mag/WMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

M3 Security Fixes for Pass 41

Browse Source
This commit is contained in:
Mark Gregory
2026-09-17 13:37:19 +01:00
parent a9b63e43b3
commit 15773b0bce
56 changed files with 169 additions and 216 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Modules/M3/Resources/views/liberty-theme/partials/left-navigation.blade.php
+4 -4
View File
@@ -70,13 +70,13 @@
</a>
@if($power_users=='Y' || $admin_users=='Y')
<a class="nav-link {{ request()->is('userPickingStats4') || request()->is('userPickingStats4/*') ? 'active' : '' }}"
href="{{ route('m3.userPickingStats4') }}">
<a class="nav-link {{ request()->is('UserPickingStats4') || request()->is('UserPickingStats4/*') ? 'active' : '' }}"
href="{{ route('m3.UserPickingStats4') }}">
<i class="fa-fw fas fa-user-friends mr-1"></i>
Daily User Efficiency
</a>
<a class="nav-link {{ request()->is('userPickingStats5') || request()->is('userPickingStats5/*') ? 'active' : '' }}"
href="{{ route('m3.userPickingStats5') }}">
<a class="nav-link {{ request()->is('UserPickingStats5') || request()->is('UserPickingStats5/*') ? 'active' : '' }}"
href="{{ route('m3.UserPickingStats5') }}">
<i class="fa-fw fas fa-chart-bar mr-1"></i>
Graph User Efficiency
</a>
Modules/M3/Resources/views/liberty-theme/partials/modals/M3DeliveryAdd.blade.php
+4 -4
View File
@@ -11,7 +11,7 @@
<input type="hidden" id="addAVCO" name="addAVCO" value="{{$power_user->R428CO}}">
<input type="hidden" id="addAVPLANT" name="addAVPLANT" value="{{$power_user->R428PL}}">
<input type="hidden" id="addAVWHS" name="addAVWHS" value="{{$power_user->R428WH}}">
<table class="table table-condensed" >
<table role="presentation" class="table table-condensed" >
<thead>
</thead>
<tbody>
@@ -25,7 +25,7 @@
<tr>
<td><b>Ship Via</b></td> <!-- ALPHA -->
<td class="text-right">
<select id="addAVSHPVIA" name="addAVSHPVIA">
<select aria-label="Addavshpvia" id="addAVSHPVIA" name="addAVSHPVIA">
<option value="">Select Ship Via</option>
@foreach($shipvia as $key=>$val)
<option value="{{$val->AXCODE}}">{{$val->AXCODE}} - {{$val->AXDESC}}</option>
@@ -36,7 +36,7 @@
<tr>
<td><b>Sentinel Route</b></td> <!-- ALPHA -->
<td class="text-right">
<select id="addAVSHSRT" name="addAVSHSRT">
<select aria-label="Addavshsrt" id="addAVSHSRT" name="addAVSHSRT">
<option value=" "></option>
<option value="GR">GR</option>
<option value="PU">PU</option>
@@ -46,7 +46,7 @@
<tr>
<td><b>International Code</b></td> <!-- ALPHA -->
<td class="text-right">
<select id="addAVSHORCL" name="addAVSHORCL">
<select aria-label="Addavshorcl" id="addAVSHORCL" name="addAVSHORCL">
<option value=" " selected></option>
<option value="Y">002 - International</option>
</select>
Modules/M3/Resources/views/liberty-theme/partials/modals/M3DeliveryEdit.blade.php
+4 -4
View File
@@ -11,7 +11,7 @@
<input type="hidden" id="AVCO" name="AVCO" value="{{$power_user->R428CO}}">
<input type="hidden" id="AVPLANT" name="AVPLANT" value="{{$power_user->R428PL}}">
<input type="hidden" id="AVWHS" name="AVWHS" value="{{$power_user->R428WH}}">
<table class="table table-condensed">
<table role="presentation" class="table table-condensed">
