m3 Security Fixes

This commit is contained in:
Mark Gregory
2026-09-16 17:25:53 +01:00
parent 8f37245e13
commit 1733291da2
39 changed files with 1290 additions and 1740 deletions
@@ -10,17 +10,17 @@ Change Warehouse
<div class="card">
<div class="card-body">
@if(session('success'))
<div class="alert alert-success">
{{ session('success') }}
</div>
@endif
@if(session('success'))
<div class="alert alert-success">
{{ session('success') }}
</div>
@endif
@if(session('error'))
<div class="alert alert-danger">
{{ session('error') }}
</div>
@endif
@if(session('error'))
<div class="alert alert-danger">
{{ session('error') }}
</div>
@endif
<form method="POST" action="{{ route('m3.userprofileupdate') }}">
@csrf
@@ -39,22 +39,22 @@ Change Warehouse
<div class="form-group">
<label>Div-Plt-Whs</label>
<select class="form-select" name="R428DPW" required>
<option value="" disabled hidden>Select</option>
@foreach ($IC670M as $key => $IC670MR)
@php
$selected = $ICM428M->R428CO == $IC670MR->WDCO && $ICM428M->R428WH == $IC670MR->WDWHS && $ICM428M->R428PL == $IC670MR->WDPL ?
'selected' : '';
@endphp
<option value="{{ trim($IC670MR->WDCO).trim($IC670MR->WDPL).trim($IC670MR->WDWHS) }}" {{ $selected }}>
{{ trim(Str::upper($IC670MR->WDWNAM)) }}
</option>
@endforeach
</select>
<option value="" disabled hidden>Select</option>
@foreach ($IC670M as $key => $IC670MR)
@php
$selected = $ICM428M->R428CO == $IC670MR->WDCO && $ICM428M->R428WH == $IC670MR->WDWHS && $ICM428M->R428PL == $IC670MR->WDPL ?
'selected' : '';
@endphp
<option value="{{ trim($IC670MR->WDCO).trim($IC670MR->WDPL).trim($IC670MR->WDWHS) }}" {{ $selected }}>
{{ trim(Str::upper($IC670MR->WDWNAM)) }}
</option>
@endforeach
</select>
</div>
<input type="hidden" name="referrer" id="referrer" value="">
<input type="hidden" name="referrer" id="referrer" value="">
<div class="form-group mt-3 mb-2">
<button type="submit" class="btn btn-primary">Update</button>
<button type="button" class="btn btn-primary" onclick="goBack()">Back</button>
<button type="button" class="btn btn-primary" onclick="goBack()">Back</button>
</div>
</form>
</div>
@@ -66,30 +66,30 @@ Change Warehouse
@section('scripts')
<script>
document.addEventListener("DOMContentLoaded", function () {
let referrer = document.referrer;
let currentPage = window.location.href.split('?')[0];
// Check if referrer is not the same as the current page
if (referrer && !referrer.startsWith(currentPage)) {
document.getElementById("referrer").value = referrer;
}
});
document.addEventListener("DOMContentLoaded", function () {
let referrer = document.referrer;
let currentPage = window.location.href.split('?')[0];
// Check if referrer is not the same as the current page
if (referrer && !referrer.startsWith(currentPage)) {
document.getElementById("referrer").value = referrer;
}
});
function goBack() {
let referrer = document.getElementById("referrer").value;
if (referrer) {
window.location.href = referrer;
} else {
// window.history.back();
window.history.go(-2);
}
}
function goBack() {
let referrer = document.getElementById("referrer").value;
if (referrer) {
window.location.href = referrer;
} else {
// window.history.back();
window.history.go(-2);
}
}
</script>
<script>
$(document).ready(function() {
$(document).ready(function() {
});
});
</script>
@endsection