- Koha - lists.katipo.co.nz

Patron: Sort 1 as Grade and Sort 2 as Section
by Ashok Francis 14 Sep '17

14 Sep '17

Dear All, I am working in a school with koha library software. Is it possible to change SORT 1 as Grade and SORT 2 as Section in the patron? If yes, can you please guide me to change SORT 1 as Grade and SORT 2 as Section. I will be thankful to you. Ashok.

2 1

Cross-site scripting vulnerability - Koha 16.11
by Tom Hanstra 13 Sep '17

13 Sep '17

We received email from our campus InfoSec group that a portion of our Koha site was vulnerable to cross-site scripting attacks. Below is the gist of the email we received: GET: https://[our server]cgi-bin/koha/opac-shelve s.pl?op=list&category=%22/%3E%3Cimg%20src=x%20onerror=% 22alert(%27Doh!%20Insert%20Hax%20Here.%27)%22%20/%3E%3C!%E2%80%94 ATTACK DETAILS: This page is vulnerable to Cross-site scripting attacks. Cross-site scripting attacks, in general, are an issue because they are enabling attacks. Specially-crafted malicious URLs can steal authentication tokens/cookies when a logged-in user visits them, giving the attacker full access to that user's account in the application. Reflected XSS attacks, in particular, are a concern as they can be used to socially engineer a user into clicking on what appears to be a legitimate URL. Please also consider the following: - Web application security testing should be performed regularly, especially for any public web applications. This includes tracking application inventory, general code review and vulnerability assessments using web application security testing tools. - All input received by the web server should be checked before it is processed. The best method is to remove all unwanted input and accept only expected input. For example, ensure angle brackets are not allowed in any input to any Web page fields. Additionally, no syntactic input should be allowed. Syntactic input can come from databases, other servers, etc. All input into a Web application must be filtered to ensure the delivery of clean content to individuals using your service. - Other References: OWASP Guide to Building Secure Web Applications and Web Services https://www.owasp.org/index.php/Category:OWASP_Guide_Project -------------- Does anyone know if there is a newer version of Koha which addresses these issues? Thanks, Tom -- *Tom Hanstra* *Sr. Systems Administrator* hanstra(a)nd.edu <http://library.nd.edu/>

2 1

Kitchen sink plugin and GetBranchName
by Mark Alexander 13 Sep '17

13 Sep '17

In order to learn how to write a plugin, I installed the Kitchen sink plugin: https://github.com/bywatersolutions/koha-plugin-kitchen-sink into stock Koha 17.05. When I ran the plugin's report tool, I got this error: Undefined subroutine &Koha::Plugin::Com::ByWaterSolutions::KitchenSink::GetBranchName called at /var/lib/koha/rpl/plugins/Koha/Plugin/Com/ByWaterSolutions/KitchenSink.pm line 372. The code in question is this: $template->param( date_ran => dt_from_string(), results_loop => \@results, branch => GetBranchName($branch), ); After poking around in the Koha git repository, I saw that GetBranchName was removed by this commit: commit 19a977dc7b779173c4a3e96b6b06dc35db663601 Author: Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> Date: Tue Feb 2 17:28:30 2016 +0000 Bug 15758: Koha::Libraries - Remove GetBranchName I was able to fix the plugin by replacing the line with the GetBranchName call with this line: branch => Koha::Libraries->find($branch)->branchname,

1 0

need an sql report
by Saira Asghar 12 Sep '17

12 Sep '17

Dear All I need an sql report that can generate a list of Bib records with item count according to the shelving location. If any body has this report please send me. -- *Regards* Saira Asghar Librarian Namal College, 30-Kilometer Talagang Road, Mianwali, Pakistan. E-mail: saira.asghar(a)namal.edu.pk Ph: 0459 236995 Ext. 138

1 0

Seeking participants for an open source community panel at ALA Midwinter
by Peter Murray 12 Sep '17

