m3 Security Fixes

This commit is contained in:
Mark Gregory
2026-09-16 17:14:26 +01:00
parent 1602bdd72e
commit d68687f062
78 changed files with 1297 additions and 1228 deletions
@@ -13,7 +13,7 @@ class userPickingStats4 extends Controller
{
#$start = microtime(true);
#dd($request);
#dd($request);
// Filter by date
if (isset($request->dates)) {
$date = $request->dates;
@@ -30,7 +30,7 @@ class userPickingStats4 extends Controller
#$user_array = Config::get('arrays.user_array');
#618
# Get Logged User CO & WH
# Get Logged User CO & WH
# Get Users from ICM428M
$co = '';
$whs = '';
@@ -91,7 +91,7 @@ class userPickingStats4 extends Controller
$mth = substr($starting, 5, 2);
$day = substr($starting, 8, 2);
$sqlstmt = "select oppno, sum(cast (hrs as integer)+ (hrs-cast (hrs as integer))/0.6) as hrs from LBPF
where empno=$empno and lbyr=$yr and lbmo=$mth and lbdy=$day
where empno=$empno and lbyr=$yr and lbmo=$mth and lbdy=$day
and oppno in ($payrollCodes)
group by oppno";
@@ -145,7 +145,7 @@ class userPickingStats4 extends Controller
}
if (!empty($statistic4)) {
#echo "in !empty<br>";
// Initialize the Monitor array
// Initialize the Monitor array
foreach ($statistic4 as $key => $val) {
// Initialize these variables in case not existant in LBPF
@@ -259,8 +259,8 @@ class userPickingStats4 extends Controller
}
#echo "<pre>";
#print_r($request);
#echo "<pre>";
#print_r($request);
#print_r($perf_array); print_r($monitor_array);
// return encoded json if input field named format is json
@@ -294,7 +294,7 @@ class userPickingStats4 extends Controller
"actualLPH" => $actualLPH,
"grossHours" => $grossHours
);
#echo "<pre>"; print_r($json_data);
#echo "<pre>"; print_r($json_data);
return json_encode($json_data);
} else {