- Koha - lists.katipo.co.nz

Lists of authorized values
by Lenora Oftedahl 12 Dec '14

12 Dec '14

How do you delete a category for authorized values? Thanx. Lenora StreamNet Regional Library Columbia River Inter-Tribal Fish Commission

2 1

Koha 3.18 - CSS information
by Craig Butosi 12 Dec '14

12 Dec '14

Hi Everyone, Relatively new to CSS customization and am learning the backend of Koha (latest version installed) on my own. Where would I look for the template information for Koha's bootstrap theme? I would like to use and apply the CSS information already contained in 3.18 to new code that requires CSS styling (e.g., a CSS left-hand menu in opacnavleft for hyperlinks. I'd like to keep font styles, headings, font weights, etc. as uniform as possible throughout the catalogue while coding. Should I use Firefox's "inspect element" feature, navigate to one of the template files on my server, etc.? How do you familiarize yourself with, and use as quick reference, Koha CSS? I hope this question is clear - it may also be a question with an obvious answer. Happy to provide clarification! Many thanks everyone! Best, Craig Butosi, MA, MLIS, B Mus (Hons.) LIBRARY SERVICES MANAGER the royal conservatory TELUS Centre for Performance and Learning 273 Bloor Street West Toronto, ON M5S 1W2 416.408.2824 x338 www.rcmusic.ca<http://www.rcmusic.ca/> Note: This email message and any attachments are intended only for the use of the individual to which it is addressed, and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If the recipient of this email is not the intended recipient (or the employee or agent responsible for delivering the email to the intended recipient), you are hereby notified that any review, dissemination, distribution or copying or other use of this message is strictly prohibited. If you have received this communication in error, please notify the sender immediately by return email and delete this message and attachments from your system, thank you.

