Point808/LobbySIO
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

csp hacks

Browse Source
This commit is contained in:
Josh North 2021-08-11 16:47:18 -04:00
parent ca6619afcf
commit 0b45ed9e02
13 changed files with 70599 additions and 42849 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
login.php → changeaccess.php
View File

@ -130,7 +130,7 @@ endif;
</div> </div>
<div class="col text-end"> <div class="col text-end">
<button type="button" class="btn btn-success btn-lg" data-bs-toggle="modal" data-bs-target="#sitetimeModal"><i class="fas fa-random"></i> <?php echo $transLang['STR_COMMON_CHANGE']; ?></button> <button type="button" class="btn btn-success btn-lg" data-bs-toggle="modal" data-bs-target="#sitetimeModal"><i class="fas fa-random"></i> <?php echo $transLang['STR_COMMON_CHANGE']; ?></button>
<a href="login.php" type="button" class="btn btn-primary btn-lg"><i class="fa fa-redo"></i></a> <a href="changeaccess.php" type="button" class="btn btn-primary btn-lg"><i class="fa fa-redo"></i></a>
</div> </div>
</div> </div>
</div> </div>
@ -163,7 +163,7 @@ endif;
<?php } elseif (Registry::AUTHMETHOD == 'SAML') { ?> <?php } elseif (Registry::AUTHMETHOD == 'SAML') { ?>
<a type="button" class="btn btn-success btn-lg" name="login" href="<?php echo str_replace("http%3A%2F%2F","https%3A%2F%2F",$auth->getLoginURL()); ?>"><i class="fas fa-sign-in-alt"></i> <?php echo $transLang['LOGIN']; ?></a> <a type="button" class="btn btn-success btn-lg" name="login" href="<?php echo str_replace("http%3A%2F%2F","https%3A%2F%2F",$auth->getLoginURL()); ?>"><i class="fas fa-sign-in-alt"></i> <?php echo $transLang['LOGIN']; ?></a>
<?php } ?> <?php } ?>
<a href="login.php" type="button" class="btn btn-primary btn-lg"><i class="fa fa-redo"></i></a> <a href="changeaccess.php" type="button" class="btn btn-primary btn-lg"><i class="fa fa-redo"></i></a>
</div> </div>
</div> </div>
</form> </form>

6
inc/footer.inc.php
View File

@ -31,14 +31,14 @@
<?php } ?> <?php } ?>
</div> </div>
</div> </div>
<script>window.jQuery || document.write('<script src="js/jquery.min.js"><\/script>')</script> <script nonce="<?=$_SESSION['nonce']?>">window.jQuery || document.write('<script src="js/jquery.min.js"><\/script>')</script>
<script> <script nonce="<?=$_SESSION['nonce']?>">
var popoverTriggerList = [].slice.call(document.querySelectorAll('[data-bs-toggle="popover"]')) var popoverTriggerList = [].slice.call(document.querySelectorAll('[data-bs-toggle="popover"]'))
var popoverList = popoverTriggerList.map(function (popoverTriggerEl) { var popoverList = popoverTriggerList.map(function (popoverTriggerEl) {
return new bootstrap.Popover(popoverTriggerEl) return new bootstrap.Popover(popoverTriggerEl)
}) })
</script> </script>
<script src="js/bootstrap.min.js"></script> <script src="js/bootstrap.min.js" nonce="<?=$_SESSION['nonce']?>"></script>
<!-- END FOOTER CONTENT --> <!-- END FOOTER CONTENT -->
</body> </body>
</html> </html>

