Bug 19611: Fix XSS Flaws in supplier.pl
[koha.git] / koha-tmpl / intranet-tmpl / prog / en / modules / acqui / booksellers.tt
1 [% USE KohaDates %]
2 [% INCLUDE 'doc-head-open.inc' %]
3 <title>Koha &rsaquo; Search for vendor [% supplier %]</title>
4 [% INCLUDE 'doc-head-close.inc' %]
5 <style type="text/css">
6 #vendors td{
7         vertical-align: top;
8 }
9 </style>
10 <link rel="stylesheet" href="[% interface %]/[% theme %]/css/datatables.css" />
11 [% INCLUDE 'datatables.inc' %]
12 <script type="text/javascript">
13 //<![CDATA[
14 $(document).ready(function() {
15     $("table.baskets").dataTable($.extend(true, {}, dataTablesDefaults, {
16         'sDom': 't',
17         'bPaginate': false,
18         'bFilter': false,
19         'bInfo': false,
20         "aaSorting": [[ 1, "asc" ]],
21         "aoColumnDefs": [
22             { "sType": "title-string", "aTargets" : [ "title-string" ] },
23             { "sType": "title-numeric", "aTargets" : [ "title-numeric" ] },
24             { 'aTargets': [-1], 'bSortable': false }
25         ]
26     }));
27     $("#supplierlist").change(function() {
28         var id = $(this).find("option:selected").val();
29         window.location.href = "#" + id;
30     });
31     $(".modal").on("show", function(){
32         var basket = $(this).data("basketno");
33         var legend = _("Add order to basket %s").format(basket);
34         $(this).find("legend").html(legend);
35     });
36 });
37 //]]>
38 </script>
39
40 </head>
41 <body id="acq_booksellers" class="acq">
42 [% INCLUDE 'header.inc' %]
43 [% INCLUDE 'acquisitions-search.inc' %]
44
45 <div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/acqui/acqui-home.pl">Acquisitions</a> &rsaquo; Search for vendor <em>[% supplier |html %]</em> </div>
46
47 <div id="doc3" class="yui-t2">
48    
49     <div id="bd">
50     <div id="yui-main">
51     <div class="yui-b">
52     
53 [% INCLUDE 'acquisitions-toolbar.inc' %]
54 [% UNLESS ( count == 1 ) %]
55     [% UNLESS count %]
56         <h1>Your search returned no results.</h1>
57     [% ELSIF ( supplier.length < 1 ) %]
58         <h1>Vendor search: [% count %] results found</h1>
59     [% ELSE %]
60         <h1>Vendor search: [% count %] results found for '[% supplier %]'</h1>
61     [% END %]
62 [% END %]
63 [% IF ( loop_suppliers.size ) %]
64     [% UNLESS (count == 1) %]
65         <p>Choose a vendor in the list to jump directly to the right place.
66         <select id="supplierlist">
67             [% FOREACH supplier1 IN loop_suppliers %]
68                 <option value="[% supplier1.booksellerid %]">[% supplier1.name %]</option>
69             [% END %]
70         </select>
71         </p>
72     [% END %]
73     [% IF ( allbaskets ) %]
74         <p><a href="/cgi-bin/koha/acqui/booksellers.pl?supplier=[% supplier %]&amp;booksellerid=[% booksellerid %]">Show active baskets only</a></p>
75     [% ELSE %]
76         <p><a href="/cgi-bin/koha/acqui/booksellers.pl?supplier=[% supplier %]&amp;booksellerid=[% booksellerid %]&amp;allbaskets=1">Show all baskets</a></p>
77     [% END %]
78     <div id="acqui_order_supplierlist">
79         [% FOREACH supplier IN loop_suppliers %]
80             <div class="supplier">
81                 <span class="suppliername">
82                     [% IF (supplier.name) %]
83                         <a name="[% supplier.booksellerid %]" href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% supplier.booksellerid %]">[% supplier.name |html %]</a>
84                     [% ELSE %]
85                         <a name="[% supplier.booksellerid %]" href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% supplier.booksellerid %]">NO NAME</a>
86                     [% END %]
87                 </span>
88                 <span class="action">
89                     [% IF ( CAN_user_acquisition_order_manage ) %]
90                         [% IF ( supplier.active ) %]
91                             <a class="btn btn-small" href="/cgi-bin/koha/acqui/basketheader.pl?booksellerid=[% supplier.booksellerid %]&amp;op=add_form"><i class="fa fa-plus"></i> New basket</a>
92                         [% ELSE %]
93                             (inactive)
94                         [% END %]
95                     [% END %]
96                         [% IF ( supplier.loop_basket.size ) %]
97                     <a class="btn btn-small" href="/cgi-bin/koha/acqui/parcels.pl?booksellerid=[% supplier.booksellerid %]"><i class="fa fa-inbox"></i> Receive shipment</a>
98                         [% END %]
99                 </span>
100                 <div class="baskets">
101                     [% IF ( supplier.loop_basket.size ) %]
102                         <table class="baskets">
103                             <thead>
104                                 <tr>
105                                     <th>No.</th>
106                                     <th>Name</th>
107                                     <th class="title-numeric">Item count</th>
108                                     <th class="title-numeric">Biblio count</th>
109                                     <th>Items expected</th>
110                                     <th>Created by</th>
111                                     <th class="title-string">Date</th>
112                                     <th>Basket group</th>
113                                     <th class="title-string">Closed</th>
114                                     <th>Actions</th>
115                                 </tr>
116                             </thead>
117                             <tbody>
118                                 [% FOREACH basket IN supplier.loop_basket %]