2 2

Re: [Koha] Biblios not found after reindexing.
by Mahesh Angadi 12 Dec '14

12 Dec '14

Dear Koha Users, I had faced similiar problem after upgrade through koha-common. After several attempts, I found the exact solution at the below website link:- https://www.marshut.net/ktshsn/search-biblios-not-found-after-reindexing.ht… Please add the four tag lines specified in above hyperlink at the end of koha-conf.xml file (before </config>). After this rebuild zebra. Hopefully this should solve the problem. -- Mr. Mahesh M. Angadi, Librarian, Model College, Dombivli (E). Contact No. 9869120258, (0251) 24700 On Fri, Dec 12, 2014 at 4:30 AM, <koha-request(a)lists.katipo.co.nz> wrote: > > Send Koha mailing list submissions to > koha(a)lists.katipo.co.nz > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.katipo.co.nz/mailman/listinfo/koha > or, via email, send a message with subject or body 'help' to > koha-request(a)lists.katipo.co.nz > > You can reach the person managing the list at > koha-owner(a)lists.katipo.co.nz > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Koha digest..." > > > Today's Topics: > > 1. Re: Add daemon mode to rebuild_zebra.pl on 3.18 (Zeno Tajoli) > 2. Re: Search: Biblios not found after reindexing (Beda Szukics) > 3. Re: Search: Biblios not found after reindexing (Mirko Tietgen) > 4. Re: Search: Biblios not found after reindexing (Beda Szukics) > 5. Re: Search: Biblios not found after reindexing (Beda Szukics) > 6. Error while upgrading from 3.14 to 3.16 stable (Vimal Kumar V.) > 7. Voting results are in for the 2015 Koha North America User's > Group location! (Jason Robb) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 11 Dec 2014 11:04:05 +0100 > From: Zeno Tajoli <z.tajoli(a)cineca.it> > To: Iming Chan <imingchan(a)yahoo.com.au>, koha(a)lists.katipo.co.nz > Subject: Re: [Koha] Add daemon mode to rebuild_zebra.pl on 3.18 > Message-ID: <54896C15.8080300(a)cineca.it> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Hi all, > > Il 11/12/2014 00:05, Iming Chan ha scritto: > > Dear all, > > > > We have successfully upgraded to 3.18 and encountered a problem when > tried > > to add daemon mode to rebuild_zebra.pl (bug# 6435, from 3.16). Our IT > > person has supplied the following: > > > > [9:50:24 AM] Alexey - Neo Universe: > > root@ip-172-31-0-233:/usr/share/koha/bin/migration_tools# ./ > rebuild_zebra.pl > > Can't locate C4/Context.pm in @INC (@INC contains: /etc/perl > > /usr/local/lib/perl/5.14.2 /usr/local/share/perl/5.14.2 /usr/lib/perl5 > > /usr/share/perl5 /usr/lib/perl/5.14 /usr/share/perl/5.14 > > /usr/local/lib/site_perl .) at ./rebuild_zebra.pl line 6. > > BEGIN failed--compilation aborted at ./rebuild_zebra.pl line 6. > > > Have we missed something? > > Quite probably the problem is the enviroment. > I suggest not to use 'root' user to reindex, but 'koha'. > Attention if in the past you use 'root' to index, probably > the files of Zebra are under 'root' permissions so you have two > options: > -- setup the correct permission with 'koha' > -- change root enviroment, adding > export PERL5LIB=/path/to/your/koha/ > export KOHA_CONF=/path/to/your/koha-conf.xml > > See > > http://koha-community.org/faqs/zebra-indexing-wont-work-fix-it-aka-search-s… > for basic help. > > > In fact many of your problem are present because you don't access to > command line. > The setup that you describe is: > You (librarian) only on web and here on mailing list > Your IT guru only on commnad line and not on mailing list. > > My suggestion is the ask to your IT guru to came here on mailing list > and he needs to read the manual and the INSTALL files. > Or, if you prefere, take in hand the command line and reserve IT guru > only for root. > With same strategic sudo (apache, zebra server, zebra indexer daemon) > you calls to IT gure will be very few; only email topics will be out. > > > Bye > Zeno Tajoli > > > > > > -- > Dr. Zeno Tajoli > Soluzioni per la Ricerca Istituzionale - Automazione Biblioteche > z.tajoli(a)cineca.it > fax +39 02 2135520 > CINECA - Sede operativa di Segrate > > > ------------------------------ > > Message: 2 > Date: Thu, 11 Dec 2014 11:42:22 +0100 > From: Beda Szukics <beda(a)kollegium-sarnen.ch> > To: Tomas Cohen Arazi <tomascohen(a)gmail.com>, koha(a)lists.katipo.co.nz > Subject: Re: [Koha] Search: Biblios not found after reindexing > Message-ID: <5489750E.6000703(a)kollegium-sarnen.ch> > Content-Type: text/plain; charset=UTF-8 > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Am 11.12.2014 10:15, schrieb Tomas Cohen Arazi: > > As a general rule I'd say you should look at the about page for > > possible configuration issues. > > This page tells me I should change to DOM. > > How? Simply replacing <zebra_bib_index_mode> to dom? (and the same for > authority). Or are there other caveats? > > BTW: There seems to be a little typo in the first message > > Der Eintrag <zebra_bib_index_mode> hat den Wert grs1. > GRS-1-Unterst?tzung ist veraltet und wird in zuk?nftigen Versionen > entfernt. Bitte benutzen Sie stattdessen DOM mit folgender Einstellung > f?r <zebra_auth_index_mode> dom (vollst?ndige Neuindexierung > erforderlich.) > > shouldn't it be: <zebra_bib_index_mode> dom ? > > Beda > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.22 (MingW32) > > iEYEARECAAYFAlSJdQ4ACgkQyCcPQpXgCRq3mQCgwnT9zAvYnb+zqtZHHUEgPdnh > C0QAmQG/KO6GL9sVhHkQD+/tb0ljqEEQ > =gai4 > -----END PGP SIGNATURE----- > > > > ------------------------------ > > Message: 3 > Date: Thu, 11 Dec 2014 12:00:16 +0100 > From: Mirko Tietgen <5p4m(a)gmx.de> > To: koha(a)lists.katipo.co.nz > Subject: Re: [Koha] Search: Biblios not found after reindexing > Message-ID: <54897940.2050203(a)gmx.de> > Content-Type: text/plain; charset=utf-8 > > Beda Szukics schrieb am 11.12.2014 um > > > Am 11.12.2014 10:15, schrieb Tomas Cohen Arazi: > >> As a general rule I'd say you should look at the about page for > >> possible configuration issues. > > > > This page tells me I should change to DOM. > > > > How? Simply replacing <zebra_bib_index_mode> to