FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
resources/views/admin/airlines/create.blade.php
View File

@@ -3,9 +3,9 @@
@section('content')
<div class="card border-blue-bottom">
<div class="content">
{!! Form::open(['route' => 'admin.airlines.store']) !!}
{{ Form::open(['route' => 'admin.airlines.store']) }}
@include('admin.airlines.fields')
{!! Form::close() !!}
{{ Form::close() }}
</div>
</div>
@endsection

4
resources/views/admin/airlines/edit.blade.php
View File

@@ -3,9 +3,9 @@
@section('content')
<div class="card border-blue-bottom">
<div class="content">
{!! Form::model($airline, ['route' => ['admin.airlines.update', $airline->id], 'method' => 'patch']) !!}
{{ Form::model($airline, ['route' => ['admin.airlines.update', $airline->id], 'method' => 'patch']) }}
@include('admin.airlines.fields')
{!! Form::close() !!}
{{ Form::close() }}
</div>
</div>
@endsection

30
resources/views/admin/airlines/fields.blade.php
View File

@@ -1,28 +1,28 @@
<div class="row">
<!-- Code Field -->
<div class="form-group col-sm-6">
{!! Form::label('icao', 'Code:') !!}&nbsp;<span class="required">*</span>
{!! Form::text('icao', null, ['class' => 'form-control']) !!}
{{ Form::label('icao', 'Code:') }}&nbsp;<span class="required">*</span>
{{ Form::text('icao', null, ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('icao') }}</p>
</div>
<!-- Name Field -->
<div class="form-group col-sm-6">
{!! Form::label('name', 'Name:') !!}&nbsp;<span class="required">*</span>
{!! Form::text('name', null, ['class' => 'form-control']) !!}
{{ Form::label('name', 'Name:') }}&nbsp;<span class="required">*</span>
{{ Form::text('name', null, ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('name') }}</p>
</div>
</div>
<div class="row">
<div class="form-group col-sm-6">
{!! Form::label('iata', 'IATA:') !!}
{!! Form::text('iata', null, ['class' => 'form-control']) !!}
{{ Form::label('iata', 'IATA:') }}
{{ Form::text('iata', null, ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('iata') }}</p>
</div>
<div class="form-group col-sm-6">
{!! Form::label('logo', 'Logo URL:') !!}
{!! Form::text('logo', null, ['class' => 'form-control']) !!}
{{ Form::label('logo', 'Logo URL:') }}
{{ Form::text('logo', null, ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('logo') }}</p>
</div>
@@ -30,17 +30,17 @@
<div class="row">
<div class="form-group col-sm-6">
{!! Form::label('country', 'Country:') !!} <br/>
{!! Form::select('country', $countries, null, ['class' => 'form-control select2' ]); !!}
{{ Form::label('country', 'Country:') }} <br/>
{{ Form::select('country', $countries, null, ['class' => 'form-control select2' ]) }}
<p class="text-danger">{{ $errors->first('country') }}</p>
</div>
<div class="form-group col-sm-6">
{!! Form::label('active', 'Active:') !!}
{{ Form::label('active', 'Active:') }}
<br />
<label class="checkbox-inline">
{!! Form::hidden('active', 0, false) !!}
{!! Form::checkbox('active', 1, null) !!}
{{ Form::hidden('active', 0, false) }}
{{ Form::checkbox('active', 1, null) }}
</label>
</div>
</div>
@@ -48,8 +48,8 @@
<!-- Submit Field -->
<div class="form-group col-sm-12">
<div class="pull-right">
{!! Form::button('Save', ['type' => 'submit', 'class' => 'btn btn-success']) !!}
<a href="{!! route('admin.airlines.index') !!}" class="btn btn-default">Cancel</a>
{{ Form::button('Save', ['type' => 'submit', 'class' => 'btn btn-success']) }}
<a href="{{ route('admin.airlines.index') }}" class="btn btn-default">Cancel</a>
</div>
</div>
</div>

2
resources/views/admin/airlines/index.blade.php
View File

@@ -3,7 +3,7 @@
@section('title', 'Airlines')
@section('actions')
<li>
<a href="{!! route('admin.airlines.create') !!}">
<a href="{{ route('admin.airlines.create') }}">
<i class="ti-plus"></i>
Add New</a>
</li>

