From b5f2742aa9a97c544a5d1f9b5806f00bdb780237 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dalibor=20Markovi=C4=87?= <dalibor31@gmail.com>
Date: Wed, 1 Jul 2026 11:36:43 +0200
Subject: [PATCH] =?UTF-8?q?Ispravka:=20CSRF=20polje=20mora=20biti=20=5Fcsr?=
 =?UTF-8?q?f,=20ne=20csrf=5Ftoken=20(dugmad=20tiho=20vra=C4=87ala=20403)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 web/templates/stranice/klijent_forma.html        | 2 +-
 web/templates/stranice/kpo.html                  | 4 ++--
 web/templates/stranice/kpo_forma.html            | 2 +-
 web/templates/stranice/nabavka_detalji.html      | 2 +-
 web/templates/stranice/pdv_kir.html              | 2 +-
 web/templates/stranice/pdv_kir_dnevni_pazar.html | 2 +-
 web/templates/stranice/pdv_kpr.html              | 2 +-
 web/templates/stranice/popis.html                | 2 +-
 web/templates/stranice/prodaja_detalji.html      | 4 ++--
 9 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/web/templates/stranice/klijent_forma.html b/web/templates/stranice/klijent_forma.html
index fbd495a..d3666f7 100644
--- a/web/templates/stranice/klijent_forma.html
+++ b/web/templates/stranice/klijent_forma.html
@@ -38,7 +38,7 @@
         {{end}}
 
         <form method="POST" action="{{if .Izmena}}/klijenti/izmeni/{{.Klijent.ID}}{{else}}/klijenti/novi{{end}}">
-            <input type="hidden" name="csrf_token" value="{{.CsrfToken}}">
+            <input type="hidden" name="_csrf" value="{{.CsrfToken}}">
             <div class="forma-kolona">
 
                 <!-- tip klijenta -->
diff --git a/web/templates/stranice/kpo.html b/web/templates/stranice/kpo.html
index 77c3286..920a20b 100644
--- a/web/templates/stranice/kpo.html
+++ b/web/templates/stranice/kpo.html
@@ -22,7 +22,7 @@
             <div style="display:flex;gap:8px;flex-wrap:wrap;align-items:center;">
                 {{if index .Dozvole "kpo.dodaj"}}
                 <form method="POST" action="/kpo/backfill" data-full-reload>
-                    <input type="hidden" name="csrf_token" value="{{.CsrfToken}}">
+                    <input type="hidden" name="_csrf" value="{{.CsrfToken}}">
                     <button type="submit" class="btn-sekundarno" style="font-size:13px;padding:8px 16px;white-space:nowrap;"
                         data-potvrda="Uvesti sve prodaje i naplaćene servisne naloge koji još nisu u KPO-u?">
                         Uvezi postojeće
@@ -86,7 +86,7 @@
                         {{if index $.Dozvole "kpo.obrisi"}}
                         {{if eq $z.Izvor "rucno"}}
                         <form method="POST" action="/kpo/obrisi/{{$z.ID}}" style="display:inline;" data-full-reload>
-                            <input type="hidden" name="csrf_token" value="{{$.CsrfToken}}">
+                            <input type="hidden" name="_csrf" value="{{$.CsrfToken}}">
                             <button type="submit" class="btn-opasno-mali"
                                 data-potvrda="Obrisati ovaj KPO unos?">Obriši</button>
                         </form>
diff --git a/web/templates/stranice/kpo_forma.html b/web/templates/stranice/kpo_forma.html
index 15cdf73..b89460c 100644
--- a/web/templates/stranice/kpo_forma.html
+++ b/web/templates/stranice/kpo_forma.html
@@ -15,7 +15,7 @@
         <h2 style="margin:0 0 20px;font-size:18px;">Novi KPO unos</h2>
 
         <form method="POST" action="/kpo/nova">
-            <input type="hidden" name="csrf_token" value="{{.CsrfToken}}">
+            <input type="hidden" name="_csrf" value="{{.CsrfToken}}">
 
