mag/WMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

m3 Security Fixes

Browse Source
This commit is contained in:
Mark Gregory
2026-09-16 17:25:53 +01:00
parent 8f37245e13
commit 1733291da2
39 changed files with 1290 additions and 1740 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Modules/M3/Resources/views/liberty-theme/pages/M3Delivery.blade.php
+14 -14
View File
@@ -15,13 +15,13 @@
@endif
<!-- data-AT9DPW="$co.$plant.$whs">Add Record</button> -->
</div>
{{-- // AVCO AVCO CHARACTER 3 No ' ' Division
// AVWHS AVWHS CHARACTER 3 No ' ' Warehouse
// AVPLANT AVPLANT CHARACTER 3 No ' ' Plant
// AVDELMETH AVDELMETH CHARACTER 4 No ' ' Delivery method
// AVSHPVIA AVSHPVIA CHARACTER 4 No ' ' Sentinel ship via
// AVSHSRT AVSHSRT CHARACTER 6 No ' ' Sentinel route
// AVSHORCL AVSHORCL CHARACTER 3 No ' ' Sentinel intl code --}}
{{-- // AVCO AVCO CHARACTER 3 No ' ' Division
// AVWHS AVWHS CHARACTER 3 No ' ' Warehouse
// AVPLANT AVPLANT CHARACTER 3 No ' ' Plant
// AVDELMETH AVDELMETH CHARACTER 4 No ' ' Delivery method
// AVSHPVIA AVSHPVIA CHARACTER 4 No ' ' Sentinel ship via
// AVSHSRT AVSHSRT CHARACTER 6 No ' ' Sentinel route
// AVSHORCL AVSHORCL CHARACTER 3 No ' ' Sentinel intl code --}}
<div class="card-body">
<div class="table-responsive">
@@ -101,13 +101,13 @@
//
// Open Modal M3Delivery Edit
//
// AVCO AVCO CHARACTER 3 No ' ' Division
// AVWHS AVWHS CHARACTER 3 No ' ' Warehouse
// AVPLANT AVPLANT CHARACTER 3 No ' ' Plant
// AVDELMETH AVDELMETH CHARACTER 4 No ' ' Delivery method
// AVSHPVIA AVSHPVIA CHARACTER 4 No ' ' Sentinel ship via
// AVSHSRT AVSHSRT CHARACTER 6 No ' ' Sentinel route
// AVSHORCL AVSHORCL CHARACTER 3 No ' ' Sentinel intl code
// AVCO AVCO CHARACTER 3 No ' ' Division
// AVWHS AVWHS CHARACTER 3 No ' ' Warehouse
// AVPLANT AVPLANT CHARACTER 3 No ' ' Plant
// AVDELMETH AVDELMETH CHARACTER 4 No ' ' Delivery method
// AVSHPVIA AVSHPVIA CHARACTER 4 No ' ' Sentinel ship via
// AVSHSRT AVSHSRT CHARACTER 6 No ' ' Sentinel route
// AVSHORCL AVSHORCL CHARACTER 3 No ' ' Sentinel intl code
$(document).on('click', '#M3DeliveryEdit_click', function() {
// console.log($(this));
Modules/M3/Resources/views/liberty-theme/pages/fillBOL.blade.php
+12 -12
View File
@@ -10,17 +10,17 @@
<div class="card">
<div class="card-body">
@if(session('success'))
<div class="alert alert-success">
{{ session('success') }}
</div>
@endif
@if(session('success'))
<div class="alert alert-success">
{{ session('success') }}
</div>
@endif
@if(session('error'))
<div class="alert alert-danger">
{{ session('error') }}
</div>
@endif
@if(session('error'))
<div class="alert alert-danger">
{{ session('error') }}
</div>
@endif
<form method="POST" action="{{ route('m3.fillBOLPDF') }}">
@csrf
@@ -32,10 +32,10 @@
<label>Amount</label>
<input type="text" class="form-control" name="amount" value="">
</div>
<input type="hidden" name="referrer" id="referrer" value="">
<input type="hidden" name="referrer" id="referrer" value="">
<div class="form-group mt-3 mb-2">
<button type="submit" class="btn btn-primary">Fill PDF</button>
<button type="button" class="btn btn-primary" onclick="goBack()">Back</button>
<button type="button" class="btn btn-primary" onclick="goBack()">Back</button>
</div>
</form>
</div>
Modules/M3/Resources/views/liberty-theme/pages/fillBOL2.blade.php
+12 -12
View File
@@ -10,17 +10,17 @@
<div class="card">
<div class="card-body">
@if(session('success'))
<div class="alert alert-success">
{{ session('success') }}
</div>
@endif
@if(session('success'))
<div class="alert alert-success">
{{ session('success') }}
</div>
@endif
@if(session('error'))
<div class="alert alert-danger">
{{ session('error') }}
</div>
@endif
@if(session('error'))
<div class="alert alert-danger">
{{ session('error') }}
</div>
@endif
<form method="POST" action="{{ route('m3.fillBOL2PDF') }}">
@csrf
@@ -32,10 +32,10 @@
<label>Amount</label>
<input type="text" class="form-control" name="amount" value="">
</div>
<input type="hidden" name="referrer" id="referrer" value="">
<input type="hidden" name="referrer" id="referrer" value="">
<div class="form-group mt-3 mb-2">
