- Koha - lists.katipo.co.nz

Starting to think about migration
by McMurdo, Thomas 27 Nov '13

27 Nov '13

Paulita and Nancy, I want to get started thinking about when in 2014 you would like to migrate to the Catamount system. To begin, I have 2 questions: First, when is the soonest you could migrate, and second, when would you like to migrate? Let me know what you think, and then we can start talking dates with ByWater. Tom Tom McMurdo Collections & Digital Initiatives Librarian Vermont State Library 109 State St. Montpelier, VT 05609-0601 Phone: 802-828-6953 Fax: 802-828-2199 thomas.mcmurdo(a)state.vt.us

2 1

3.14 Packages
by Joel Sasse 26 Nov '13

26 Nov '13

Hello Community, Are Debian packages for 3.14 available yet? Thanks, Joel Sasse Network Systems Administrator Plum Creek Library System 290 S Lake St PO Box 697 Worthington, MN 56187 Office: 507-376-5803 Mobile: 507-360-8961 Fax: 507-376-9244 O

2 1

Cross site scripting
by araik＠flib.sci.am 26 Nov '13

26 Nov '13

Dear community, In our Koha version 3.12.01 which has worked on Ubuntu 12.04 we have some problems. Recently our Web provider checked Koha security through "Acunetix" Web application security programm and founded some high-severity type vulnerabilities. First threat : ********************************** Cross site scripting (verified) Affects Variation /cgi-bin/koha/opac-search.pl /cgi-bin/koha/opac-search.pl URL encoded GET input count was set to 50'"()&%<ScRiPt >prompt(901653)</ScRiPt> GET /cgi-bin/koha/opac-search.pl?count=50%27%22%28%29%26%25%3cScRiPt%20%3eprompt%28901653%29%3c%2 fScRiPt%3e&format=rss2&idx=pb,wrdl&limit=mc-itype,phr:AR&q=1&sort_by=acqdate_dsc HTTP/1.1 Referer: http://library.parliament.am:80/ (line truncated) ...00%2500query_cgi%2508%2580%2505%2500%2500%2500total%250A%2511callnum%252Cwrdl%253A%25201%2 52C%2520%250A%2500%2500%2500query_desc%2504%2503%2504%2500%2500%2500%2506%25C5Q%258FR%2500%25 00%2500%2500%2504%2500%2500%2500time%250A7format%253Drss2%2526idx%253Dsu%25252Cwrdl%2526limit %253Dmc-itype%25252Cphr%25253AAR%2526q%253D1%2509%2500%2500%2500query_cgi%2508%2580%2505%2500 %2500%2500total%250A%251Bsu%252Cwrdl%253A%25201%252C%2520mc-itype%252Cphr%253AAR%250A%2500%25 00%2500query_desc; KohaOpacLanguage=en Host: library.parliament.am Connection: Keep-alive Accept-Encoding: gzip,deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0) Acunetix-Product: WVS/8.0 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Accept: */* **************************************** Second : *************************************** Application error message Affects Variation /cgi-bin/koha/opac-search.pl /cgi-bin/koha/opac-search.pl URL encoded GET input count was set to '"() Error message found: Internal Server Error GET /cgi-bin/koha/opac-search.pl?count=%27%22%28%29&format=rss2&idx=ti&q=1&sort_by=acqdate_dsc HTTP/1.1 (line truncated) ...00%2500query_cgi%2508%2580%2505%2500%2500%2500total%250A%2511callnum%252Cwrdl%253A%25201%2 52C%2520%250A%2500%2500%2500query_desc%2504%2503%2504%2500%2500%2500%2506%25C5Q%258FR%2500%25 00%2500%2500%2504%2500%2500%2500time%250A7format%253Drss2%2526idx%253Dsu%25252Cwrdl%2526limit %253Dmc-itype%25252Cphr%25253AAR%2526q%253D1%2509%2500%2500%2500query_cgi%2508%2580%2505%2500 %2500%2500total%250A%251Bsu%252Cwrdl%253A%25201%252C%2520mc-itype%252Cphr%253AAR%250A%2500%25 00%2500query_desc; KohaOpacLanguage=en Host: library.parliament.am Connection: Keep-alive Accept-Encoding: gzip,deflate User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0) Acunetix-Product: WVS/8.0 (Acunetix Web Vulnerability Scanner - NORMAL) Acunetix-Scanning-agreement: Third Party Scanning PROHIBITED Acunetix-User-agreement: http://www.acunetix.com/wvs/disc.htm Accept: */* **************************** Security programme results see an attached. How to prevent xss attacs and protect opac-search.pl ? Best regards, Araik

2 1

xss problem
by araik＠flib.sci.am 26 Nov '13

26 Nov '13

Dear community, In our Koha version 3.12.01 which has worked on Ubuntu 12.04 we have some problems. Recently our Web provider checked Koha security through "Acunetix" Web application security programm and founded some high-severity type vulnerabilities. First threat : ********************************** Cross site scripting (verified) Affects Variation /cgi-bin/koha/opac-search.pl URL encoded GET input count was set to 50'"()&%<ScRiPt >prompt(901653)</ScRiPt> GET /cgi-bin/koha/opac-search.pl?......... **************************************** Second : *************************************** Application error message Affects Variation /cgi-bin/koha/opac-search.pl /cgi-bin/koha/opac-search.pl URL encoded GET input count was set to '"() Error message found: Internal Server Error GET /cgi-bin/koha/opac-search.pl?count=%27%22%28%29&format=rss2&idx=ti&q=1&sort_by=acqdate_dsc HTTP/1.1 (line truncated)........ **************************** Security programme results see an attached. How to prevent xss attacs and protect opac-search.pl ? Best regards, Araik

