From 14a054261683e652c2f1a425ab44e21d9dac72e5 Mon Sep 17 00:00:00 2001
From: mark <mark>
Date: Sat, 12 Feb 2011 02:37:05 +0000
Subject: [PATCH] lock down manual batch approval

---
 httemplate/search/cust_pay_batch.cgi | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/httemplate/search/cust_pay_batch.cgi b/httemplate/search/cust_pay_batch.cgi
index 6d628d39d..4a2248726 100755
--- a/httemplate/search/cust_pay_batch.cgi
+++ b/httemplate/search/cust_pay_batch.cgi
@@ -207,7 +207,10 @@ if ( $pay_batch ) {
     }
     $html_init .= qq!<INPUT TYPE="hidden" NAME="batchnum" VALUE="$batchnum">!;
     $html_init .= '<TR> <INPUT TYPE="submit" VALUE="Upload"></FORM><BR> </TR>';
-    if ( $conf->exists('batch-manual_approval') and $pay_batch->status eq 'I') {
+    if ( $conf->exists('batch-manual_approval') 
+          and $conf->config('batch-fixed_format-CHEK') eq 'td_eft1464'
+          and $pay_batch->status eq 'I'
+          and $pay_batch->payby eq 'CHEK' ) {
       $html_init .= qq!<TR><INPUT TYPE="button" VALUE="Manually approve" onclick="
 if ( confirm('Approve all remaining payments in this batch?') )
   window.location.href='${p}misc/process/pay_batch-approve.cgi?batchnum=$batchnum';"></TR>!
-- 
2.11.0