dom? (and the same for > > authority). Or are there other caveats? > > No, it's a trap. Just setting it to DOM will lead to the result you > have seen at the beginning (search broken). There is a page in the > wiki about changing, unfortunately it is outdated. I would not > switch right away. It only means GRS1 is not maintained in the future. > > I think we talked about custom indexes a while back, if you made > changes to indexing you will have to convert those too. > > -- mirko > > > ------------------------------ > > Message: 4 > Date: Thu, 11 Dec 2014 12:41:26 +0100 > From: Beda Szukics <beda(a)kollegium-sarnen.ch> > To: koha(a)lists.katipo.co.nz > Subject: Re: [Koha] Search: Biblios not found after reindexing > Message-ID: <548982E6.7070804(a)kollegium-sarnen.ch> > Content-Type: text/plain; charset=ISO-8859-1 > > Am 11.12.2014 12:00, schrieb Mirko Tietgen: > > Beda Szukics schrieb am 11.12.2014 um > > > >> Am 11.12.2014 10:15, schrieb Tomas Cohen Arazi: > >>> As a general rule I'd say you should look at the about page for > >>> possible configuration issues. > >> > >> This page tells me I should change to DOM. > >> > >> How? Simply replacing <zebra_bib_index_mode> to dom? (and the same for > >> authority). Or are there other caveats? > > > > No, it's a trap. Just setting it to DOM will lead to the result you > > have seen at the beginning (search broken). There is a page in the > > wiki about changing, unfortunately it is outdated. I would not > > switch right away. It only means GRS1 is not maintained in the future. > > I'll wait till there is a good instruction on how to change indexing. > > > I think we talked about custom indexes a while back, if you made > > changes to indexing you will have to convert those too. > > Yes. I made a few (quite simple) additions for the specific needs of > cataloguing old book according to the swiss guidelines. > > Beda > > > > ------------------------------ > > Message: 5 > Date: Thu, 11 Dec 2014 12:45:17 +0100 > From: Beda Szukics <beda(a)kollegium-sarnen.ch> > To: koha(a)lists.katipo.co.nz > Subject: Re: [Koha] Search: Biblios not found after reindexing > Message-ID: <548983CD.2020602(a)kollegium-sarnen.ch> > Content-Type: text/plain; charset=UTF-8 > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Am 11.12.2014 11:42, schrieb Beda Szukics: > > > BTW: There seems to be a little typo in the first message > > > > Der Eintrag <zebra_bib_index_mode> hat den Wert grs1. > > GRS-1-Unterst?tzung ist veraltet und wird in zuk?nftigen Versionen > > entfernt. Bitte benutzen Sie stattdessen DOM mit folgender > > Einstellung f?r <zebra_auth_index_mode> dom (vollst?ndige > > Neuindexierung erforderlich.) > > > > shouldn't it be: <zebra_bib_index_mode> dom ? > > It's only in the german translation. I corrected it. > > Beda > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.22 (MingW32) > > iEYEARECAAYFAlSJg80ACgkQyCcPQpXgCRroEQCgiiFqZwy6bYQvIre2R0Q/pzmj > bZgAn1fdddeuMlStGrTpAfQKoa7lBP8i > =zhUR > -----END PGP SIGNATURE----- > > > > ------------------------------ > > Message: 6 > Date: Thu, 11 Dec 2014 18:16:20 +0530 > From: "Vimal Kumar V." <vimal0212(a)gmail.com> > To: Koha <koha(a)lists.katipo.co.nz> > Subject: [Koha] Error while upgrading from 3.14 to 3.16 stable > Message-ID: > < > CAEaJrwVBYhoKkeAXdNzoKT0fHK2s5ViaLpF21SVk5NObq9TcGg(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Dear Friends, > I just tried to upgrade Koha 3.14 (old stable) to 3.16. > I installed Koha from Ubuntu packages. > I executed following three commands to upgrade Koha, > > sudo apt-get update > sudo apt-get upgrade > sudo apt-get install koha-common > > I got following error message at the end in terminal, > > DBD::mysql::db do failed: Table 'koha_library.roadtype' doesn't exist at > /usr/share/koha/intranet/cgi-bin/installer/data/mysql/updatedatabase.pl > line 7987. > DBD::mysql::db do failed: Table 'koha_library.roadtype' doesn't exist at > /usr/share/koha/intranet/cgi-bin/installer/data/mysql/updatedatabase.pl > line 7987. > dpkg: error processing koha-common (--configure): > subprocess installed post-installation script returned error exit status > 255 > E: Sub-process /usr/bin/dpkg returned an error code (1) > > Up gradation process in web interface does not proceed and it repeat it > again and again. > > How can I overcome this problem. > > Regards, > > -- > Vimal Kumar V. > Technical Assistant > Mahatma Gandhi University Library > Kottayam, Kerala- 686 560 > Web: http://www.vimalkumar.info > Blog: http://linuxhalwa.blogspot.com http://kohageek.blogspot.in > http://moovandan.blogspot.in > --------------------------------------------------------------------------- > "I forget what I was taught. I only remember what I have learnt" > -Patrick White > > > ------------------------------ > > Message: 7 > Date: Thu, 11 Dec 2014 14:39:40 -0600 > From: Jason Robb <jrobb(a)sekls.org> > To: KohaNA <kohana(a)bywatersolutions.com>, Koha > <koha(a)lists.katipo.co.nz>, ByWater Partners > <partners(a)bywatersolutions.com> > Subject: [Koha] Voting results are in for the 2015 Koha North America > User's Group location! > Message-ID: > < > CAK492-Kwn_Dt-EEvd1jNJQ-WbPiLXKAoUuLqi6+uNA762_cZzQ(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Congratulations to Mercyhurst University in Erie, Pennsylvania for winning > the vote to host next year's Koha North America User's Group! > > Their initial proposal can be found on the Koha North America wiki here: > http://koha-na.org/index.php/2015_Meeting_Site_Bid:_Erie,_Pennsylvania > > More detailed information will follow. > > Subscribe and stay tuned to the Koha North America list-serv for updates: > http://lists.bywatersolutions.com/mailman/listinfo/kohana > > > Jason Robb > SEKnFind Coordinator > jrobb(a)sekls.org > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > Koha mailing list > Koha(a)lists.katipo.co.nz > http://lists.katipo.co.nz/mailman/listinfo/koha > > > ------------------------------ > > End of Koha Digest, Vol 110, Issue 25 > ************************************* > 10.

