diff options
| author | mark <mark> | 2011-02-12 02:36:57 +0000 |
|---|---|---|
| committer | mark <mark> | 2011-02-12 02:36:57 +0000 |
| commit | 38dd3ed3eeda0a467e1b4d8cedd741fc62aedc9c (patch) | |
| tree | 77408f219a209e18d93adc99ccbb684ac7cd1a6c /httemplate/search | |
| parent | 6287a167b0a300bb9931bd303cda5de711354bb1 (diff) | |
lock down manual batch approval
Diffstat (limited to 'httemplate/search')
| -rwxr-xr-x | httemplate/search/cust_pay_batch.cgi | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/httemplate/search/cust_pay_batch.cgi b/httemplate/search/cust_pay_batch.cgi index 6d628d39d..4a2248726 100755 --- a/httemplate/search/cust_pay_batch.cgi +++ b/httemplate/search/cust_pay_batch.cgi @@ -207,7 +207,10 @@ if ( $pay_batch ) { } $html_init .= qq!<INPUT TYPE="hidden" NAME="batchnum" VALUE="$batchnum">!; $html_init .= '<TR> <INPUT TYPE="submit" VALUE="Upload"></FORM><BR> </TR>'; - if ( $conf->exists('batch-manual_approval') and $pay_batch->status eq 'I') { + if ( $conf->exists('batch-manual_approval') + and $conf->config('batch-fixed_format-CHEK') eq 'td_eft1464' + and $pay_batch->status eq 'I' + and $pay_batch->payby eq 'CHEK' ) { $html_init .= qq!<TR><INPUT TYPE="button" VALUE="Manually approve" onclick=" if ( confirm('Approve all remaining payments in this batch?') ) window.location.href='${p}misc/process/pay_batch-approve.cgi?batchnum=$batchnum';"></TR>! |