FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files

64
resources/views/admin/users/fields.blade.php
View File

@@ -1,19 +1,19 @@
<div class="row">
<div class="form-group col-sm-4">
{!! Form::label('name', 'Name:') !!}
{!! Form::text('name', null, ['class' => 'form-control']) !!}
{{ Form::label('name', 'Name:') }}
{{ Form::text('name', null, ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('name') }}</p>
</div>
<div class="form-group col-sm-4">
{!! Form::label('email', 'Email:') !!}
{!! Form::text('email', null, ['class' => 'form-control']) !!}
{{ Form::label('email', 'Email:') }}
{{ Form::text('email', null, ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('email') }}</p>
</div>
<div class="form-group col-sm-4">
{!! Form::label('password', 'Password:') !!}
{!! Form::password('password', ['class' => 'form-control']) !!}
{{ Form::label('password', 'Password:') }}
{{ Form::password('password', ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('password') }}</p>
</div>
</div>
@@ -21,23 +21,23 @@
<div class="row">
<div class="form-group col-sm-6">
<div class="form-group">
{!! Form::label('country', 'Country:') !!} <br />
{!! Form::select('country', $countries, null, ['class' => 'select2' ]); !!}
{{ Form::label('country', 'Country:') }} <br />
{{ Form::select('country', $countries, null, ['class' => 'select2' ]) }}
<p class="text-danger">{{ $errors->first('country') }}</p>
</div>
<div class="form-group">
{!! Form::label('timezone', 'Timezone:') !!} <br/>
{!! Form::select('timezone', $timezones, null, ['id' => 'timezone', 'class' => 'select2' ]); !!}
{{ Form::label('timezone', 'Timezone:') }} <br/>
{{ Form::select('timezone', $timezones, null, ['id' => 'timezone', 'class' => 'select2' ]) }}
<p class="text-danger">{{ $errors->first('timezone') }}</p>
</div>
</div>
<div class="form-group col-sm-6">
{!! Form::label('home_airport_id', 'Home Airport:') !!}
{!! Form::select('home_airport_id', $airports, null , ['class' => 'form-control select2']) !!}
{{ Form::label('home_airport_id', 'Home Airport:') }}
{{ Form::select('home_airport_id', $airports, null , ['class' => 'form-control select2']) }}
<p class="text-danger">{{ $errors->first('home_airport_id') }}</p>
<br /><br />
{!! Form::label('curr_airport_id', 'Current Airport:') !!}
{!! Form::select('curr_airport_id', $airports, null , ['class' => 'form-control select2']) !!}
{{ Form::label('curr_airport_id', 'Current Airport:') }}
{{ Form::select('curr_airport_id', $airports, null , ['class' => 'form-control select2']) }}
<p class="text-danger">{{ $errors->first('curr_airport_id') }}</p>
</div>
@@ -45,37 +45,37 @@
<div class="row">
<div class="form-group col-sm-4">
{!! Form::label('airline_id', 'Airline:') !!}
{!! Form::select('airline_id', $airlines, null, ['class' => 'form-control select2', 'placeholder' => 'Select Airline']) !!}
{{ Form::label('airline_id', 'Airline:') }}
{{ Form::select('airline_id', $airlines, null, ['class' => 'form-control select2', 'placeholder' => 'Select Airline']) }}
</div>
<div class="form-group col-sm-4">
{!! Form::label('rank_id', 'Rank:') !!}
{!! Form::select('rank_id', $ranks, null, ['class' => 'form-control select2', 'placeholder' => 'Select Rank']) !!}
{{ Form::label('rank_id', 'Rank:') }}
{{ Form::select('rank_id', $ranks, null, ['class' => 'form-control select2', 'placeholder' => 'Select Rank']) }}
</div>
<div class="form-group col-sm-4">
{!! Form::label('roles', 'Roles:') !!}
{!! Form::select('roles[]', $roles, $user->roles->pluck('id'),
['class' => 'form-control select2', 'placeholder' => 'Select Roles', 'multiple']) !!}
{{ Form::label('roles', 'Roles:') }}
{{ Form::select('roles[]', $roles, $user->roles->pluck('id'),
['class' => 'form-control select2', 'placeholder' => 'Select Roles', 'multiple']) }}
</div>
</div>
<div class="row">
<div class="form-group col-sm-6">
{!! Form::label('state', 'State:') !!}
{{ Form::label('state', 'State:') }}
<label class="checkbox-inline">
{!! Form::select('state', UserState::labels(), null, ['class' => 'form-control select2']) !!}
{{ Form::select('state', UserState::labels(), null, ['class' => 'form-control select2']) }}
</label>
</div>
<!-- Submit Field -->
<div class="form-group col-sm-6 text-right">
{{--<a href="{!! route('admin.users.regen_apikey', ['id' => $user->id]) !!}" class="btn btn-warning"
{{--<a href="{{ route('admin.users.regen_apikey', ['id' => $user->id]) }}" class="btn btn-warning"
onclick="return confirm('Are you sure? This will reset this user\'s API key.')">new api key</a>--}}
&nbsp;
{!! Form::button('Save', ['type' => 'submit', 'class' => 'btn btn-success']) !!}
<a href="{!! route('admin.users.index') !!}" class="btn btn-default">Cancel</a>
{{ Form::button('Save', ['type' => 'submit', 'class' => 'btn btn-success']) }}
<a href="{{ route('admin.users.index') }}" class="btn btn-default">Cancel</a>
</div>
</div>
@@ -84,27 +84,27 @@
<table class="table table-hover">
{{--<tr>
<td>API Key</td>
<td>{!! $user->api_key !!}</td>
<td>{{ $user->api_key }}</td>
</tr>--}}
<tr>
<td>Total Flights</td>
<td>{!! $user->flights !!}</td>
<td>{{ $user->flights }}</td>
</tr>
<tr>
<td>Flight Time</td>
<td>{!! Utils::minutesToTimeString($user->flight_time) !!}</td>
<td>{{ Utils::minutesToTimeString($user->flight_time) }}</td>
</tr>
<tr>
<td>IP Address</td>
<td>{!! $user->last_ip !!}</td>
<td>{{ $user->last_ip }}</td>
</tr>
<tr>
<td>Registered On</td>
<td>{!! show_datetime($user->created_at) !!}</td>
<td>{{ show_datetime($user->created_at) }}</td>
</tr>
<tr>
<td>Last Login</td>
<td>{!! show_datetime($user->updated_at) !!}</td>
<td>{{ show_datetime($user->updated_at) }}</td>
</tr>
</table>
</div>