62
inc/header.inc.php
View File

@ -80,9 +80,13 @@
$timeplus = new DateTime($StaticFunctions->getUTC(), new DateTimeZone('UTC')); // DUMB WAY TO CALCULATE SOME TIMES $timeplus = new DateTime($StaticFunctions->getUTC(), new DateTimeZone('UTC')); // DUMB WAY TO CALCULATE SOME TIMES
$timeplus->setTimezone(new DateTimeZone("$timezone")); $timeplus->setTimezone(new DateTimeZone("$timezone"));
$timenow = $timeplus->format('Y-m-d H:i:s'); $timenow = $timeplus->format('Y-m-d H:i:s');
$_SESSION['nonce']= base64_encode(random_bytes(32));
$noncestring="nonce-".$_SESSION['nonce'];
$urlsrc=basename($_SERVER['PHP_SELF']);
header("X-Frame-Options: SAMEORIGIN"); header("X-Frame-Options: SAMEORIGIN");
header("X-Content-Type-Options: nosniff"); header("X-Content-Type-Options: nosniff");
//header("Content-Security-Policy: default-src '*'; script-src '*'"); //header("Content-Security-Policy: default-src '$urlsrc'; script-src '$urlsrc'");
header("Content-Security-Policy: default-src '$noncestring' 'self'; script-src '$noncestring' 'self' ; script-src-elem '$noncestring' 'self'; script-src-attr '$noncestring' 'self'; style-src '$noncestring' 'self'; style-src-elem '$noncestring' 'self'; style-src-attr '$noncestring' 'self'; img-src '$noncestring' 'self' data:; connect-src '$noncestring' 'self'; frame-src '$noncestring' 'self'; font-src '$noncestring' 'self'; media-src '$noncestring' 'self'; object-src '$noncestring' 'self'; manifest-src '$noncestring' 'self'; worker-src '$noncestring' 'self'; prefetch-src '$noncestring' 'self'; form-action '$noncestring' 'self'; frame-ancestors '$noncestring' 'self'");
//header("Content-Security-Policy: script-src 'self' 'unsafe-inline'; script-src-elem 'self'; script-src-attr 'self'; style-src 'self'; style-src-elem 'self'; style-src-attr 'self'; img-src 'self'; connect-src 'self'; frame-src 'self'; font-src 'self'; media-src 'self'; object-src 'self'; manifest-src 'self'; worker-src 'self'; prefetch-src 'self'; form-action 'self'; frame-ancestors 'self'; default-src 'self'", false); //header("Content-Security-Policy: script-src 'self' 'unsafe-inline'; script-src-elem 'self'; script-src-attr 'self'; style-src 'self'; style-src-elem 'self'; style-src-attr 'self'; img-src 'self'; connect-src 'self'; frame-src 'self'; font-src 'self'; media-src 'self'; object-src 'self'; manifest-src 'self'; worker-src 'self'; prefetch-src 'self'; form-action 'self'; frame-ancestors 'self'; default-src 'self'", false);
if (!empty($_GET['a'])) { if (!empty($_GET['a'])) {
echo '<pre>' . print_r($_POST, true) . '</pre>'; echo '<pre>' . print_r($_POST, true) . '</pre>';
@ -98,33 +102,33 @@
<link rel="manifest" href="manifest.webmanifest"> <link rel="manifest" href="manifest.webmanifest">
<meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-title" content="<?php echo $transLang['APP_NAME']; ?>"> <meta name="apple-mobile-web-app-title" content="<?php echo $transLang['APP_NAME']; ?>">
<link rel="apple-touch-icon" href="assets/touch-logo.png?v3"> <link rel="apple-touch-icon" href="assets/touch-logo.png?v3" nonce="<?=$_SESSION['nonce']?>">
<meta http-equiv="content-type" content="text/html; charset=UTF-8"/> <meta http-equiv="content-type" content="text/html; charset=UTF-8"/>
<?php if (basename($_SERVER['PHP_SELF']) == 'signin_display.php'): ?> <meta http-equiv="refresh" content="5; url=index.php" /><?php endif; ?> <?php if (basename($_SERVER['PHP_SELF']) == 'signin_display.php'): ?> <meta http-equiv="refresh" content="5; url=index.php" /><?php endif; ?>
<link rel="stylesheet" href="css/bootstrap.min.css?v3"/> <link rel="stylesheet" href="css/bootstrap.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/sticky-footer-navbar.css?v3"> <link rel="stylesheet" href="css/sticky-footer-navbar.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/all.min.css?v3"/> <link rel="stylesheet" href="css/all.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/fontawesome.min.css?v3"/> <link rel="stylesheet" href="css/fontawesome.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/brands.min.css?v3"/> <link rel="stylesheet" href="css/brands.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/regular.min.css?v3"/> <link rel="stylesheet" href="css/regular.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/animate.min.css?v3"/> <link rel="stylesheet" href="css/animate.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/datatables.min.css?v3" /> <link rel="stylesheet" href="css/datatables.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/styles.css?v3"/> <link rel="stylesheet" href="css/styles.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/tempusdominus-bootstrap-4.min.css?v3"/> <link rel="stylesheet" href="css/tempusdominus-bootstrap-4.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<meta name="description" content="<?php echo $transLang['META_DESC']; ?>" /> <meta name="description" content="<?php echo $transLang['META_DESC']; ?>" />
