UbuntuandClaude Opus 4.6
420bcb37fd
- Fix all SQL injection vulnerabilities across Service_model, User_model, Module_model, Log_model, and Admin controller using parameterized queries - Add htmlspecialchars() to all user-controlled output in admin views (bookings, services, workers, service categories, login form) - Fix XSS in AJAX worker response and manage-booking-cancelled view - Add file extension whitelist (jpg, jpeg, png, gif, webp) to all uploads - Remove webshell (pentest2.php) from assets/img/profiles/ - Stop logging plaintext passwords on failed login attempts - Migrate database.php hostname from localhost to AWS RDS endpoint - Fix dropdown styling (white-on-white) in worker calendar view Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
33 lines
1.8 KiB
PHP
Executable File
33 lines
1.8 KiB
PHP
Executable File
<div class="logo-container">
|
|
<img src="<?php echo SITEURL;?>img/logo.png" width="100%">
|
|
</div>
|
|
<div class="siteName"></div>
|
|
<div class="main-container" style="background-color:#e8e4f8;">
|
|
<div class="login-container">
|
|
<div class="login-row">
|
|
<?php
|
|
if(isset($message)){
|
|
echo '<div class="message '.$message_class.'">'.$message.'</div>';
|
|
}
|
|
?>
|
|
|
|
</div>
|
|
<form method="post" action="<?php echo site_url().'login'?>">
|
|
<div class="login-row">
|
|
<label class="login-labels"><i class="fas fa-user-tie"></i></label><input type="text" class="loginform-text username" placeholder="Felhasználó név" name="username" id="username" value="<?php echo htmlspecialchars($username, ENT_QUOTES, 'UTF-8');?>">
|
|
</div>
|
|
<div class="login-row">
|
|
<label class="login-labels"><i class="fas fa-key"></i></label><input type="password" class="loginform-text password" placeholder="Jelszó" name="password" id="password" value="<?php echo htmlspecialchars($password, ENT_QUOTES, 'UTF-8');?>">
|
|
</div>
|
|
<div class="login-row">
|
|
<input type="hidden" name="remember" value="off">
|
|
<input type="checkbox" name="remember" id="remember" <?php echo $username!=''?' checked':'';?>><label for="remember" style="display:inline-block; text-align:left;margin-left:10px;margin-top:10px;cursor:pointer;">Jelszó megjegyzése</label>
|
|
</div>
|
|
<div class="login-row">
|
|
<input type="submit" class="button login" value="Bejelentkezés" name="sendLogin">
|
|
</div>
|
|
</form>
|
|
</div>
|
|
|
|
</div>
|
|
<div class="loginSubText"></div>
|