1 0

Re: [Koha] Catalogue - SQL Report Help (Paul A)
by Matthew Charlesworth, S.J. 12 Dec '14

12 Dec '14

Dear Paul, Heather and Kerrie, Thank you for the report. I've also tweaked it slightly to allow direct interaction with the records in the Staff Interface (using example of CONCAT with A HREF and TITLE codes). (NB Distinguish between ' and "). I attach it here in case you might find it useful. I'm stuck with trying to get a version of the report that only shows 0 copies or copies greater than 1 (or to use the input technique to specify by x number of Copies)... I've tried the WHERE Copies=0 clause but that doesn't seem to work... SELECT DISTINCT CONCAT('<a title="Search for Title with Biblionumber: ',b.biblionumber,'" href="/cgi-bin/koha/catalogue/search.pl?q=ti%3A',REPLACE (b.title, ' ', '+'),'">Search</a>') AS "Search for Title", b.biblionumber, CONCAT('<a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=',b.biblionumber,'">',b.title,'</a>') AS "Item Title", b.author, t.editionstatement, t.publishercode, t.isbn, count(i.itemnumber) AS "Copies" FROM biblio b LEFT JOIN biblioitems t USING(biblionumber) LEFT JOIN items i USING(biblionumber) GROUP BY b.biblionumber ORDER BY Copies ASC Regards Matthew. ------------------------------ > > Message: 4 > Date: Thu, 11 Dec 2014 01:19:06 +0000 > From: Kerrie Stevens <KStevens(a)harvest.edu.au> > Subject: Re: [Koha] Catalogue - SQL Report Help (Paul A) > > SELECT DISTINCT b.biblionumber, b.title, b.author, t.editionstatement, > t.publishercode, t.isbn, i.ccode, count(i.itemnumber) FROM biblio b LEFT > JOIN > biblioitems t USING(biblionumber) LEFT JOIN items i USING(biblionumber) > WHERE i.ccode=<<Enter collection code>> GROUP BY b.biblionumber > > Thanks so much for your sharing of this report. > > Kerrie Stevens >

