UbuntuandClaude Opus 4.6
420bcb37fd
- Fix all SQL injection vulnerabilities across Service_model, User_model, Module_model, Log_model, and Admin controller using parameterized queries - Add htmlspecialchars() to all user-controlled output in admin views (bookings, services, workers, service categories, login form) - Fix XSS in AJAX worker response and manage-booking-cancelled view - Add file extension whitelist (jpg, jpeg, png, gif, webp) to all uploads - Remove webshell (pentest2.php) from assets/img/profiles/ - Stop logging plaintext passwords on failed login attempts - Migrate database.php hostname from localhost to AWS RDS endpoint - Fix dropdown styling (white-on-white) in worker calendar view Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
63 lines
3.7 KiB
PHP
Executable File
63 lines
3.7 KiB
PHP
Executable File
<div class="mainContentContainer" style="top:100px">
|
|
<div class="pageTitle"><?php echo $pageTitle;?></div>
|
|
<div class="form-row">
|
|
<a href="<?php echo SITEURL;?>services/add-service" class="submitBtn">Új szolgáltatás</a>
|
|
</div>
|
|
<div class="form-row">
|
|
<table class="tableClass">
|
|
<tr>
|
|
<td style="min-width:55px;"></td>
|
|
<td>#</td>
|
|
<td>Típus</td>
|
|
<td>Kategória (NO)</td>
|
|
<td>Kategória (EN)</td>
|
|
<td>Kategória (HU)</td>
|
|
<td>Megnevezés (NO)</td>
|
|
<td>Megnevezés (EN)</td>
|
|
<td>Megnevezés (HU)</td>
|
|
<td>Leírás (NO)</td>
|
|
<td>Leírás (EN)</td>
|
|
<td>Leírás (HU)</td>
|
|
<td>Ár</td>
|
|
<td>Időtartam</td>
|
|
<td>Kategória</td>
|
|
<td>Aktív</td>
|
|
</tr>
|
|
<?php
|
|
if(is_array($results)){
|
|
foreach($results as $resultItem){
|
|
?>
|
|
<tr>
|
|
<td>
|
|
<a href="<?php echo SITEURL;?>services/update-service/<?php echo htmlspecialchars($resultItem->service_id, ENT_QUOTES, 'UTF-8');?>"><i class="fas fa-edit"></i></a>
|
|
| <a href="<?php echo site_url().'services/service-process?delete-service='.$resultItem->service_id;?>" onclick="return confirm('Valóban törölni szeretnéd?');"><i class="fas fa-trash-alt" style="font-size: 14px;color:#585858;"></i></a>
|
|
</td>
|
|
<td>#<?php echo htmlspecialchars($resultItem->service_id, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->service_type, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->service_category_no, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->service_category_en, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->service_category_hu, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->service_name_no, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->service_name_en, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->service_name_hu, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->service_description_no, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->service_description_en, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->service_description_hu, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->service_price, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->service_time, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->serv_cat_name, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo $resultItem->is_enabled?'igen':'nem';?></td>
|
|
</tr>
|
|
<?php
|
|
}
|
|
}
|
|
else{
|
|
echo '<tr>';
|
|
echo '<td colspan="10">Nincs találat</td>';
|
|
echo '</tr>';
|
|
}
|
|
?>
|
|
|
|
</table>
|
|
</div>
|
|
</div>
|