<tbody>
<tr>
<td><b>Delivery Method</b></td> <!-- ALPHA -->
@@ -26,7 +26,7 @@
<td class="text-right">
<label for="OLD_AVSHPVIA" class="visually-hidden">OLD AVSHPVIA</label>
<input type="hidden" name="OLD_AVSHPVIA" id="OLD_AVSHPVIA">
<select id="AVSHPVIA" name="AVSHPVIA">
<select aria-label="Avshpvia" id="AVSHPVIA" name="AVSHPVIA">
<option value="">Select Ship Via</option>
@foreach($shipvia as $key=>$val)
<option value="{{$val->AXCODE}}">{{$val->AXCODE}} - {{$val->AXDESC}}</option>
@@ -39,7 +39,7 @@
<td class="text-right">
<label for="OLD_AVSHSRT" class="visually-hidden">OLD AVSHSRT</label>
<input type="hidden" name="OLD_AVSHSRT" id="OLD_AVSHSRT">
<select id="AVSHSRT" name="AVSHSRT">
<select aria-label="Avshsrt" id="AVSHSRT" name="AVSHSRT">
<option value=" "></option>
<option value="GR">GR</option>
<option value="PU">PU</option>
@@ -51,7 +51,7 @@
<td class="text-right">
<label for="OLD_AVSHORCL" class="visually-hidden">OLD AVSHORCL</label>
<input type="hidden" name="OLD_AVSHORCL" id="OLD_AVSHORCL">
<select id="AVSHORCL" name="AVSHORCL">
<select aria-label="Avshorcl" id="AVSHORCL" name="AVSHORCL">
<option value=" " selected></option>
<option value="Y">002 - International</option>
</select>
Modules/M3/Resources/views/liberty-theme/partials/modals/carrierAdd.blade.php
+1 -1
View File
@@ -8,7 +8,7 @@
</div>
<div class="modal-body">
<div class="table-responsive" id="carrierAddData">
<table class="table table-condensed" >
<table role="presentation" class="table table-condensed" >
<thead>
</thead>
<tbody>
Modules/M3/Resources/views/liberty-theme/partials/modals/carrierEdit.blade.php
+1 -1
View File
@@ -8,7 +8,7 @@
</div>
<div class="modal-body">
<div class="table-responsive" id="carrierEditData">
<table class="table table-condensed">
<table role="presentation" class="table table-condensed">
<tbody>
<tr>
<td><b>Carrier Number</b></td> <!-- ALPHA -->
Modules/M3/Resources/views/liberty-theme/partials/modals/qtyAdd.blade.php
+2 -2
View File
@@ -8,7 +8,7 @@
</div>
<div class="modal-body">
<div class="table-responsive" id="qtyAddData">
<table class="table table-condensed" >
<table role="presentation" class="table table-condensed" >
<thead>
</thead>
<tbody>
@@ -16,7 +16,7 @@
<td><label for="AT9DPW" class="col-form-label"><b>Div-Plt-Whs:</b></label></td>
<td>
<div class="mb-3">
<select class="form-select-sm" id="addAT9DPW"
<select aria-label="Addat9dpw" class="form-select-sm" id="addAT9DPW"
@if($power_user->R428PWRUSR=="N")
disabled
@endif
Modules/M3/Resources/views/liberty-theme/partials/modals/qtyEdit.blade.php
+1 -1
View File
@@ -8,7 +8,7 @@
</div>
<div class="modal-body">
<div class="table-responsive" id="qtyEditData">
<table class="table table-condensed">
<table role="presentation" class="table table-condensed">
<tbody>
<tr>
<td><label for="AT9DPW" class="col-form-label"><b>Div-Plt-Whs:</b></label></td>
Modules/M3/Resources/views/liberty-theme/partials/modals/shipToEdit.blade.php
+4 -4
View File
@@ -7,7 +7,7 @@
</div>
<div class="modal-body">
<div class="table-responsive" id="shipToEditData">
<table class="table table-condensed" >
<table role="presentation" class="table table-condensed" >
<thead>
<tr>
<td></td>