<script src="js/jquery.min.js?v3"></script> <script src="js/jquery.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/bootstrap.bundle.min.js?v3"></script> <script src="js/bootstrap.bundle.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/datatables.min.js?v3"></script> <script src="js/datatables.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/buttons.flash.min.js?v3"></script> <script src="js/buttons.flash.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/buttons.html5.min.js?v3"></script> <script src="js/buttons.html5.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/buttons.print.min.js?v3"></script> <script src="js/buttons.print.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/dataTables.buttons.min.js?v3"></script> <script src="js/dataTables.buttons.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/jszip.min.js?v3"></script> <script src="js/jszip.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/pdfmake.min.js?v45"></script> <script src="js/pdfmake.min.js?v46" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/vfs_fonts.js?v4"></script> <script src="js/vfs_fonts.js?v4" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/moment.min.js?v3"></script> <script src="js/moment.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/tempusdominus-bootstrap-4.min.js?v3"></script> <script src="js/tempusdominus-bootstrap-4.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/jSignature.min.js?v3"></script> <script src="js/jSignature.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<title><?php echo $StaticFunctions->getTitle($app_current_pagename, $app_disp_lang); ?></title> <title><?php echo $StaticFunctions->getTitle($app_current_pagename, $app_disp_lang); ?></title>
</head> </head>
<!-- END HEAD --> <!-- END HEAD -->
@ -133,7 +137,7 @@
<!-- START NAVBAR --> <!-- START NAVBAR -->
<nav class="navbar navbar-expand-lg navbar-light bg-light mb-2"> <nav class="navbar navbar-expand-lg navbar-light bg-light mb-2">
<div class="container-fluid"> <div class="container-fluid">
<a class="navbar-brand" href="index.php"><img src="<?php echo $StaticFunctions->getLogo(); ?>" width="120" height="60" alt=""></a> <a class="navbar-brand" href="index.php"><img src="<?php echo $StaticFunctions->getLogo(); ?>" width="120" height="60" alt="" nonce="<?=$_SESSION['nonce']?>"></a>
<button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbar"><span class="navbar-toggler-icon"></span></button> <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbar"><span class="navbar-toggler-icon"></span></button>
<div class="collapse navbar-collapse" id="navbar"> <div class="collapse navbar-collapse" id="navbar">
<ul class="navbar-nav me-auto mb-2 mb-lg-0"> <ul class="navbar-nav me-auto mb-2 mb-lg-0">
@ -155,7 +159,7 @@
<li class="nav-item"><a class="nav-link<?php if ($app_current_pagename==$transLang['SIGNOUT']): echo " active"; endif; ?>" href="signout.php"><i class="fas fa-sign-out-alt"></i> <?php echo $transLang['SIGNOUT']; ?></a></li> <li class="nav-item"><a class="nav-link<?php if ($app_current_pagename==$transLang['SIGNOUT']): echo " active"; endif; ?>" href="signout.php"><i class="fas fa-sign-out-alt"></i> <?php echo $transLang['SIGNOUT']; ?></a></li>
</ul> </ul>
<ul class="navbar-nav mr-sm-2"> <ul class="navbar-nav mr-sm-2">
<li class="nav-item"><a class="nav-link btn btn-sm btn-outline-success<?php if ($app_current_pagename==$transLang['LOGIN']): echo " active"; endif; ?>" href="login.php"><i class="fas fa-cogs"></i> </a></li> <li class="nav-item"><a class="nav-link btn btn-sm btn-outline-success<?php if ($app_current_pagename==$transLang['LOGIN']): echo " active"; endif; ?>" href="changeaccess.php"><i class="fas fa-cogs"></i> </a></li>
<!-- END NAVBAR MENU FOR ALL LOGGED OUT - BOTTOM END --> <!-- END NAVBAR MENU FOR ALL LOGGED OUT - BOTTOM END -->
<?php endif; ?> <?php endif; ?>
<?php if ($session_status == true): ?> <?php if ($session_status == true): ?>
@ -221,13 +225,13 @@
</div> </div>
</div> </div>
</div> </div>
<script> <script nonce="<?=$_SESSION['nonce']?>">
$(".changelang").change(function(e){ $(".changelang").change(function(e){
e.preventDefault(); e.preventDefault();
$(this).closest("form").submit(); $(this).closest("form").submit();
}); });
</script> </script>
<script> <script nonce="<?=$_SESSION['nonce']?>">
$(document).ready(function () { $(document).ready(function () {
//POP MODAL IF NO COOKIE //POP MODAL IF NO COOKIE
if ( document.cookie.indexOf("app_site=") < 0) { if ( document.cookie.indexOf("app_site=") < 0) {

