m3 Security Fixes

This commit is contained in:
Mark Gregory
2026-09-16 17:14:26 +01:00
parent 1602bdd72e
commit d68687f062
78 changed files with 1297 additions and 1228 deletions
@@ -10,17 +10,17 @@
<div class="card mb-4">
<div class="card-header">
@if($power_user->R428PWRUSR=="Y")
<button name="M3DeliveryAdd" type="button" class="btn btn-sm btn-info M3DeliveryAdd_click" id="M3DeliveryAdd_click"
<button name="M3DeliveryAdd" type="button" class="btn btn-sm btn-info M3DeliveryAdd_click" id="M3DeliveryAdd_click"
data-AT9DPW="{{$power_user->R428CO.$power_user->R428PL.$power_user->R428WH}}">Add Record</button>
@endif
<!-- data-AT9DPW="$co.$plant.$whs">Add Record</button> -->
</div>
{{-- // AVCO AVCO CHARACTER 3 No ' ' Division
// AVWHS AVWHS CHARACTER 3 No ' ' Warehouse
// AVPLANT AVPLANT CHARACTER 3 No ' ' Plant
// AVPLANT AVPLANT CHARACTER 3 No ' ' Plant
// AVDELMETH AVDELMETH CHARACTER 4 No ' ' Delivery method
// AVSHPVIA AVSHPVIA CHARACTER 4 No ' ' Sentinel ship via
// AVSHSRT AVSHSRT CHARACTER 6 No ' ' Sentinel route
// AVSHSRT AVSHSRT CHARACTER 6 No ' ' Sentinel route
// AVSHORCL AVSHORCL CHARACTER 3 No ' ' Sentinel intl code --}}
<div class="card-body">
@@ -38,7 +38,7 @@
</tr>
</thead>
<tbody>
<!-- if($no_data=="Y")
<!-- if($no_data=="Y")
<tr> <td colspan=10 style="text-align:center; background-color:yellow"> <b>No data retrieved for this user</b> <td> <tr>
else -->
@foreach($ICM664M as $key=>$val)
@@ -46,9 +46,9 @@
<td></td>
<td align="center">
@if($power_user->R428PWRUSR=="Y")
<button name="M3DeliveryEdit{{trim($val->AVDELMETH)}}" type="submit" class="btn btn-sm btn-info M3DeliveryEdit_click" id="M3DeliveryEdit_click"
data-AVDELMETH="{{$val->AVDELMETH}}" data-AVSHPVIA="{{trim($val->AVSHPVIA)}}" data-AVSHSRT="{{trim($val->AVSHSRT)}}"
data-AVSHORCL="{{trim($val->AVSHORCL)}}"
<button name="M3DeliveryEdit{{trim($val->AVDELMETH)}}" type="submit" class="btn btn-sm btn-info M3DeliveryEdit_click" id="M3DeliveryEdit_click"
data-AVDELMETH="{{$val->AVDELMETH}}" data-AVSHPVIA="{{trim($val->AVSHPVIA)}}" data-AVSHSRT="{{trim($val->AVSHSRT)}}"
data-AVSHORCL="{{trim($val->AVSHORCL)}}"
>Edit</button>
@endif
</td>
@@ -103,11 +103,11 @@
//
// AVCO AVCO CHARACTER 3 No ' ' Division
// AVWHS AVWHS CHARACTER 3 No ' ' Warehouse
// AVPLANT AVPLANT CHARACTER 3 No ' ' Plant
// AVPLANT AVPLANT CHARACTER 3 No ' ' Plant
// AVDELMETH AVDELMETH CHARACTER 4 No ' ' Delivery method
// AVSHPVIA AVSHPVIA CHARACTER 4 No ' ' Sentinel ship via
// AVSHSRT AVSHSRT CHARACTER 6 No ' ' Sentinel route
// AVSHORCL AVSHORCL CHARACTER 3 No ' ' Sentinel intl code
// AVSHSRT AVSHSRT CHARACTER 6 No ' ' Sentinel route
// AVSHORCL AVSHORCL CHARACTER 3 No ' ' Sentinel intl code
$(document).on('click', '#M3DeliveryEdit_click', function() {
// console.log($(this));
@@ -150,7 +150,7 @@
var changes_detected = 0;
var errors_found = 0;
// Retrieve the values we need to pass on
var NEW_AVDELMETH = $("#AVDELMETH").val();
var NEW_AVSHPVIA = $("#AVSHPVIA").val();
@@ -177,11 +177,11 @@
if(errors_found==0) {
var csrf = document.querySelector('meta[name="csrf-token"]').content;
var form_post = {
var form_post = {
'AVDELMETH': NEW_AVDELMETH,
'AVSHPVIA': NEW_AVSHPVIA,
'AVSHSRT': NEW_AVSHSRT,
'AVSHORCL': NEW_AVSHORCL,
'AVSHPVIA': NEW_AVSHPVIA,
'AVSHSRT': NEW_AVSHSRT,
'AVSHORCL': NEW_AVSHORCL,
'AVCO': NEW_AVCO,
'AVPLANT': NEW_AVPLANT,
'AVWHS': NEW_AVWHS,
@@ -234,11 +234,11 @@
var NEW_AVWHS = $("#addAVWHS").val();
var csrf = document.querySelector('meta[name="csrf-token"]').content;
var form_post = {
var form_post = {
'AVDELMETH': NEW_AVDELMETH,
'AVSHPVIA': NEW_AVSHPVIA,
'AVSHSRT': NEW_AVSHSRT,
'AVSHORCL': NEW_AVSHORCL,
'AVSHPVIA': NEW_AVSHPVIA,
'AVSHSRT': NEW_AVSHSRT,
'AVSHORCL': NEW_AVSHORCL,
'AVCO': NEW_AVCO,
'AVPLANT': NEW_AVPLANT,
'AVWHS': NEW_AVWHS,
@@ -274,9 +274,9 @@
});
}
});
});
});
//});
</script>
@endsection