of variable fields in Patron Info Response (64)

    While SIP2 specifies that variable fields can appear in any order.
    A broken client requires that institution ID is first in the
    Patron Info Response.
    
    Patch modified and ported from Colin Campbell <colin.campbell@ptfs-europe.com>
    dlbptfs authored

Jul 15, 2011

  1. Clay Fouts

    Merge pull request #60 from dlbptfs/PT15166543

    Pt15166543
    ctfliblime authored

Jul 14, 2011

  1. dlbptfs

    PT15166543: Modification of SIP patron information response message (64)

    A new <options> tag has been accounted for in SIPconfig.xml.  Specifically
    the field ok_patron_pin has been coded for which, when set to 1, will result
    in the patron PIN validation response to always be set to yes (i.e. |CQY|).
    dlbptfs authored

Jul 13, 2011

  1. Clay Fouts

    PT 10325405: Correct the indexing for biblioitemnumber

    ctfliblime authored

Jul 12, 2011

  1. Clay Fouts

    [delivers #15667847] Add displayexpired column to reserves_suspended …

    …table
    
    Also delete vestigial 'lowestPriority' column.
    ctfliblime authored
  2. Clay Fouts

    [delivers #14668229] Broken advanced search with branch groups

    Parentheses were missing from around branches list.
    ctfliblime authored

Jul 07, 2011

  1. Clay Fouts

    [#15440423] Fix several XSS vectors

    ctfliblime authored

Jul 01, 2011

  1. Clay Fouts

    Merge pull request #39 from hgq/07_02_pt11414367_1_02

    07 02 pt11414367 1 02
    ctfliblime authored

Jun 22, 2011

  1. hgq

    [Fixes #11414367] fixes js prompt mandatory fields for MARC bib add/edit

    hgq authored
  2. hgq

    [Fixes #11414367] js prompts on mandatory fields error

    hgq authored

Jun 15, 2011

  1. Clay Fouts

    [delivers #14614029] Undeclared variable error in serials_stats.pl

    ctfliblime authored

Jun 03, 2011

  1. Clay Fouts

    Merge pull request #1 from ranginui/4_02

    4 02
    ctfliblime authored
  2. Chris Cormack

    Bug 6452 : Fixing missing sql placeholders

    ranginui authored
  3. Chris Cormack

    Merge remote-tracking branch 'upstream/4_02' into 4_02

    ranginui authored
  4. Clay Fouts

    [Fixes #13906693] Make GetPendingReserveOnItem more selective

    The GetPendingReserveOnItem function created for #8315135 was
    being too inclusive in its query, triggering the appearance
    of item-level holds in the detail view even when there were
    none. This patch changes it so it only returns a defined value
    if there is an item-level hold or the item has an associated
    reserve that is Waiting or in Transit.
    ctfliblime authored

Jun 01, 2011

  1. Clay Fouts

    Actually return undef from GetItem() if item does not exist

    ctfliblime authored
  2. Clay Fouts

    [Fixes #8573563, #14084837] Unable to delete courses with stuck reserves

    If the item associated with a course reserve is deleted, the
    course reserve itself will not show and cannot be deleted.
    This makes it impossible to delete the course. This patch detects
    the presence of this unresolved state and resolves it by deleting
    the unrecoverable, stuck reserve.
    ctfliblime authored
  3. Clay Fouts

    [Fixes #12849423] Enable course reservation of multiple items at once

    This patch changes the barcode entry from a text to textarea, processing
    multiple line-separated barcodes to be added to a course simultaneously.
    ctfliblime authored
  4. Clay Fouts

    [Fixes #10585697] Putting item on course reserve deletes its itemtype

    Use of "itemtype" instead of "itype" caused the value to be clobbered.
    ctfliblime authored
  5. Clay Fouts

    [Fixes #8315135] Title's detail view very slow with lots of reserves

    CheckReserves() was being called for each item in the title, and that
    function in turn iterates over every reserve on the title. This is a
    lot of iterating when there are titles with lots of reserves that
    also have lots of items, which is typically the case. Calls within
    this tend to be very expensive, particularly GetMember.
    
    This patch creates a new function, C4::Reserves::GetPendingReserveOnItem,
    that is a streamlined way of getting the information required for
    catalogue/detail.pl, which greatly improves performance of that script.
    ctfliblime authored
  6. Rashid Faraby

    PT-12095407 Tag Cloud Issue manifested in tags not displaying in OPAC.

    The problem was related to the data being submitted in MARC blob format. It should be in XML format.
    rfy authored ctfliblime committed
  7. Clay Fouts

    Add remote IP:port logging for SIP2 connections

    ctfliblime authored
  8. dlbptfs

    PID added to SIP2 logging

    dlbptfs authored ctfliblime committed
  9. Clay Fouts

    [Fixes #12849447] Clarify when item unavailable for SCO renewal

    UI ambiguity was contributing to a situation where it was easy for
    a patron to think they were renewing an item when in fact they
    were choosing to indicate they had returned it. A working button
    in a table column labeled "Renew" should only be able to renew
    items, rather than quietly presenting the very similar option to
    "Return Item". This patch disables one-click returns and makes
    the item's unavailability more visually apparent.
    ctfliblime authored

May 20, 2011

  1. Chris Cormack

    Fixing nomenclature

    ranginui authored

May 17, 2011

  1. Clay Fouts

    Add release notes

    ctfliblime authored
  2. Clay Fouts

    Cosmetic updates to specify proper version in installer

    ctfliblime authored
  3. Clay Fouts

    Remove sessionlog references from installer

    ctfliblime authored
Something went wrong with that request. Please try again.