27
index.php
View File

@ -81,6 +81,7 @@
$app_current_pagename = $transLang['STR_COMMON_HOME']; // PAGE SETUP $app_current_pagename = $transLang['STR_COMMON_HOME']; // PAGE SETUP
$app_current_pageicon = '<i class="fas fa-home"></i> '; $app_current_pageicon = '<i class="fas fa-home"></i> ';
require_once("inc/header.inc.php"); require_once("inc/header.inc.php");
$urlsrc=basename($_SERVER['PHP_SELF']);
header("X-Frame-Options: SAMEORIGIN"); header("X-Frame-Options: SAMEORIGIN");
header("X-Content-Type-Options: nosniff"); header("X-Content-Type-Options: nosniff");
//header("Content-Security-Policy: script-src 'self' 'unsafe-inline'; script-src-elem 'self'; script-src-attr 'self'; style-src 'self'; style-src-elem 'self'; style-src-attr 'self'; img-src 'self'; connect-src 'self'; frame-src 'self'; font-src 'self'; media-src 'self'; object-src 'self'; manifest-src 'self'; worker-src 'self'; prefetch-src 'self'; form-action 'self'; frame-ancestors 'self'; default-src 'self'", false); //header("Content-Security-Policy: script-src 'self' 'unsafe-inline'; script-src-elem 'self'; script-src-attr 'self'; style-src 'self'; style-src-elem 'self'; style-src-attr 'self'; img-src 'self'; connect-src 'self'; frame-src 'self'; font-src 'self'; media-src 'self'; object-src 'self'; manifest-src 'self'; worker-src 'self'; prefetch-src 'self'; form-action 'self'; frame-ancestors 'self'; default-src 'self'", false);
@ -106,7 +107,7 @@
<div class="container-fluid"> <div class="container-fluid">
<div class="row row-cols-1"> <div class="row row-cols-1">
<div class="col d-grid gap-2"> <div class="col d-grid gap-2">
<button class="btn btn-outline-danger btn-lg btn-block" tabindex="-1" role="button" aria-disabled="true" disabled><i class="fas fa-4x fa-sign-in-alt"></i><img src="<?php echo $StaticFunctions->getLogoText(); ?>" height="140" width="370"></img><i class="fas fa-4x fa-sign-out-alt"></i><br /><h1><?php echo $transLang['APP_NAME']; ?></h1></button> <button class="btn btn-outline-danger btn-lg btn-block" tabindex="-1" role="button" aria-disabled="true" disabled><i class="fas fa-4x fa-sign-in-alt"></i><img src="<?php echo $StaticFunctions->getLogoText(); ?>" height="140" width="370" nonce="<?=$_SESSION['nonce']?>"></img><i class="fas fa-4x fa-sign-out-alt"></i><br /><h1><?php echo $transLang['APP_NAME']; ?></h1></button>
</div> </div>
</div> </div>
</div> </div>
@ -305,7 +306,7 @@ $form_data = filter_input_array(INPUT_POST, [
if (0 === $row_count): else: $page_count = (int)ceil($row_count / $StaticFunctions->getPageRows()); if($page_num > $page_count): $page_num = 1; endif; endif; if (0 === $row_count): else: $page_count = (int)ceil($row_count / $StaticFunctions->getPageRows()); if($page_num > $page_count): $page_num = 1; endif; endif;
?> ?>
<!-- modals --> <!-- modals -->
<script> <script nonce="<?=$_SESSION['nonce']?>">
$(document).on("click", ".open-voidModal", function (e) { $(document).on("click", ".open-voidModal", function (e) {
e.preventDefault(); e.preventDefault();
var _self = $(this); var _self = $(this);
@ -390,7 +391,7 @@ $form_data = filter_input_array(INPUT_POST, [
<div class="input-group input-group-sm mb-0"> <div class="input-group input-group-sm mb-0">
<span class="input-group-text" data-bs-toggle="datetimepicker" data-target=".datetimepicker-fd_manualTimeDate">Sign In Date/Time&nbsp;<i class="fas fa-clock"></i></span> <span class="input-group-text" data-bs-toggle="datetimepicker" data-target=".datetimepicker-fd_manualTimeDate">Sign In Date/Time&nbsp;<i class="fas fa-clock"></i></span>
<input placeholder="" name="fd_manualTimeDate" type="text" class="form-control bg-white datetimepicker-input datetimepicker-fd_manualTimeDate" id="datetimepicker-fd_manualTimeDate" data-toggle="datetimepicker" data-target=".datetimepicker-fd_manualTimeDate"/> <input placeholder="" name="fd_manualTimeDate" type="text" class="form-control bg-white datetimepicker-input datetimepicker-fd_manualTimeDate" id="datetimepicker-fd_manualTimeDate" data-toggle="datetimepicker" data-target=".datetimepicker-fd_manualTimeDate"/>