@@ -42,20 +42,20 @@
<td class="text-left smalltxt" id="ORIG_PSHCI">{!! (isset($original->PSHCI)&&trim($original->PSHCI)!=''?trim($original->PSHCI):'') !!}</td>
<td class="text-left smalltxt" id="OLD_SHSHCI">{!! (isset($order->SHSHCI)&&trim($order->SHSHCI)!=''?trim($order->SHSHCI):'') !!}</td>
<td class="text-right"><label for="sonar-input-e043dfd88b" class="visually-hidden">sonar input e043dfd88b</label>
<input maxlength="17" onkeypress='return ((event.charCode id="sonar-input-e043dfd88b">= 65 && event.charCode <= 90) || (event.charCode >= 97 && event.charCode <= 122) || (event.charCode == 32))' class="myinput toUpper" type="text" name="SHSHCI" value="{!! (isset($order->SHSHCI)&&trim($order->SHSHCI)!=''?trim($order->SHSHCI):' ') !!}"></td>
<input id="sonar-input-e043dfd88b" aria-label="Shshci" maxlength="17" onkeypress='return ((event.charCode >= 65 && event.charCode <= 90) || (event.charCode >= 97 && event.charCode <= 122) || (event.charCode == 32))' class="myinput toUpper" type="text" name="SHSHCI" value="{!! (isset($order->SHSHCI)&&trim($order->SHSHCI)!=''?trim($order->SHSHCI):' ') !!}"></td>
</tr>
<tr>
<td><b>State</b></td> <!-- ALPHA MAX -->
<td class="text-left smalltxt" id="ORIG_PSHST">{!! (isset($original->PSHST)&&trim($original->PSHST)!=''?trim($original->PSHST):'') !!}</td>
<td class="text-left smalltxt" id="OLD_SHSHST">{!! (isset($order->SHSHST)&&trim($order->SHSHST)!=''?trim($order->SHSHST):'') !!}</td>
<td class="text-right"><label for="sonar-input-967e1c005d" class="visually-hidden">sonar input 967e1c005d</label>
<input maxlength="2" onkeypress='return ((event.charCode id="sonar-input-967e1c005d">= 65 && event.charCode <= 90) || (event.charCode >= 97 && event.charCode <= 122) || (event.charCode == 32))' class="myinput toUpper" type="text" name="SHSHST" value="{!! (isset($order->SHSHST)&&trim($order->SHSHST)!=''?trim($order->SHSHST):' ') !!}"></td>
<input id="sonar-input-967e1c005d" aria-label="Shshst" maxlength="2" onkeypress='return ((event.charCode >= 65 && event.charCode <= 90) || (event.charCode >= 97 && event.charCode <= 122) || (event.charCode == 32))' class="myinput toUpper" type="text" name="SHSHST" value="{!! (isset($order->SHSHST)&&trim($order->SHSHST)!=''?trim($order->SHSHST):' ') !!}"></td>
<tr>
<td><b>Zip</b></td> <!-- MAX -->
<td class="text-left smalltxt" id="ORIG_PSHZP">{!! (isset($original->PSHZP)&&trim($original->PSHZP)!=''?trim($original->PSHZP):'') !!}</td>
<td class="text-left smalltxt" id="OLD_SHSHZP">{!! (isset($order->SHSHZP)&&trim($order->SHSHZP)!=''?trim($order->SHSHZP):'') !!}</td>
<td class="text-right"><label for="sonar-input-d755055c65" class="visually-hidden">SHSHZP</label>
<input maxlength="9" class="myinput toUpper" type="text" name="SHSHZP" value="{!! (isset($order->SHSHZP)&&trim($order->SHSHZP)!=''?trim($order->SHSHZP):' ') !!}" id="sonar-input-e043dfd88b"></td>
<input maxlength="9" class="myinput toUpper" type="text" name="SHSHZP" value="{!! (isset($order->SHSHZP)&&trim($order->SHSHZP)!=''?trim($order->SHSHZP):' ') !!}" id="sonar-input-d755055c65"></td>
</tr>
<tr>
<td><b>Country</b></td> <!-- ALPHA MAX -->
Modules/M3/Resources/views/liberty-theme/partials/modals/userAdd.blade.php
