UbuntuandClaude Opus 4.6
420bcb37fd
- Fix all SQL injection vulnerabilities across Service_model, User_model, Module_model, Log_model, and Admin controller using parameterized queries - Add htmlspecialchars() to all user-controlled output in admin views (bookings, services, workers, service categories, login form) - Fix XSS in AJAX worker response and manage-booking-cancelled view - Add file extension whitelist (jpg, jpeg, png, gif, webp) to all uploads - Remove webshell (pentest2.php) from assets/img/profiles/ - Stop logging plaintext passwords on failed login attempts - Migrate database.php hostname from localhost to AWS RDS endpoint - Fix dropdown styling (white-on-white) in worker calendar view Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
50 lines
2.7 KiB
PHP
Executable File
50 lines
2.7 KiB
PHP
Executable File
<div class="mainContentContainer" style="top:100px">
|
|
<div class="pageTitle"><?php echo $pageTitle;?></div>
|
|
<div class="form-row">
|
|
<a href="<?php echo SITEURL;?>workers/add-worker" class="submitBtn">Új dolgozó</a>
|
|
</div>
|
|
<div class="form-row">
|
|
<table class="tableClass">
|
|
<tr>
|
|
<td></td>
|
|
<td>#</td>
|
|
<td>Profilkép</td>
|
|
<td>Név</td>
|
|
<td>Leírás</td>
|
|
<td>Beauty</td>
|
|
<td>Barber</td>
|
|
<td>Szerviz kategória</td>
|
|
<td>Aktív</td>
|
|
</tr>
|
|
<?php
|
|
if(is_array($results)){
|
|
foreach($results as $resultItem){
|
|
?>
|
|
<tr>
|
|
<td>
|
|
<a href="<?php echo SITEURL;?>workers/update-worker/<?php echo htmlspecialchars($resultItem->worker_id, ENT_QUOTES, 'UTF-8');?>"><i class="fas fa-edit"></i></a>
|
|
| <a href="<?php echo SITEURL;?>workers/worker-calendar/<?php echo htmlspecialchars($resultItem->worker_id, ENT_QUOTES, 'UTF-8');?>"><i class="fas fa-calendar-alt"></i></a>
|
|
| <a href="<?php echo site_url().'workers/worker-process?delete-worker='.$resultItem->worker_id;?>" onclick="return confirm('Valóban törölni szeretnéd?');"><i class="fas fa-trash-alt" style="font-size: 14px;color:#585858;"></i></a>
|
|
</td>
|
|
<td>#<?php echo htmlspecialchars($resultItem->worker_id, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><img src="<?php echo SITEURL.'assets/img/'.$resultItem->worker_profile_img;?>" style="width:50px;margin:0;" /></td>
|
|
<td><?php echo htmlspecialchars($resultItem->worker_name, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->worker_info, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo $resultItem->is_beauty?'igen':'nem';?></td>
|
|
<td><?php echo $resultItem->is_barber?'igen':'nem';?></td>
|
|
<td><?php echo htmlspecialchars($resultItem->serv_cat_name, ENT_QUOTES, 'UTF-8');?></td>
|
|
<td><?php echo $resultItem->is_active?'igen':'nem';?></td>
|
|
</tr>
|
|
<?php
|
|
}
|
|
}
|
|
else{
|
|
echo '<tr>';
|
|
echo '<td colspan="10">Nincs találat</td>';
|
|
echo '</tr>';
|
|
}
|
|
?>
|
|
|
|
</table>
|
|
</div>
|
|
</div>
|