1 0

Printing overdue notices or bills for Patrons from Koha with NO Email
by Lisa Gugliotti 25 Nov '13

25 Nov '13

How do other Koha libraries deal with sending bills to patrons that do not have an email on file? I've tried to use various Directory/Catalog Mail Merge techniques and tutorials using Microsoft Word 2010, a Word Add-In called Many to One, but it's just not working out the way it's supposed to work. Short of sending 5 or 6 mail merged sheets per cardnumber, how do other libraries get around this? Thank you, Lisa Gugliotti Reference Librarian The Henry Carter Hull Library 10 Killingworth Turnpike Clinton, CT 06413 860-669-2342 lisa(a)hchlibrary.org www.hchlibrary.org "Like" Us on Facebook https://www.facebook.com/hchlibrary Follow Us on Twitter https://twitter.com/hchlibrary

2 1

Upgrading using apt-get
by Stefano Bargioni 25 Nov '13

25 Nov '13

After some tests for migrating from Koha 3.2.7, I'm going to start using Koha 3.12.5 in a production environment, on Debian. In the meanwhile Koha had two patches (3.12.6, 3.12.7) and one release (3.14). Will my next apt-get upgrade Koha to 3.12.7? Or to Koha 3.14, if its deb package becomes available? If to Koha 3.12.7, how can I upgrade to Koha 3.14 when my library will be ready to move? Thanks. Stefano

2 1

migrating koha
by rocky bang 25 Nov '13

25 Nov '13

hiii all, I have multiple koha instance running on one system opensuse 11. I want to shift one of the koha to another system ubuntu 12.04 as it is with out any changes. I have copied source code and paste it on another server ubuntu 12.04 i then created new koha instance and import the dump file into new koha instance, every thing goes fine but some of the searching feature are changed. On previous system opensuse when i search for records its showing me in unicode local laguage, but on the new instance records are in english language. how can i migrate the koha with out any changes like this.

2 1

New featur: Incremental Fine and Purchase sugestion restriction
by Vinod Kumar Mishra 25 Nov '13

25 Nov '13

Dear Developers, I feel that incremental fine policy needs to be incorporated for example some libraries charge fine for first seven day's 1 USD/Rupees then 5 USD/Rupees etc. similarly Purchase suggestion should be also restricted by category of users like all category of users in academic library are not entitle for purchase suggestions and only faculty can place purchase request so it should be also incorporated. For fine it can be added in circulation policy module and and Purchase suggestions it can be simply placed in Patron category creation module (Online purchase suggestion Yes/No). I have already requested this feature in bug site. Thanking You With regards, Vinod Kumar Mishra, Assistant Librarian, Biju Patnaik Central Library, NIT Rourkela, Mob:91+9439420860 91+6612462103 (O) email: vinod_librarian(a)rediffmail.com : mishravk79(a)gmail.com

2 1

Koha (3.14) Live DVD
by Vinod Kumar Mishra 24 Nov '13

24 Nov '13

Dear All, Please click the link below to get the koha latest version Live DVD (easykoha.iso). However, old stable version (KohaLiveDVD.iso) is also available from the link. Please note that instructions and ID/Passwords are similar in all versions. Live DVD : http://sourceforge.net/projects/vkmkoha/files/ Installation Video: http://www.youtube.com/watch?v=2mg8h394E28 Thanking You. With regards, Vinod Kumar Mishra, Assistant Librarian, Biju Patnaik Central Library, NIT Rourkela, Mob:91+9439420860 91+6612462103 (O) email: vinod_librarian(a)rediffmail.com : mishravk79(a)gmail.com

1 0

Re: [Koha] How to record bound volume serials?
by Chris Cormack 23 Nov '13

23 Nov '13

On 23 November 2013 19:01, Vinod Kumar Mishra <vinod_librarian(a)rediffmail.com> wrote: > Dear, > > This is also my question but i feel bond volume needs to be re-accessioned and you can add it as a item in that bibliographic record. But i also want to know what to do with loose issues? which is no more relevant after binding it. > I would use Analytics to link the bound volume to the individual issue records, but remove the items from the individual ones http://manual.koha-community.org/3.14/en/cataloging.html#cataloganalytics Chris > On Sat, 23 Nov 2013 01:26:27 +0530 wrote >>I shall be grateful if anybody can guide me in this matter. I understand > > Koha does not use 853 Tag. Say, I have a serial "All India Cooperative > > Bulletin" and received its 4 issues of volume 53 in Koha. Individual issue > > with unique bar code. Now, it has been bound into a physical volume > > > > How do I record this bound volume of of the serial in Koha? > > What happens to loose issue item records? > > > > -- > > Arup Raychaudhury > > _______________________________________________ > > Koha mailing list http://koha-community.org > > Koha(a)lists.katipo.co.nz > > http://lists.katipo.co.nz/mailman/listinfo/koha > > > > With regards, > Vinod Kumar Mishra, > Assistant Librarian, > Biju Patnaik Central Library, > NIT Rourkela, > Mob:91+9439420860 > 91+6612462103 (O) > email: vinod_librarian(a)rediffmail.com > : mishravk79(a)gmail.com > _______________________________________________ > Koha mailing list http://koha-community.org > Koha(a)lists.katipo.co.nz > http://lists.katipo.co.nz/mailman/listinfo/koha

1 0