<script type="text/javascript"> <script type="text/javascript" nonce="<?=$_SESSION['nonce']?>">
$(function () { $(function () {
$('.datetimepicker-fd_manualTimeDate').datetimepicker({'timeZone': '<?php echo $timezone; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true }); $('.datetimepicker-fd_manualTimeDate').datetimepicker({'timeZone': '<?php echo $timezone; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true });
}); });
@ -466,7 +467,7 @@ $form_data = filter_input_array(INPUT_POST, [
<div class="input-group input-group-sm mb-0"> <div class="input-group input-group-sm mb-0">
<span class="input-group-text" data-bs-toggle="datetimepicker" data-target=".datetimepicker-form_data_workstart"><?php echo $transLang['STR_VENDORINFO_WORKSTART_TITLE']; ?>&nbsp;<i class="fas fa-clock"></i></span> <span class="input-group-text" data-bs-toggle="datetimepicker" data-target=".datetimepicker-form_data_workstart"><?php echo $transLang['STR_VENDORINFO_WORKSTART_TITLE']; ?>&nbsp;<i class="fas fa-clock"></i></span>
<input placeholder="" name="form_data_workstart" type="text" class="form-control bg-white datetimepicker-input datetimepicker-form_data_workstart" id="datetimepicker-form_data_workstart" data-toggle="datetimepicker" data-target=".datetimepicker-form_data_workstart"/> <input placeholder="" name="form_data_workstart" type="text" class="form-control bg-white datetimepicker-input datetimepicker-form_data_workstart" id="datetimepicker-form_data_workstart" data-toggle="datetimepicker" data-target=".datetimepicker-form_data_workstart"/>
<script type="text/javascript"> <script type="text/javascript" nonce="<?=$_SESSION['nonce']?>">
$(function () { $(function () {
$('.datetimepicker-form_data_workstart').datetimepicker({'timeZone': '<?php echo $timezone; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true, 'defaultDate':'<?php echo $timenow; ?>' }); $('.datetimepicker-form_data_workstart').datetimepicker({'timeZone': '<?php echo $timezone; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true, 'defaultDate':'<?php echo $timenow; ?>' });
}); });
@ -477,7 +478,7 @@ $form_data = filter_input_array(INPUT_POST, [
<div class="input-group input-group-sm mb-0"> <div class="input-group input-group-sm mb-0">
<span class="input-group-text" data-bs-toggle="datetimepicker" data-target=".datetimepicker-form_data_workend"><?php echo $transLang['STR_VENDORINFO_WORKEND_TITLE']; ?>&nbsp;<i class="fas fa-clock"></i></span> <span class="input-group-text" data-bs-toggle="datetimepicker" data-target=".datetimepicker-form_data_workend"><?php echo $transLang['STR_VENDORINFO_WORKEND_TITLE']; ?>&nbsp;<i class="fas fa-clock"></i></span>
<input placeholder="" name="form_data_workend" type="text" class="form-control bg-white datetimepicker-input datetimepicker-form_data_workend" id="datetimepicker-form_data_workend" data-toggle="datetimepicker" data-target=".datetimepicker-form_data_workend"/> <input placeholder="" name="form_data_workend" type="text" class="form-control bg-white datetimepicker-input datetimepicker-form_data_workend" id="datetimepicker-form_data_workend" data-toggle="datetimepicker" data-target=".datetimepicker-form_data_workend"/>
<script type="text/javascript"> <script type="text/javascript" nonce="<?=$_SESSION['nonce']?>">
$(function () { $(function () {
$('.datetimepicker-form_data_workend').datetimepicker({'timeZone': '<?php echo $timezone; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true, 'defaultDate':'<?php echo date('Y-m-d H:i:s', time()+43200); ?>' }); $('.datetimepicker-form_data_workend').datetimepicker({'timeZone': '<?php echo $timezone; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true, 'defaultDate':'<?php echo date('Y-m-d H:i:s', time()+43200); ?>' });
