FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
resources/views/admin/ranks/create.blade.php
View File

@@ -3,9 +3,9 @@
@section('content')
<div class="card border-blue-bottom">
<div class="content">
{!! Form::open(['route' => 'admin.ranks.store', 'class' => 'add_rank', 'method'=>'POST']) !!}
{{ Form::open(['route' => 'admin.ranks.store', 'class' => 'add_rank', 'method'=>'POST']) }}
@include('admin.ranks.fields')
{!! Form::close() !!}
{{ Form::close() }}
</div>
</div>
@endsection

4
resources/views/admin/ranks/edit.blade.php
View File

@@ -3,9 +3,9 @@
@section('content')
<div class="card border-blue-bottom">
<div class="content">
{!! Form::model($rank, ['route' => ['admin.ranks.update', $rank->id], 'method' => 'patch']) !!}
{{ Form::model($rank, ['route' => ['admin.ranks.update', $rank->id], 'method' => 'patch']) }}
@include('admin.ranks.fields')
{!! Form::close() !!}
{{ Form::close() }}
</div>
</div>

40
resources/views/admin/ranks/fields.blade.php
View File

@@ -1,28 +1,28 @@
<div class="row">
<!-- Name Field -->
<div class="form-group col-sm-6">
{!! Form::label('name', 'Name:') !!}
{!! Form::text('name', null, ['class' => 'form-control']) !!}
{{ Form::label('name', 'Name:') }}
{{ Form::text('name', null, ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('name') }}</p>
</div>
<div class="form-group col-md-6">
{!! Form::label('image_link', 'Image Link:') !!}
{!! Form::text('image_link', null, ['class' => 'form-control']) !!}
{{ Form::label('image_link', 'Image Link:') }}
{{ Form::text('image_link', null, ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('image_link') }}</p>
</div>
</div>
<div class="row">
<!-- Hours Field -->
<div class="form-group col-sm-4">
{!! Form::label('hours', 'Hours:') !!}
{!! Form::number('hours', null, ['class' => 'form-control']) !!}
{{ Form::label('hours', 'Hours:') }}
{{ Form::number('hours', null, ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('hours') }}</p>
</div>
<div class="form-group col-md-4">
{!! Form::label('acars_base_pay_rate', 'ACARS Base Pay Rate:') !!}
{!! Form::number('acars_base_pay_rate', null, ['min' => 0, 'class' => 'form-control']) !!}
{{ Form::label('acars_base_pay_rate', 'ACARS Base Pay Rate:') }}
{{ Form::number('acars_base_pay_rate', null, ['min' => 0, 'class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('acars_base_pay_rate') }}</p>
@component('admin.components.info')
Base rate, per-flight hour, for ACARS PIREPs.
@@ -31,8 +31,8 @@
</div>
<div class="form-group col-md-4">
{!! Form::label('manual_base_pay_rate', 'Manual Base Pay Rate:') !!}
{!! Form::number('manual_base_pay_rate', null, ['min' => 0, 'class' => 'form-control']) !!}
{{ Form::label('manual_base_pay_rate', 'Manual Base Pay Rate:') }}
{{ Form::number('manual_base_pay_rate', null, ['min' => 0, 'class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('manual_base_pay_rate') }}</p>
@component('admin.components.info')
Base rate, per-flight hour, for manually-filed PIREPs.
@@ -46,9 +46,9 @@
<div class="form-group col-sm-4 text-center">
<div class="checkbox">
<label class="checkbox-inline">
{!! Form::hidden('auto_approve_acars', false) !!}
{!! Form::checkbox('auto_approve_acars') !!}
{!! Form::label('auto_approve_acars', 'Auto Approve ACARS PIREPs') !!}
{{ Form::hidden('auto_approve_acars', false) }}
{{ Form::checkbox('auto_approve_acars') }}
{{ Form::label('auto_approve_acars', 'Auto Approve ACARS PIREPs') }}
</label>
</div>
</div>
@@ -57,9 +57,9 @@
<div class="form-group col-sm-4 text-center">
<div class="checkbox">
<label class="checkbox-inline">
{!! Form::hidden('auto_approve_manual', false) !!}
{!! Form::checkbox('auto_approve_manual') !!}
{!! Form::label('auto_approve_manual', 'Auto Approve Manual PIREPs') !!}
{{ Form::hidden('auto_approve_manual', false) }}
{{ Form::checkbox('auto_approve_manual') }}
{{ Form::label('auto_approve_manual', 'Auto Approve Manual PIREPs') }}
</label>
</div>
</div>
@@ -68,9 +68,9 @@
<div class="form-group col-sm-4 text-center">
<div class="checkbox">
<label class="checkbox-inline">
{!! Form::hidden('auto_promote', false) !!}
{!! Form::checkbox('auto_promote') !!}
{!! Form::label('auto_promote', 'Auto Promote') !!}
{{ Form::hidden('auto_promote', false) }}
{{ Form::checkbox('auto_promote') }}
{{ Form::label('auto_promote', 'Auto Promote') }}
</label>
</div>
</div>
@@ -79,7 +79,7 @@
<div class="row">
<div class="col-sm-12">
<div class="text-right">
{!! Form::button('Save', ['type' => 'submit', 'class' => 'btn btn-success']) !!}
{{ Form::button('Save', ['type' => 'submit', 'class' => 'btn btn-success']) }}
</div>
</div>
</div>