2
resources/views/admin/airlines/show.blade.php
View File

@@ -11,7 +11,7 @@
<div class="box-body">
<div class="row" style="padding-left: 20px">
@include('admin.airlines.show_fields')
<a href="{!! route('admin.airlines.index') !!}" class="btn btn-default">Back</a>
<a href="{{ route('admin.airlines.index') }}" class="btn btn-default">Back</a>
</div>
</div>
</div>

28
resources/views/admin/airlines/show_fields.blade.php
View File

@@ -1,40 +1,40 @@
<!-- Code Field -->
<div class="form-group">
{!! Form::label('icao', 'ICAO:') !!}
<p>{!! $airlines->icao !!}</p>
{{ Form::label('icao', 'ICAO:') }}
<p>{{ $airlines->icao }}</p>
</div>
<div class="form-group">
{!! Form::label('iata', 'IATA:') !!}
<p>{!! $airlines->iata !!}</p>
{{ Form::label('iata', 'IATA:') }}
<p>{{ $airlines->iata }}</p>
</div>
<!-- Name Field -->
<div class="form-group">
{!! Form::label('name', 'Name:') !!}
<p>{!! $airlines->name !!}</p>
{{ Form::label('name', 'Name:') }}
<p>{{ $airlines->name }}</p>
</div>
<div class="form-group">
{!! Form::label('logo', 'Logo URL:') !!}
<p>{!! $airlines->logo !!}</p>
{{ Form::label('logo', 'Logo URL:') }}
<p>{{ $airlines->logo }}</p>
</div>
<!-- Active Field -->
<div class="form-group">
{!! Form::label('active', 'Active:') !!}
<p>{!! $airlines->active !!}</p>
{{ Form::label('active', 'Active:') }}
<p>{{ $airlines->active }}</p>
</div>
<!-- Created At Field -->
<div class="form-group">
{!! Form::label('created_at', 'Created At:') !!}
<p>{!! show_datetime($airlines->created_at) !!}</p>
{{ Form::label('created_at', 'Created At:') }}
<p>{{ show_datetime($airlines->created_at) }}</p>
</div>
<!-- Updated At Field -->
<div class="form-group">
{!! Form::label('updated_at', 'Updated At:') !!}
<p>{!! show_datetime($airlines->updated_at) !!}</p>
{{ Form::label('updated_at', 'Updated At:') }}
<p>{{ show_datetime($airlines->updated_at) }}</p>
</div>

14
resources/views/admin/airlines/table.blade.php
View File

@@ -10,12 +10,12 @@
<tr>
<td>
@if(filled($al->country))
<span class="flag-icon flag-icon-{!! $al->country !!}"></span>
<span class="flag-icon flag-icon-{{ $al->country }}"></span>
&nbsp;
@endif
<a href="{!! route('admin.airlines.edit', [$al->id]) !!}">{!! $al->code !!}</a>
<a href="{{ route('admin.airlines.edit', [$al->id]) }}">{{ $al->code }}</a>
</td>
<td>{!! $al->name !!}</td>
<td>{{ $al->name }}</td>
<td class="text-center">
@if($al->active == 1)
<span class="label label-success">Active</span>
@@ -24,11 +24,11 @@
@endif
</td>
<td class="text-right">
{!! Form::open(['route' => ['admin.airlines.destroy', $al->id], 'method' => 'delete']) !!}
<a href="{!! route('admin.airlines.edit', [$al->id]) !!}"
{{ Form::open(['route' => ['admin.airlines.destroy', $al->id], 'method' => 'delete']) }}
<a href="{{ route('admin.airlines.edit', [$al->id]) }}"
class='btn btn-sm btn-success btn-icon'><i class="fas fa-pencil-alt"></i></a>
{!! Form::button('<i class="fa fa-times"></i>', ['type' => 'submit', 'class' => 'btn btn-sm btn-danger btn-icon', 'onclick' => "return confirm('Are you sure?')"]) !!}
{!! Form::close() !!}
{{ Form::button('<i class="fa fa-times"></i>', ['type' => 'submit', 'class' => 'btn btn-sm btn-danger btn-icon', 'onclick' => "return confirm('Are you sure?')"]) }}
{{ Form::close() }}
</td>
</tr>
@endforeach