<button type="submit" class="btn btn-primary">Fill PDF</button>
<button type="button" class="btn btn-primary" onclick="goBack()">Back</button>
<button type="button" class="btn btn-primary" onclick="goBack()">Back</button>
</div>
</form>
</div>
Modules/M3/Resources/views/liberty-theme/pages/ordersOnHoldReq.blade.php
+2 -2
View File
@@ -133,7 +133,7 @@ Solon Sentinel Portal - Orders On Hold Summary
return intVal(a) + intVal(b);
}, 0 ).toFixed(2);
var whtotal = api
var whtotal = api
.column( 3 )
.data()
.reduce( function (a, b) {
@@ -147,7 +147,7 @@ Solon Sentinel Portal - Orders On Hold Summary
return intVal(a) + intVal(b);
}, 0 ).toFixed(2);
var whtotalOnpick = api
var whtotalOnpick = api
.column( 5 )
.data()
.reduce( function (a, b) {
Modules/M3/Resources/views/liberty-theme/pages/ordersOnHoldReqOrder.blade.php
+1 -1
View File
@@ -403,5 +403,5 @@
}
});
});
</script>
</script>
@endsection
Modules/M3/Resources/views/liberty-theme/pages/userProfile.blade.php
+42 -42
View File
@@ -10,17 +10,17 @@ Change Warehouse
<div class="card">
<div class="card-body">
@if(session('success'))
<div class="alert alert-success">
{{ session('success') }}
</div>
@endif
@if(session('success'))
<div class="alert alert-success">
{{ session('success') }}
</div>
@endif
@if(session('error'))
<div class="alert alert-danger">
{{ session('error') }}
</div>
@endif
@if(session('error'))
<div class="alert alert-danger">
{{ session('error') }}
</div>
@endif
<form method="POST" action="{{ route('m3.userprofileupdate') }}">
@csrf
@@ -39,22 +39,22 @@ Change Warehouse
<div class="form-group">
<label>Div-Plt-Whs</label>
<select class="form-select" name="R428DPW" required>
<option value="" disabled hidden>Select</option>
@foreach ($IC670M as $key => $IC670MR)
@php
$selected = $ICM428M->R428CO == $IC670MR->WDCO && $ICM428M->R428WH == $IC670MR->WDWHS && $ICM428M->R428PL == $IC670MR->WDPL ?
'selected' : '';
@endphp
<option value="{{ trim($IC670MR->WDCO).trim($IC670MR->WDPL).trim($IC670MR->WDWHS) }}" {{ $selected }}>
{{ trim(Str::upper($IC670MR->WDWNAM)) }}
</option>
@endforeach
</select>
<option value="" disabled hidden>Select</option>
@foreach ($IC670M as $key => $IC670MR)
@php
$selected = $ICM428M->R428CO == $IC670MR->WDCO && $ICM428M->R428WH == $IC670MR->WDWHS && $ICM428M->R428PL == $IC670MR->WDPL ?
'selected' : '';
@endphp
<option value="{{ trim($IC670MR->WDCO).trim($IC670MR->WDPL).trim($IC670MR->WDWHS) }}" {{ $selected }}>
{{ trim(Str::upper($IC670MR->WDWNAM)) }}
</option>
@endforeach
</select>
</div>
<input type="hidden" name="referrer" id="referrer" value="">
<input type="hidden" name="referrer" id="referrer" value="">
<div class="form-group mt-3 mb-2">
<button type="submit" class="btn btn-primary">Update</button>
<button type="button" class="btn btn-primary" onclick="goBack()">Back</button>
<button type="button" class="btn btn-primary" onclick="goBack()">Back</button>
</div>
</form>
</div>
@@ -66,30 +66,30 @@ Change Warehouse
@section('scripts')
<script>
document.addEventListener("DOMContentLoaded", function () {
let referrer = document.referrer;
let currentPage = window.location.href.split('?')[0];
// Check if referrer is not the same as the current page
if (referrer && !referrer.startsWith(currentPage)) {
document.getElementById("referrer").value = referrer;
}
});
document.addEventListener("DOMContentLoaded", function () {
let referrer = document.referrer;
let currentPage = window.location.href.split('?')[0];
// Check if referrer is not the same as the current page
if (referrer && !referrer.startsWith(currentPage)) {
document.getElementById("referrer").value = referrer;
}
});
function goBack() {
let referrer = document.getElementById("referrer").value;
if (referrer) {
window.location.href = referrer;
} else {
// window.history.back();
window.history.go(-2);
}
}
function goBack() {
let referrer = document.getElementById("referrer").value;
if (referrer) {
window.location.href = referrer;
} else {
// window.history.back();
window.history.go(-2);
}
}
</script>
<script>
$(document).ready(function() {
$(document).ready(function() {
});
});
</script>
@endsection