119                                     [% IF ( basket.uncertainprices ) %]
120                                         <tr class="problem">
121                                     [% ELSE %]
122                                         <tr>
123                                     [% END %]
124                                         <td>[% basket.basketno %]</td>
125                                         <td>[% basket.basketname |html %]</td>
126                                         <td>
127                                             <span title="[% basket.total_items %]">[% basket.total_items %]
128                                                 [% IF basket.total_items_cancelled %]
129                                                     ([% basket.total_items_cancelled %] cancelled)
130                                                 [% END %]
131                                             </span>
132                                         </td>
133                                         <td>
134                                             <span title="[% basket.total_biblios %]">[% basket.total_biblios %]
135                                                 [% IF basket.total_biblios_cancelled %]
136                                                     ([% basket.total_biblios_cancelled %] cancelled)
137                                                 [% END %]
138                                             </span>
139                                         </td>
140                                         <td>[% basket.expected_items %]</td>
141                                         <td>
142                                             [% basket.authorisedby_firstname %]
143                                             [% basket.authorisedby_surname %]
144                                         </td>
145                                         <td><span title="[% basket.creationdate %]">[% basket.creationdate | $KohaDates %]</span></td>
146                                         <td>
147                                           [% IF basket.basketgroup %]
148                                             [% basketgroup = basket.basketgroup %]
149                                             [% IF basketgroup.closed %]
150                                               [% basketgroup.name %] (closed)
151                                             [% ELSE %]
152                                               <a href="/cgi-bin/koha/acqui/basketgroup.pl?op=add&amp;booksellerid=[% basket.booksellerid %]&amp;basketgroupid=[% basketgroup.id %]">[% basketgroup.name %]</a>
153                                             [% END %]
154                                           [% END %]
155                                         </td>
156                                         <td>
157                                             [% IF ( basket.closedate ) %]
158                                                 <span title="[% basket.closedate %]">[% basket.closedate | $KohaDates %]</span>
159                                             [% ELSE %]
160                                                 <span title="9999-99-99"></span>
161                                             [% END %]
162                                         </td>
163                                         <td class="actions">
164                                             <a class="btn btn-mini" href="/cgi-bin/koha/acqui/basket.pl?basketno=[% basket.basketno %]"><i class="fa fa-eye"></i> View</a>
165
166                                             [% IF not basket.closedate and supplier.active %]
167                                                 <a class="btn btn-mini" id="addtoBasketLabel[% basket.basketno %]" href="#addtoBasket[% basket.basketno %]" role="button" data-toggle="modal"><i class="fa fa-plus"></i> Add to basket</a>
168                                                 <!-- Modal -->
169                                                 <div id="addtoBasket[% basket.basketno %]" class="modal hide" tabindex="-1" role="dialog" aria-labelledby="addtoBasketLabel[% basket.basketno %]" aria-hidden="true" data-basketno="[% basket.basketname %]">
170                                                     <div class="modal-body">
171                                                         [% INCLUDE 'acquisitions-add-to-basket.inc' booksellerid=supplier.booksellerid basketno=basket.basketno %]
172                                                     </div>
173                                                     <div class="modal-footer">
174                                                         <a href="#" class="cancel" data-dismiss="modal" aria-hidden="true">Cancel</a>
175                                                     </div>
176                                                 </div>
177                                             [% END %]
178                                         </td>
179                                     </tr>
180                                 [% END %][%# FOREACH basket IN supplier.loop_basket %]
181                             </tbody>
182                         </table>
183
184                     [% ELSE %]
185                         <p>No pending baskets</p>
186                     [% END %][%# IF ( supplier.loop_basket.size ) %]
187                 </div>
188             </div>
189         [% END %][%# FOREACH supplier IN loop_suppliers %]
190     </div>
191 [% END %][%# IF ( loop_suppliers.size ) %]
192 </div>
193 </div>
194 <div class="yui-b">
195 [% IF ( booksellerid ) %]
196 [% INCLUDE 'vendor-menu.inc' %]
197 [% END %]
198 [% INCLUDE 'acquisitions-menu.inc' %]
199 </div>
200 </div>
201 [% INCLUDE 'intranet-bottom.inc' %]