12 Sep '17

Hello all, I'm reaching out to members of the Koha community. In the FOLIO project we've learned quite a bit from the experience of others, and we thought it would be good to gather some open source projects together to talk about the mechanics of community organization. I've put together a draft description into a Google Doc with a place to record interest from various projects: docs.google.com/document/d/1GW1BSm6T8y9-1loDCfYe7P4CEs4gBVs1cCwgNEppaB0/edit If you'll be in Denver next February for Midwinter or know of someone that would be that could answer questions about the community, we'd love to have someone join the panel. Peter

1 0

El ExtractValue y MarcXML
by Luis Moises Rojas 11 Sep '17

11 Sep '17

Hello everybody I am trying to use this instruction, but does not work, i am using koha 17.05. ExtractValue(marcxml,'//controlfield[@tag="008"]'), 8,4 ) AS 'PUB DATE' thanks -- *Luis Moisés Rojas P.*

3 2

Circulation Transfer on Independent libraries
by Manny Tamayao 09 Sep '17

09 Sep '17

Hi folks, Can you help me understand circulation transfer tool of items. I'm using the manual http://manual.koha-community.org/16.05/en/transfers.html. Does our system preferences IndependentLibraries prevents this functionality to our staff w/o superlibrarian permission? If not what user permission should I set so that they can still transfer materials? Thanks for the help in advance. Manny

2 1

List missing books in Koha 3.18
by Marton Ribary 09 Sep '17

09 Sep '17

Dear Koha community, I have been recently appointed as the Librarian of Leo Baeck College in London. The College currently uses an early version of Koha (3.18.02.000). I am still new to Koha, but find it exciting to learn about it. I would like to generate a list of items in our catalogue which are marked with a "missing" status. I was browsing the 3.18 manual and other resources, but so far I have been unable to find an easy and straightforward way to do it. I thought I would create a list and add "missing" items to it from the advanced search function. Unfortunately, item status is not one of the valid search criteria. I am sure there is a way, though. I appreciate any help. Thank you and kind regards, Marton Ribary Librarian Leo Baeck College 80 East End Road, Finchley London N3 2SY Tel: +44 (0)20 8349 610 Registered Charity No. 209777 ________________________________ LEHRHAUS @ Leo Baeck College HOME OF ADULT JEWISH LEARNING This coming year sees the return of many exciting courses plus the addition of on-line learning opportunities to enable even more people to study with us. We are also delighted to offer Modern Hebrew Ulpan classes as part of the Lehrhaus. For more information please go to our website: lbc.ac.uk/study-with-us/additional-learning-opportunities/lehrhaus ________________________________ Disclaimer This email (including any attachments) is intended only for the recipient(s) named above. It may contain confidential or privileged information and should not be read, copied or otherwise used by any other person. If you are not a named recipient, please contact the sender and delete the email from your system.

4 3

Info request on handling bi/multilingual access and subject headings within Koha
by Selma Aslan 07 Sep '17

07 Sep '17

Hi All, We have migrated to Koha recently, and need to reorganize our authority files since our former ILS system was not very helpful in this respect. As a university of mixed medium (i.e. mainly Turkish + % 30 English) we use headings in Turkish and English, and we would like to link the equivalent headings in two languages. I would appreciate to hear about good practice and receiving suggestions on how to handle this. For instance which MARC fields would be best to use etc. Sample records will be useful. Authorities.loc.gov lists authorized headings with a full stop at the end, but the headings haven't got a fullstop at the end in the 150 field in the authority record. Koha neither creates a fullstop automatically nor allows fullstop to be added if need be in the bibliographic record. What is the common practice: having two versions of headings, one with full stop and one without as authority or sacrificing fullstop at the end of the heading in bibliographic records? Or do I miss something? Thanks in advance for your help. Selma

1 0

Checked out status not showing in OPAC results list
by Tim McMahon 07 Sep '17

07 Sep '17

Our OPAC is not showing that items are checked out in the search results list. If you click on a record, it will show the correct status. We just upgraded to 15.05.02 last Friday on a Debian 8 package install. -- Tim McMahon Technical Services West Liberty Public Library

2 3