}); });
@ -486,7 +487,7 @@ $form_data = filter_input_array(INPUT_POST, [
</div> </div>
</div> </div>
</div> </div>
<script type="text/javascript"> <script type="text/javascript" nonce="<?=$_SESSION['nonce']?>">
$('#vendorrequiredswitch').change(function() { $('#vendorrequiredswitch').change(function() {
var checkedEscortValue=$("#vendorrequiredswitch").is(":checked"); var checkedEscortValue=$("#vendorrequiredswitch").is(":checked");
if (checkedEscortValue === true) { if (checkedEscortValue === true) {
@ -547,7 +548,7 @@ $form_data = filter_input_array(INPUT_POST, [
</div> </div>
</div> </div>
</div> </div>
<script type="text/javascript"> <script type="text/javascript" nonce="<?=$_SESSION['nonce']?>">
$('#escortrequiredswitch').change(function() { $('#escortrequiredswitch').change(function() {
var checkedEscortValue=$("#escortrequiredswitch").is(":checked"); var checkedEscortValue=$("#escortrequiredswitch").is(":checked");
if (checkedEscortValue === true) { if (checkedEscortValue === true) {
@ -945,8 +946,8 @@ if ($db_vendorinfo_workcompleted === 1 && $db_vendorinfo_sitecleanup === 1) { $f
<span class="badge bg-light text-dark"><?php echo $transLang[$VisitTypeInfo->getInfoVisitType("%", $row['visits_reason'])[0]["visittypes_name"]]; ?></span> <span class="badge bg-light text-dark"><?php echo $transLang[$VisitTypeInfo->getInfoVisitType("%", $row['visits_reason'])[0]["visittypes_name"]]; ?></span>
</div> </div>
</td> </td>
<td class="small"><?php echo $row['visits_lastname'] . ", " . $row['visits_firstname']; ?><br><img src="<?php echo $row['visits_signature']; ?>" width="200" height="50"></img></td> <td class="small"><?php echo $row['visits_lastname'] . ", " . $row['visits_firstname']; ?><br><img src="<?php echo $row['visits_signature']; ?>" width="200" height="50" nonce="<?=$_SESSION['nonce']?>"></img></td>
<td class="small"><?php if (!empty($row['visits_escort'])) {echo $row['visits_escort'] . '<br /><img src="' . $row['visits_escort_signature'] . '" width="200" height="50"></img>'; } ?></td> <td class="small"><?php if (!empty($row['visits_escort'])) {echo $row['visits_escort'] . '<br /><img src="' . $row['visits_escort_signature'] . '" width="200" height="50" nonce="'.$_SESSION['nonce'].'"></img>'; } ?></td>
<td class="small"> <td class="small">
<?php if($row['visits_approved'] === 2) { ?> <?php if($row['visits_approved'] === 2) { ?>
<div> <div>
@ -991,7 +992,7 @@ if ($db_vendorinfo_workcompleted === 1 && $db_vendorinfo_sitecleanup === 1) { $f
<div class="input-group input-group-sm mb-0"> <div class="input-group input-group-sm mb-0">
<span class="input-group-text" data-bs-toggle="datetimepicker" data-target=".datetimepicker-<?php echo $visitid; ?>"><i class="fas fa-clock"></i></span> <span class="input-group-text" data-bs-toggle="datetimepicker" data-target=".datetimepicker-<?php echo $visitid; ?>"><i class="fas fa-clock"></i></span>
<input placeholder="<?php echo $transLang['OPTIONAL']; ?>" name="outtime" type="text" class="form-control form-control-sm bg-white datetimepicker-input datetimepicker-<?php echo $visitid; ?>" id="datetimepicker-<?php echo $visitid; ?>" data-toggle="datetimepicker" data-target=".datetimepicker-<?php echo $visitid; ?>"/> <input placeholder="<?php echo $transLang['OPTIONAL']; ?>" name="outtime" type="text" class="form-control form-control-sm bg-white datetimepicker-input datetimepicker-<?php echo $visitid; ?>" id="datetimepicker-<?php echo $visitid; ?>" data-toggle="datetimepicker" data-target=".datetimepicker-<?php echo $visitid; ?>"/>
<script type="text/javascript"> <script type="text/javascript" nonce="<?=$_SESSION['nonce']?>">
$(function () { $(function () {