2 1

Re: [Koha] Catalogue - SQL Report Help (Paul A)
by Paul A 12 Dec '14

12 Dec '14

At 07:18 PM 12/11/2014 -0500, Matthew Charlesworth, S.J. wrote: [snip] >I attach it here in case you might find it useful. I'm stuck with trying to >get a version of the report that only shows 0 copies or copies greater than >1 (or to use the input technique to specify by x number of Copies)... I've >tried the WHERE Copies=0 clause but that doesn't seem to work... No, the logic breaks down counting itemnumbers -- count the items.biblionumbers instead: SELECT DISTINCT CONCAT('<a title="Search for Title with Biblionumber: ',b.biblionumber,'" href="/cgi-bin/koha/catalogue/search.pl?q=ti%3A',REPLACE (b.title, ' ', '+'),'">Search</a>') AS "Search for Title", b.biblionumber, CONCAT('<a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=',b.biblionumber,'">',b.title,'</a>') AS "Item Title", b.author, t.editionstatement, t.publishercode, t.isbn, count(i.biblionumber) AS "Copies" FROM biblio b LEFT JOIN biblioitems t USING(biblionumber) LEFT JOIN items i USING(biblionumber) GROUP BY b.biblionumber ORDER BY Copies ASC; Best -- Paul >SELECT DISTINCT CONCAT('<a title="Search for Title with Biblionumber: >',b.biblionumber,'" >href="/cgi-bin/koha/catalogue/search.pl?q=ti%3A',REPLACE (b.title, ' >', '+'),'">Search</a>') AS "Search for Title", b.biblionumber, >CONCAT('<a >href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=',b.biblionumber,'">',b.title,'</a>') >AS "Item Title", b.author, t.editionstatement, t.publishercode, >t.isbn, count(i.itemnumber) AS "Copies" FROM biblio b LEFT JOIN >biblioitems t USING(biblionumber) LEFT JOIN items i USING(biblionumber) >GROUP BY b.biblionumber ORDER BY Copies ASC > > >Regards > >Matthew. > > >------------------------------ > > > > > Message: 4 > > Date: Thu, 11 Dec 2014 01:19:06 +0000 > > From: Kerrie Stevens <KStevens(a)harvest.edu.au> > > Subject: Re: [Koha] Catalogue - SQL Report Help (Paul A) > > > > SELECT DISTINCT b.biblionumber, b.title, b.author, t.editionstatement, > > t.publishercode, t.isbn, i.ccode, count(i.itemnumber) FROM biblio b LEFT > > JOIN > > biblioitems t USING(biblionumber) LEFT JOIN items i USING(biblionumber) > > WHERE i.ccode=<<Enter collection code>> GROUP BY b.biblionumber > > > > Thanks so much for your sharing of this report. > > > > Kerrie Stevens

1 0

Error while upgrading from 3.14 to 3.16 stable
by Vimal Kumar V. 11 Dec '14

11 Dec '14

Dear Friends, I just tried to upgrade Koha 3.14 (old stable) to 3.16. I installed Koha from Ubuntu packages. I executed following three commands to upgrade Koha, sudo apt-get update sudo apt-get upgrade sudo apt-get install koha-common I got following error message at the end in terminal, DBD::mysql::db do failed: Table 'koha_library.roadtype' doesn't exist at /usr/share/koha/intranet/cgi-bin/installer/data/mysql/updatedatabase.pl line 7987. DBD::mysql::db do failed: Table 'koha_library.roadtype' doesn't exist at /usr/share/koha/intranet/cgi-bin/installer/data/mysql/updatedatabase.pl line 7987. dpkg: error processing koha-common (--configure): subprocess installed post-installation script returned error exit status 255 E: Sub-process /usr/bin/dpkg returned an error code (1) Up gradation process in web interface does not proceed and it repeat it again and again. How can I overcome this problem. Regards, -- Vimal Kumar V. Technical Assistant Mahatma Gandhi University Library Kottayam, Kerala- 686 560 Web: http://www.vimalkumar.info Blog: http://linuxhalwa.blogspot.com http://kohageek.blogspot.in http://moovandan.blogspot.in --------------------------------------------------------------------------- "I forget what I was taught. I only remember what I have learnt" -Patrick White