+2 -2
View File
@@ -8,12 +8,12 @@
</div>
<div class="modal-body">
<div class="table-responsive" id="userAddData">
<table class="table table-condensed">
<table role="presentation" class="table table-condensed">
<tbody>
<!-- R428DV R428PL R428WHS R428STS R428US R428FIRST R428FAMILY R428EMAIL R428EMPCDE R428ADMUSR R428PWRUSR -->
<tr>
<td>
<table class="table table-condensed">
<table role="presentation" class="table table-condensed">
<tr>
<input type="hidden" id="R428CO" name="R428CO">
<input type="hidden" id="R428PL" name="R428PL">
Modules/M3/Resources/views/liberty-theme/partials/modals/userEdit.blade.php
+2 -2
View File
@@ -8,12 +8,12 @@
</div>
<div class="modal-body">
<div class="table-responsive" id="userEditData">
<table class="table table-condensed">
<table role="presentation" class="table table-condensed">
<tbody>
<!-- R428DV R428PL R428WHS R428STS R428US R428FIRST R428FAMILY R428EMAIL R428EMPCDE R428ADMUSR R428PWRUSR -->
<tr>
<td>
<table class="table table-condensed">
<table role="presentation" class="table table-condensed">
<tr>
<input type="hidden" id="OLD_R428CO" name="OLD_R428CO">
<input type="hidden" id="OLD_R428PL" name="OLD_R428PL">
Modules/M3/Resources/views/liberty-theme/partials/modals/userPassword.blade.php
+2 -2
View File
@@ -8,11 +8,11 @@
</div>
<div class="modal-body">
<div class="table-responsive" id="userPasswordData">
<table class="table table-condensed">
<table role="presentation" class="table table-condensed">
<tbody>
<tr>
<td>
<table class="table table-condensed">
<table role="presentation" class="table table-condensed">
<tr>
<td><b>Enter a new password to re-enable user</b></td> <!-- Password -->
<td class="text-right">
Modules/M3/Resources/views/liberty-theme/partials/module-navigation.blade.php
+1 -1
View File
@@ -13,7 +13,7 @@
<a class="m3-module-nav-link {{ request()->routeIs('m3.OrderLinesOfClosedOrder') ? 'is-active' : '' }}" href="{{ route('m3.OrderLinesOfClosedOrder') }}"><i class="fas fa-file-excel"></i><span>Closed Orders</span></a>
@if($power_users === 'Y' || $admin_users === 'Y')
<a class="m3-module-nav-link {{ request()->routeIs('m3.carrierMaint') ? 'is-active' : '' }}" href="{{ route('m3.carrierMaint') }}"><i class="fas fa-route"></i><span>Carriers</span></a>
<a class="m3-module-nav-link {{ request()->routeIs('m3.userPickingStats4') || request()->routeIs('m3.userPickingStats5') ? 'is-active' : '' }}" href="{{ route('m3.userPickingStats4') }}"><i class="fas fa-chart-line"></i><span>Efficiency</span></a>
<a class="m3-module-nav-link {{ request()->routeIs('m3.UserPickingStats4') || request()->routeIs('m3.UserPickingStats5') ? 'is-active' : '' }}" href="{{ route('m3.UserPickingStats4') }}"><i class="fas fa-chart-line"></i><span>Efficiency</span></a>
<a class="m3-module-nav-link {{ request()->routeIs('m3.pendingClosure') ? 'is-active' : '' }}" href="{{ route('m3.pendingClosure') }}"><i class="fas fa-clock"></i><span>Pending Closure</span></a>
@endif
<a class="m3-module-nav-link {{ request()->routeIs('m3.ship-to.*') ? 'is-active' : '' }}" href="{{ route('m3.ship-to.index') }}"><i class="fas fa-warehouse"></i><span>Ship-to</span></a>