mag/WMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

m3 Security Fixes

Browse Source
This commit is contained in:
Mark Gregory
2026-09-16 17:14:26 +01:00
parent 1602bdd72e
commit d68687f062
78 changed files with 1297 additions and 1228 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Modules/M3/Http/Controllers/userProfileController.php
+8 -8
View File
@@ -29,7 +29,7 @@ class userProfileController extends Controller
# Check if user is eligible for Profile update
if (isset($ICM428M->R428US)) {
return view('m3::liberty-theme.pages.userProfile', compact('ICM428M','IC670M'));
}
}
else{
abort(404);
}
@@ -41,7 +41,7 @@ class userProfileController extends Controller
$R428US = isset($request->R428US) ? trim($request->R428US) : '';
$R428DPW = isset($request->R428DPW) ? trim($request->R428DPW) : '';
$R428CO = substr($R428DPW, 0, 3);
$R428PL = substr($R428DPW, 3, 3);
$R428WH = substr($R428DPW, 6, 3);
@@ -49,10 +49,10 @@ class userProfileController extends Controller
if ($R428US!='') {
# Update record to ICM428M
DB::connection(config('m3.connection', 'pgsql'))->update("update ICM428M
DB::connection(config('m3.connection', 'pgsql'))->update("update ICM428M
set R428CO='$R428CO', R428PL='$R428PL', R428WH='$R428WH'
where R428US='$R428US'");
// return "success";
return redirect('/userprofile')->with('success', 'Profile updated successfully!');
}
@@ -67,7 +67,7 @@ class userProfileController extends Controller
$R428US = isset($request->R428US) ? trim($request->R428US) : '';
$R428DPW = isset($request->R428DPW) ? trim($request->R428DPW) : '';
$R428CO = substr($R428DPW, 0, 3);
$R428PL = substr($R428DPW, 3, 3);
$R428WH = substr($R428DPW, 6, 3);
@@ -75,10 +75,10 @@ class userProfileController extends Controller
if ($R428US!='') {
# Update record to ICM428M
DB::connection(config('m3.connection', 'pgsql'))->update("update ICM428M
DB::connection(config('m3.connection', 'pgsql'))->update("update ICM428M
set R428CO='$R428CO', R428PL='$R428PL', R428WH='$R428WH'
where R428US='$R428US'");
return response()->json(['success'=>true]);
}
else{
@@ -86,5 +86,5 @@ class userProfileController extends Controller
}
}
}