$('.datetimepicker-<?php echo $visitid; ?>').datetimepicker({'timeZone': '<?php echo $timezone; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true }); $('.datetimepicker-<?php echo $visitid; ?>').datetimepicker({'timeZone': '<?php echo $timezone; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true });
}); });
@ -1014,7 +1015,7 @@ if ($db_vendorinfo_workcompleted === 1 && $db_vendorinfo_sitecleanup === 1) { $f
<input class="form-control form-control-sm bg-white<?php if( isset($id_reference_error) && $id_reference_error === 1 && $_POST['approvevisit'] == $visitid ) { echo " is-invalid"; } ?>" type="text" id="id_reference-<?php echo $visitid; ?>" name="id_reference"> <input class="form-control form-control-sm bg-white<?php if( isset($id_reference_error) && $id_reference_error === 1 && $_POST['approvevisit'] == $visitid ) { echo " is-invalid"; } ?>" type="text" id="id_reference-<?php echo $visitid; ?>" name="id_reference">
<div class="invalid-feedback"><?php echo $transLang['STR_COMMON_REQUIRED']; ?></div> <div class="invalid-feedback"><?php echo $transLang['STR_COMMON_REQUIRED']; ?></div>
</div> </div>
<script type="text/javascript"> <script type="text/javascript" nonce="<?=$_SESSION['nonce']?>">
$('#id_type-<?php echo $visitid; ?>').change(function() { $('#id_type-<?php echo $visitid; ?>').change(function() {
if ($(this).val() === "1") { if ($(this).val() === "1") {
$('#ticket-<?php echo $visitid; ?>').show(); $('#ticket-<?php echo $visitid; ?>').show();
@ -1042,7 +1043,7 @@ if ($db_vendorinfo_workcompleted === 1 && $db_vendorinfo_sitecleanup === 1) { $f
<div id="citizen-ban-<?php echo $visitid; ?>" name="ban-<?php echo $visitid; ?>" class="input-group input-group-sm mb-0"> <div id="citizen-ban-<?php echo $visitid; ?>" name="ban-<?php echo $visitid; ?>" class="input-group input-group-sm mb-0">
<span class="badge bg-danger"><?php echo $transLang['STR_COMMON_SANCTIONED']; ?></span> <span class="badge bg-danger"><?php echo $transLang['STR_COMMON_SANCTIONED']; ?></span>
</div> </div>
<script type="text/javascript"> <script type="text/javascript" nonce="<?=$_SESSION['nonce']?>">
$('#citizen-<?php echo $visitid; ?>').change(function() { $('#citizen-<?php echo $visitid; ?>').change(function() {
var controlbox = $(this); var controlbox = $(this);
var isSanctioned = controlbox.find(':selected').data('sanctioned'); var isSanctioned = controlbox.find(':selected').data('sanctioned');
@ -1094,7 +1095,7 @@ if ($db_vendorinfo_workcompleted === 1 && $db_vendorinfo_sitecleanup === 1) { $f
<div class="input-group input-group-sm mb-0"> <div class="input-group input-group-sm mb-0">
<span class="input-group-text" data-bs-toggle="datetimepicker" data-target=".datetimepicker-<?php echo $visitid; ?>"><i class="fas fa-clock"></i></span> <span class="input-group-text" data-bs-toggle="datetimepicker" data-target=".datetimepicker-<?php echo $visitid; ?>"><i class="fas fa-clock"></i></span>
<input placeholder="<?php echo $transLang['OPTIONAL']; ?>" name="outtime" type="text" class="form-control form-control-sm bg-white datetimepicker-input datetimepicker-<?php echo $visitid; ?>" id="datetimepicker-<?php echo $visitid; ?>" data-toggle="datetimepicker" data-target=".datetimepicker-<?php echo $visitid; ?>" /> <input placeholder="<?php echo $transLang['OPTIONAL']; ?>" name="outtime" type="text" class="form-control form-control-sm bg-white datetimepicker-input datetimepicker-<?php echo $visitid; ?>" id="datetimepicker-<?php echo $visitid; ?>" data-toggle="datetimepicker" data-target=".datetimepicker-<?php echo $visitid; ?>" />
<script type="text/javascript"> <script type="text/javascript" nonce="<?=$_SESSION['nonce']?>">
$(function () { $(function () {
$('.datetimepicker-<?php echo $visitid; ?>').datetimepicker({'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true }); $('.datetimepicker-<?php echo $visitid; ?>').datetimepicker({'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true });
}); });