2
resources/views/admin/ranks/index.blade.php
View File

@@ -2,7 +2,7 @@
@section('title', 'Ranks')
@section('actions')
<li>
<a href="{!! route('admin.ranks.create') !!}">
<a href="{{ route('admin.ranks.create') }}">
<i class="ti-plus"></i>
Add New</a>
</li>

2
resources/views/admin/ranks/scripts.blade.php
View File

@@ -7,7 +7,7 @@ function setEditable() {
type: 'text',
mode: 'inline',
emptytext: 'inherited',
url: '{!! url('/admin/ranks/'.$rank->id.'/subfleets') !!}',
url: '{{ url('/admin/ranks/'.$rank->id.'/subfleets') }}',
title: 'Enter override value',
ajaxOptions: {'type': 'put'},
params: function (params) {

2
resources/views/admin/ranks/show.blade.php
View File

@@ -2,7 +2,7 @@
@section('content')
<section class="content-header">
<h1>{!! $rank->name !!}</h1>
<h1>{{ $rank->name }}</h1>
</section>
<div class="content">
<div class="box box-primary">

32
resources/views/admin/ranks/show_fields.blade.php
View File

@@ -1,48 +1,48 @@
<!-- Id Field -->
<div class="form-group">
{!! Form::label('id', 'Id:') !!}
<p>{!! $rank->id !!}</p>
{{ Form::label('id', 'Id:') }}
<p>{{ $rank->id }}</p>
</div>
<!-- Name Field -->
<div class="form-group">
{!! Form::label('name', 'Name:') !!}
<p>{!! $rank->name !!}</p>
{{ Form::label('name', 'Name:') }}
<p>{{ $rank->name }}</p>
</div>
<!-- Hours Field -->
<div class="form-group">
{!! Form::label('hours', 'Hours:') !!}
<p>{!! $rank->hours !!}</p>
{{ Form::label('hours', 'Hours:') }}
<p>{{ $rank->hours }}</p>
</div>
<!-- Auto Approve Acars Field -->
<div class="form-group">
{!! Form::label('auto_approve_acars', 'Auto Approve Acars:') !!}
<p>{!! $rank->auto_approve_acars !!}</p>
{{ Form::label('auto_approve_acars', 'Auto Approve Acars:') }}
<p>{{ $rank->auto_approve_acars }}</p>
</div>
<!-- Auto Approve Manual Field -->
<div class="form-group">
{!! Form::label('auto_approve_manual', 'Auto Approve Manual:') !!}
<p>{!! $rank->auto_approve_manual !!}</p>
{{ Form::label('auto_approve_manual', 'Auto Approve Manual:') }}
<p>{{ $rank->auto_approve_manual }}</p>
</div>
<!-- Auto Promote Field -->
<div class="form-group">
{!! Form::label('auto_promote', 'Auto Promote:') !!}
<p>{!! $rank->auto_promote !!}</p>
{{ Form::label('auto_promote', 'Auto Promote:') }}
<p>{{ $rank->auto_promote }}</p>
</div>
<!-- Created At Field -->
<div class="form-group">
{!! Form::label('created_at', 'Created At:') !!}
<p>{!! show_datetime($rank->created_at) !!}</p>
{{ Form::label('created_at', 'Created At:') }}
<p>{{ show_datetime($rank->created_at) }}</p>
</div>
<!-- Updated At Field -->
<div class="form-group">
{!! Form::label('updated_at', 'Updated At:') !!}
<p>{!! show_datetime($rank->updated_at) !!}</p>
{{ Form::label('updated_at', 'Updated At:') }}
<p>{{ show_datetime($rank->updated_at) }}</p>
</div>