             <div class="polje-grupa" style="margin-bottom:16px;">
                 <label class="polje-labela">Datum prometa *</label>
diff --git a/web/templates/stranice/nabavka_detalji.html b/web/templates/stranice/nabavka_detalji.html
index 4644c75..1d937bd 100644
--- a/web/templates/stranice/nabavka_detalji.html
+++ b/web/templates/stranice/nabavka_detalji.html
@@ -189,7 +189,7 @@
                 </div>
             </div>
             <form method="POST" action="/nabavke/storno/{{.Nabavka.ID}}" data-full-reload style="display:flex;flex-direction:column;gap:8px;align-items:flex-end;">
-                <input type="hidden" name="csrf_token" value="{{.CsrfToken}}">
+                <input type="hidden" name="_csrf" value="{{.CsrfToken}}">
                 <input type="text" name="razlog" placeholder="Razlog storniranja (opciono)" style="width:240px;">
                 <button type="submit" class="btn-upozorenje"
                     data-potvrda="Stornirati ovu nabavku? Količine artikala biće vraćene na stanje.">
diff --git a/web/templates/stranice/pdv_kir.html b/web/templates/stranice/pdv_kir.html
index e9b17b9..013305c 100644
--- a/web/templates/stranice/pdv_kir.html
+++ b/web/templates/stranice/pdv_kir.html
@@ -27,7 +27,7 @@
                     Dnevni pazar
                 </a>
                 <form method="POST" action="/pdv/kir/backfill-prodaje" data-full-reload>
-                    <input type="hidden" name="csrf_token" value="{{.CsrfToken}}">
+                    <input type="hidden" name="_csrf" value="{{.CsrfToken}}">
                     <button type="submit" class="btn-sekundarno" style="font-size:13px;padding:8px 16px;white-space:nowrap;"
                         data-potvrda="Uvesti sve B2B prodaje koje još nisu u KIR-u?">
                         Uvezi iz prodaje
diff --git a/web/templates/stranice/pdv_kir_dnevni_pazar.html b/web/templates/stranice/pdv_kir_dnevni_pazar.html
index 005964e..34c89b7 100644
--- a/web/templates/stranice/pdv_kir_dnevni_pazar.html
+++ b/web/templates/stranice/pdv_kir_dnevni_pazar.html
@@ -81,7 +81,7 @@
     {{if gt .Promet.BrojNaloga 0}}
     <!-- forma za upis -->
     <form method="POST" action="/pdv/kir/dnevni-pazar">
-        <input type="hidden" name="csrf_token" value="{{.CsrfToken}}">
+        <input type="hidden" name="_csrf" value="{{.CsrfToken}}">
         <input type="hidden" name="datum" value="{{.Datum}}">
         <input type="hidden" name="osnovica_opsta" value="{{printf "%.2f" .Promet.OsnovicaOpsta}}">
         <input type="hidden" name="pdv_opsta" value="{{printf "%.2f" .Promet.PdvOpsta}}">
diff --git a/web/templates/stranice/pdv_kpr.html b/web/templates/stranice/pdv_kpr.html
index 394cc20..db29183 100644
--- a/web/templates/stranice/pdv_kpr.html
+++ b/web/templates/stranice/pdv_kpr.html
@@ -23,7 +23,7 @@
             <div style="display:flex;gap:8px;flex-wrap:wrap;align-items:center;">
                 {{if index .Dozvole "pdv.dodaj"}}
                 <form method="POST" action="/pdv/kpr/backfill-nabavke" data-full-reload>
-                    <input type="hidden" name="csrf_token" value="{{.CsrfToken}}">
+                    <input type="hidden" name="_csrf" value="{{.CsrfToken}}">
                     <button type="submit" class="btn-sekundarno" style="font-size:13px;padding:8px 16px;white-space:nowrap;"
                         data-potvrda="Uvesti sve nabavke koje još nisu u KPR-u?">
                         Uvezi iz nabavki
diff --git a/web/templates/stranice/popis.html b/web/templates/stranice/popis.html
index b1ff829..1f37881 100644
--- a/web/templates/stranice/popis.html
+++ b/web/templates/stranice/popis.html
@@ -237,7 +237,7 @@
 
     <!-- forma -->
     <form method="POST" action="/izvestaji/popis">
-        <input type="hidden" name="csrf_token" value="{{.CsrfToken}}">
+        <input type="hidden" name="_csrf" value="{{.CsrfToken}}">
 
         <div class="kartica animiraj" style="padding:0;overflow:hidden;">
             <div style="padding:12px 20px;border-bottom:0.5px solid var(--ivica);display:flex;align-items:center;justify-content:space-between;flex-wrap:wrap;gap:10px;" class="popis-forma-zaglavlje">
diff --git a/web/templates/stranice/prodaja_detalji.html b/web/templates/stranice/prodaja_detalji.html
index 18c88bd..2ddda1b 100644
--- a/web/templates/stranice/prodaja_detalji.html
+++ b/web/templates/stranice/prodaja_detalji.html
@@ -253,7 +253,7 @@
           </div>
         </div>
         <form method="POST" action="/prodaja/storno/{{.Nalog.ID}}" style="display:flex;flex-direction:column;gap:8px;align-items:flex-end;">
-          <input type="hidden" name="csrf_token" value="{{.CsrfToken}}">
+          <input type="hidden" name="_csrf" value="{{.CsrfToken}}">
           <input type="text" name="razlog" placeholder="Razlog storniranja (opciono)" style="width:240px;">
           <button type="submit" class="btn-upozorenje"
             data-potvrda="Stornirati nalog {{.Nalog.BrojNaloga}}?">
@@ -295,7 +295,7 @@
           </div>
         </div>
         <form method="POST" action="/prodaja/obrisi/{{.Nalog.ID}}">
-          <input type="hidden" name="csrf_token" value="{{.CsrfToken}}">
+          <input type="hidden" name="_csrf" value="{{.CsrfToken}}">
           <button type="submit" class="btn-upozorenje"
             data-potvrda="Stornirati nalog {{.Nalog.BrojNaloga}}? Količine artikala biće vraćene na stanje.">
             Ukloni nalog