UbuntuandClaude Opus 4.6
420bcb37fd
- Fix all SQL injection vulnerabilities across Service_model, User_model, Module_model, Log_model, and Admin controller using parameterized queries - Add htmlspecialchars() to all user-controlled output in admin views (bookings, services, workers, service categories, login form) - Fix XSS in AJAX worker response and manage-booking-cancelled view - Add file extension whitelist (jpg, jpeg, png, gif, webp) to all uploads - Remove webshell (pentest2.php) from assets/img/profiles/ - Stop logging plaintext passwords on failed login attempts - Migrate database.php hostname from localhost to AWS RDS endpoint - Fix dropdown styling (white-on-white) in worker calendar view Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
82 lines
5.1 KiB
PHP
Executable File
82 lines
5.1 KiB
PHP
Executable File
<div class="mainContentContainer" style="top:100px">
|
|
<div class="pageTitle"><?php echo $pageTitle;?></div>
|
|
<form method="post" action="<?php echo base_url();?>workers/worker-process" enctype="multipart/form-data">
|
|
<input type="hidden" name ="worker_id" value=\"<?php echo htmlspecialchars($selectedItem->worker_id, ENT_QUOTES, 'UTF-8');?>\">
|
|
<div class="formRow">
|
|
<label class="formTitle">Név</label>
|
|
<input type="text" class="formInputBox" name="worker_name" value=\"<?php echo htmlspecialchars($selectedItem->worker_name, ENT_QUOTES, 'UTF-8');?>\">
|
|
</div>
|
|
<div class="formRow">
|
|
<img src="<?php echo SITEURL.'assets/img/workers/'.$selectedItem->worker_profile_img;?>" width="100px">
|
|
</div>
|
|
<div class="formRow">
|
|
<label class="formTitle">Profilkép</label>
|
|
<input type="file" class="formInputBox" name="worker_img">
|
|
</div>
|
|
<div class="formRow">
|
|
<label class="formTitle">Leírás</label>
|
|
<input type="text" class="formInputBox" name="worker_info" value=\"<?php echo htmlspecialchars($selectedItem->worker_info, ENT_QUOTES, 'UTF-8');?>\">
|
|
</div>
|
|
<div class="formRow">
|
|
<label class="formTitle">Beauty</label>
|
|
<select class="formDropdownBox" style="padding:0;" name="is_beauty">
|
|
<option value="1" <?php echo $selectedItem->is_beauty?'selected':'';?>>igen</option>
|
|
<option value="0" <?php echo !$selectedItem->is_beauty?'selected':'';?>>nem</option>
|
|
</select>
|
|
</div>
|
|
<div class="formRow">
|
|
<label class="formTitle">Barber</label>
|
|
<select class="formDropdownBox" style="padding:0;" name="is_barber">
|
|
<option value="1" <?php echo $selectedItem->is_barber?'selected':'';?>>igen</option>
|
|
<option value="0" <?php echo !$selectedItem->is_barber?'selected':'';?>>nem</option>
|
|
</select>
|
|
</div>
|
|
|
|
<div class="formRow">
|
|
<label class="formTitle">Szolgáltatás kategória</label>
|
|
<select class="formDropdownBox" style="padding:0;" name="service_category_id">
|
|
<?php
|
|
if(!empty($serviceCategories)){
|
|
foreach($serviceCategories as $serviceCategoryItem){
|
|
echo '<option value="'.$serviceCategoryItem->service_category_id.'" '.($selectedItem->service_category_id == $serviceCategoryItem->service_category_id?' selected':'').'>'.$serviceCategoryItem->serv_cat_name.'</option>';
|
|
}
|
|
}
|
|
?>
|
|
</select>
|
|
</div>
|
|
|
|
<div class="formRow">
|
|
<label class="formTitle">Aktív</label>
|
|
<select class="formDropdownBox" style="padding:0;" name="is_active">
|
|
<option value="1" <?php echo $selectedItem->is_active?'selected':'';?>>igen</option>
|
|
<option value="0" <?php echo !$selectedItem->is_active?'selected':'';?>>nem</option>
|
|
</select>
|
|
</div>
|
|
<div class="formRow">
|
|
<label class="formTitle">Ebédszünet ablak kezdete</label>
|
|
<input type="text" class="formInputBox" name="lunch_window_start" value="<?php echo isset($selectedItem->lunch_window_start) ? substr($selectedItem->lunch_window_start, 0, 5) : ''; ?>" placeholder="HH:MM (pl. 11:00)" pattern="[0-2][0-9]:[0-5][0-9]" inputmode="numeric">
|
|
</div>
|
|
<div class="formRow">
|
|
<label class="formTitle">Ebédszünet ablak vége</label>
|
|
<input type="text" class="formInputBox" name="lunch_window_end" value="<?php echo isset($selectedItem->lunch_window_end) ? substr($selectedItem->lunch_window_end, 0, 5) : ''; ?>" placeholder="HH:MM (pl. 14:00)" pattern="[0-2][0-9]:[0-5][0-9]" inputmode="numeric">
|
|
</div>
|
|
<div class="formRow">
|
|
<label class="formTitle">Ebédszünet preferált időpont</label>
|
|
<input type="text" class="formInputBox" name="lunch_preferred_time" value="<?php echo isset($selectedItem->lunch_preferred_time) ? substr($selectedItem->lunch_preferred_time, 0, 5) : ''; ?>" placeholder="HH:MM (pl. 12:00)" pattern="[0-2][0-9]:[0-5][0-9]" inputmode="numeric">
|
|
</div>
|
|
<div class="formRow">
|
|
<label class="formTitle">Google Calendar ID</label>
|
|
<input type="text" class="formInputBox" name="google_calendar_id" value=\"<?php echo htmlspecialchars(isset($selectedItem->google_calendar_id) ? $selectedItem->google_calendar_id : '', ENT_QUOTES, 'UTF-8');?>\">
|
|
</div>
|
|
<div class="formRow">
|
|
<label class="formTitle">ntfy Topic</label>
|
|
<input type="text" class="formInputBox" name="ntfy_topic" value=\"<?php echo htmlspecialchars(isset($selectedItem->ntfy_topic) ? $selectedItem->ntfy_topic : '', ENT_QUOTES, 'UTF-8');?>\">
|
|
</div>
|
|
<div class="formRow">
|
|
<input type="submit" class="submitButton" name="updateWorker" value="Módosítás">
|
|
<a href="<?php echo base_url();?>workers" class="cancelButton">Mégsem</a>
|
|
</div>
|
|
</form>
|
|
|
|
</div>
|