36
resources/views/admin/ranks/subfleets.blade.php
View File

@@ -12,27 +12,27 @@
<tbody>
@foreach($rank->subfleets as $sf)
<tr>
<td>{!! $sf->airline->name !!}</td>
<td>{!! $sf->name !!} ({!! $sf->type !!})</td>
<td>{{ $sf->airline->name }}</td>
<td>{{ $sf->name }} ({{ $sf->type }})</td>
<td style="text-align: center;">
<a href="#" data-pk="{!! $sf->id !!}"
data-name="acars_pay">{!! $sf->pivot->acars_pay !!}</a>
<a href="#" data-pk="{{ $sf->id }}"
data-name="acars_pay">{{ $sf->pivot->acars_pay }}</a>
</td>
<td style="text-align: center;">
<a href="#" data-pk="{!! $sf->id !!}"
data-name="manual_pay">{!! $sf->pivot->manual_pay !!}</a>
<a href="#" data-pk="{{ $sf->id }}"
data-name="manual_pay">{{ $sf->pivot->manual_pay }}</a>
</td>
<td style="width: 10%; text-align: center;" class="form-inline">
{!! Form::open(['url' => '/admin/ranks/'.$rank->id.'/subfleets', 'method' => 'delete', 'class' => 'pjax_form']) !!}
{!! Form::hidden('subfleet_id', $sf->id) !!}
{{ Form::open(['url' => '/admin/ranks/'.$rank->id.'/subfleets', 'method' => 'delete', 'class' => 'pjax_form']) }}
{{ Form::hidden('subfleet_id', $sf->id) }}
<div class='btn-group'>
{!! Form::button('<i class="fa fa-times"></i>',
{{ Form::button('<i class="fa fa-times"></i>',
['type' => 'submit',
'class' => 'btn btn-sm btn-danger btn-icon'])
!!}
}}
</div>
{!! Form::close() !!}
{{ Form::close() }}
</td>
</tr>
@endforeach
@@ -42,19 +42,19 @@
<div class="row">
<div class="col-lg-12">
<div class="input-group input-group-lg pull-right">
{!! Form::open(['url' => url('/admin/ranks/'.$rank->id.'/subfleets'),
{{ Form::open(['url' => url('/admin/ranks/'.$rank->id.'/subfleets'),
'method' => 'post',
'class' => 'pjax_form form-inline'
])
!!}
{!! Form::select('subfleet_id', $avail_subfleets, null, [
}}
{{ Form::select('subfleet_id', $avail_subfleets, null, [
'placeholder' => 'Select Subfleet',
'class' => 'select2 form-control input-lg'])
!!}
{!! Form::button('<i class="fa fa-plus"></i> Add',
}}
{{ Form::button('<i class="fa fa-plus"></i> Add',
['type' => 'submit',
'class' => 'btn btn-success btn-small']) !!}
{!! Form::close() !!}
'class' => 'btn btn-success btn-small']) }}
{{ Form::close() }}
</div>
</div>
</div>

12
resources/views/admin/ranks/table.blade.php
View File

@@ -11,8 +11,8 @@
<tbody>
@foreach($ranks as $rank)
<tr>
<td><a href="{!! route('admin.ranks.edit', [$rank->id]) !!}">{!! $rank->name !!}</a></td>
<td class="text-center">{!! $rank->hours !!}</td>
<td><a href="{{ route('admin.ranks.edit', [$rank->id]) }}">{{ $rank->name }}</a></td>
<td class="text-center">{{ $rank->hours }}</td>
<td class="text-center">
@if($rank->auto_approve_acars)
<span class="label label-success">Yes</span>
@@ -35,11 +35,11 @@
@endif
</td>
<td class="text-right">
{!! Form::open(['route' => ['admin.ranks.destroy', $rank->id], 'method' => 'delete']) !!}
<a href="{!! route('admin.ranks.edit', [$rank->id]) !!}" class='btn btn-sm btn-success btn-icon'>
{{ Form::open(['route' => ['admin.ranks.destroy', $rank->id], 'method' => 'delete']) }}
<a href="{{ route('admin.ranks.edit', [$rank->id]) }}" class='btn btn-sm btn-success btn-icon'>
<i class="fas fa-pencil-alt"></i></a>
{!! Form::button('<i class="fa fa-times"></i>', ['type' => 'submit', 'class' => 'btn btn-sm btn-danger btn-icon', 'onclick' => "return confirm('Are you sure?')"]) !!}
{!! Form::close() !!}
{{ Form::button('<i class="fa fa-times"></i>', ['type' => 'submit', 'class' => 'btn btn-sm btn-danger btn-icon', 'onclick' => "return confirm('Are you sure?')"]) }}
{{ Form::close() }}
</td>
</tr>
@endforeach