1 0

Search: Biblios not found after reindexing
by Beda Szukics 11 Dec '14

11 Dec '14

Hallo I upgraded today to koha 3.18.1 using the debian packages. I noticed that the links between authority records and bibligraphic records weren't updated using koha-rebuild-zebra So I tried a full reindex: koha-rebuild-zebra -f kb I get: 16:41:54-10/12 zebraidx(4827) [warn] Couldn't open collection.abs [No such file or directory] 17:05:59-10/12 zebraidx(4827) [fatal] reckeys.c:214: Out of memory - malloc(364288000 bytes) Right now I can't search biblios any more. An authority search does fine, but the the "used in"-row shows allways 0 results. What shall I do? Beda

5 9

Add daemon mode to rebuild_zebra.pl on 3.18
by Iming Chan 11 Dec '14

11 Dec '14

Dear all, We have successfully upgraded to 3.18 and encountered a problem when tried to add daemon mode to rebuild_zebra.pl (bug# 6435, from 3.16). Our IT person has supplied the following: [9:50:24 AM] Alexey - Neo Universe: root@ip-172-31-0-233:/usr/share/koha/bin/migration_tools# ./rebuild_zebra.pl Can't locate C4/Context.pm in @INC (@INC contains: /etc/perl /usr/local/lib/perl/5.14.2 /usr/local/share/perl/5.14.2 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.14 /usr/share/perl/5.14 /usr/local/lib/site_perl .) at ./rebuild_zebra.pl line 6. BEGIN failed--compilation aborted at ./rebuild_zebra.pl line 6. [9:50:35 AM] Alexey - Neo Universe: root@ip-172-31-0-233:/usr/share/koha/bin/migration_tools# python -V Python 2.7.3 [9:51:03 AM] Alexey - Neo Universe: actually just this: [9:51:04 AM] Alexey - Neo Universe: root@ip-172-31-0-233:/usr/share/koha/bin/migration_tools# python -V Python 2.7.3 root@ip-172-31-0-233:/usr/share/koha/bin/migration_tools# ./rebuild_zebra.pl Can't locate C4/Context.pm in @INC (@INC contains: /etc/perl /usr/local/lib/perl/5.14.2 /usr/local/share/perl/5.14.2 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.14 /usr/share/perl/5.14 /usr/local/lib/site_perl .) at ./rebuild_zebra.pl line 6. BEGIN failed--compilation aborted at ./rebuild_zebra.pl line 6. Have we missed something? Iming ----- Iming Chan Translib Information Service Melbourne, Australia http://opac.translib.com Phone: +61 3 9801 5097 Fax: +61 3 9801 4024 E-mail: iming(a)translib.com -- View this message in context: http://koha.1045719.n5.nabble.com/Add-daemon-mode-to-rebuild-zebra-pl-on-3-… Sent from the Koha-general mailing list archive at Nabble.com.

2 1

Usage Stats Library Type
by Lenora Oftedahl 11 Dec '14

11 Dec '14

In 3.18, there's a system preference under Administration for Sharing anonymous usage statistics. Unfortunately, we can't choose a library type because we are neither a public library under the usual definition or a university. We are a special or government library. How can we add that? Lenora

2 1

Potential XSS attack vector in opac
by Bob Ewart 11 Dec '14

11 Dec '14

When our site was scanned for potential vulnerabilities, they came up with the following links typed into Firefox. 50.199.57.14/cgi-bin/koha/opac-search.pl?q=123&sort_by='"><script>prompt('Happy_Holidays')</script>&limit=123 and 50.199.57.14/cgi-bin/koha/opac-search.pl?q=ccl=su%3AGay%20men%20and%20su%3ASexual%20behavior&offset=100&sort_by=relevance_asc'"><script>prompt('Happy_Holidays')</script> Both of these scripts are executed and cause a pop up This looks similar to bug 11341 which was fixed in 3.14. We are running 3.18 on Xubuntu 14.04 LTS installed from the PPA. I noticed that in the patch at http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=23313&action=diff there were a number of '|html %' entries which appear as '|url %' in 3.18. Is this a regression on bug 11341? Bob Ewart

5 6