From f7c419c25ef57401e148495378d13d739311d16c Mon Sep 17 00:00:00 2001
From: DevSoftTech Server <info.devsofttech@gmail.com>
Date: Fri, 17 Apr 2026 04:45:35 +0530
Subject: [PATCH] Harden OPD scan delete link fallback when modal CSRF helpers
 are unavailable

---
 app/Views/billing/opd_scan_carousel_list.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/Views/billing/opd_scan_carousel_list.php b/app/Views/billing/opd_scan_carousel_list.php
index 3c9e651..9838677 100644
--- a/app/Views/billing/opd_scan_carousel_list.php
+++ b/app/Views/billing/opd_scan_carousel_list.php
@@ -29,7 +29,7 @@
                             <a
                                 href="<?= base_url('Opd/opd_file_delete/' . (int) ($item['id'] ?? 0)) . '?opd_id=' . (int) ($opdid ?? 0) ?>"
                                 class="btn btn-outline-danger btn-sm"
-                                onclick="if (typeof window.deleteOpdScanFromList === 'function') { window.deleteOpdScanFromList(<?= (int) ($item['id'] ?? 0) ?>, <?= (int) ($opdid ?? 0) ?>); return false; } return window.confirm('Delete this scan document?');"
+                                onclick="if (!window.confirm('Delete this scan document?')) { return false; } if (typeof window.deleteOpdScanFromList === 'function' && typeof getCsrfPair === 'function' && typeof updateCsrf === 'function') { window.deleteOpdScanFromList(<?= (int) ($item['id'] ?? 0) ?>, <?= (int) ($opdid ?? 0) ?>); return false; } return true;"
                             >Delete</a>
                         <?php else : ?>
                             <span class="badge bg-secondary">Delete: within 24h or same date</span>