m3 Security Fixes
This commit is contained in:
@@ -2,33 +2,29 @@
|
||||
|
||||
namespace Modules\M3\Http\Controllers;
|
||||
|
||||
use Modules\M3\Http\Controllers\Controller;
|
||||
use Str;
|
||||
use DB;
|
||||
use Config;
|
||||
use Illuminate\Http\Request;
|
||||
use Symfony\Component\HttpFoundation\Response;
|
||||
|
||||
use Str;
|
||||
|
||||
class whsePerfDetailsController extends Controller
|
||||
{
|
||||
|
||||
public static function index(Request $request) {
|
||||
public static function index(Request $request)
|
||||
{
|
||||
|
||||
// $date_in = date('Y-m-d', strtotime($request->date_in));
|
||||
$date_in = isset($request->date)?date('Y-m-d',strtotime($request->date)):date('Y-m-d');
|
||||
$date_in_minus_4_months = date('Y-m-d', strtotime($date_in .' -4 months'));
|
||||
$for = isset($request->for)?$request->for:'a';
|
||||
$date_in = isset($request->date) ? date('Y-m-d', strtotime($request->date)) : date('Y-m-d');
|
||||
$date_in_minus_4_months = date('Y-m-d', strtotime($date_in . ' -4 months'));
|
||||
$for = isset($request->for) ? $request->for : 'a';
|
||||
|
||||
$username = m3_user() !== '' ? Str::upper(trim(m3_user())) : '';
|
||||
# Get Logged User CO & WH & PL
|
||||
// Get Logged User CO & WH & PL
|
||||
$ICM428M = DB::connection(config('m3.connection', 'pgsql'))->table('icm428m')
|
||||
->select('R428US','R428CO', 'R428WH', 'R428PL')
|
||||
->where('R428US','=',$username)
|
||||
->select('R428US', 'R428CO', 'R428WH', 'R428PL')
|
||||
->where('R428US', '=', $username)
|
||||
->first();
|
||||
|
||||
$co = isset($ICM428M->R428CO) ? $ICM428M->R428CO : '';
|
||||
$whseno = isset($ICM428M->R428WH) ? $ICM428M->R428WH : '';
|
||||
$co = isset($ICM428M->R428CO) ? $ICM428M->R428CO : '';
|
||||
$whseno = isset($ICM428M->R428WH) ? $ICM428M->R428WH : '';
|
||||
$plantno = isset($ICM428M->R428PL) ? $ICM428M->R428PL : '';
|
||||
|
||||
$all = "tempfile4 as (
|
||||
@@ -64,27 +60,26 @@ class whsePerfDetailsController extends Controller
|
||||
select * from tempfile4 order by source";
|
||||
|
||||
switch ($for) {
|
||||
case "a":
|
||||
$stmt2=$all;
|
||||
case 'a':
|
||||
$stmt2 = $all;
|
||||
break;
|
||||
case "l":
|
||||
$stmt2=$ltl;
|
||||
case 'l':
|
||||
$stmt2 = $ltl;
|
||||
break;
|
||||
case "p":
|
||||
$stmt2=$parcel;
|
||||
case 'p':
|
||||
$stmt2 = $parcel;
|
||||
break;
|
||||
case "i":
|
||||
$stmt2=$io;
|
||||
case 'i':
|
||||
$stmt2 = $io;
|
||||
break;
|
||||
}
|
||||
#phpinfo();
|
||||
include($_SERVER['DOCUMENT_ROOT'].'/../../KPI2_update711M_SQL_main.inc.php');
|
||||
#var_dump($sqlstmt1.$stmt2);
|
||||
$perfDetails = DB::connection(config('m3.connection', 'pgsql'))->select($sqlstmt1.$stmt2);
|
||||
#var_dump($perfDetails);
|
||||
// phpinfo();
|
||||
include $_SERVER['DOCUMENT_ROOT'] . '/../../KPI2_update711M_SQL_main.inc.php';
|
||||
// var_dump($sqlstmt1.$stmt2);
|
||||
$perfDetails = DB::connection(config('m3.connection', 'pgsql'))->select($sqlstmt1 . $stmt2);
|
||||
// var_dump($perfDetails);
|
||||
|
||||
return view('m3::liberty-theme.pages.whsePerfDetails', compact('perfDetails','date_in','for'));
|
||||
return view('m3::liberty-theme.pages.whsePerfDetails', compact('perfDetails', 'date_in', 'for'));
|
||||
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user