113270
js/pdfmake.js
View File

File diff suppressed because one or more lines are too long

1
js/pdfmake.js.map Normal file
View File

File diff suppressed because one or more lines are too long

6
js/pdfmake.min.js vendored
View File

File diff suppressed because one or more lines are too long

2
js/pdfmake.min.js.map
View File

File diff suppressed because one or more lines are too long

6
js/vfs_fonts_1.js Normal file
View File

File diff suppressed because one or more lines are too long

48
printvwf.php
View File

@ -99,32 +99,32 @@
<link rel="manifest" href="manifest.webmanifest"> <link rel="manifest" href="manifest.webmanifest">
<meta name="apple-mobile-web-app-capable" content="yes"> <meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-title" content="<?php echo $transLang['STR_VENDORINFO_FORM_TITLE']; ?>"> <meta name="apple-mobile-web-app-title" content="<?php echo $transLang['STR_VENDORINFO_FORM_TITLE']; ?>">
<link rel="apple-touch-icon" href="assets/touch-logo.png?v3"> <link rel="apple-touch-icon" href="assets/touch-logo.png?v3" nonce="<?=$_SESSION['nonce']?>">
<meta http-equiv="content-type" content="text/html; charset=UTF-8"/> <meta http-equiv="content-type" content="text/html; charset=UTF-8"/>
<link rel="stylesheet" href="css/bootstrap.min.css?v3"/> <link rel="stylesheet" href="css/bootstrap.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/sticky-footer-navbar.css?v3"> <link rel="stylesheet" href="css/sticky-footer-navbar.css?v3" nonce="<?=$_SESSION['nonce']?>">
<link rel="stylesheet" href="css/all.min.css?v3"/> <link rel="stylesheet" href="css/all.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/fontawesome.min.css?v3"/> <link rel="stylesheet" href="css/fontawesome.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/brands.min.css?v3"/> <link rel="stylesheet" href="css/brands.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/regular.min.css?v3"/> <link rel="stylesheet" href="css/regular.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/animate.min.css?v3"/> <link rel="stylesheet" href="css/animate.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/datatables.min.css?v3" /> <link rel="stylesheet" href="css/datatables.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/styles.css?v3"/> <link rel="stylesheet" href="css/styles.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<link rel="stylesheet" href="css/tempusdominus-bootstrap-4.min.css?v3"/> <link rel="stylesheet" href="css/tempusdominus-bootstrap-4.min.css?v3" nonce="<?=$_SESSION['nonce']?>"/>
<meta name="description" content="<?php echo $transLang['META_DESC']; ?>" /> <meta name="description" content="<?php echo $transLang['META_DESC']; ?>" />
<script src="js/jquery.min.js?v3"></script> <script src="js/jquery.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/bootstrap.bundle.min.js?v3"></script> <script src="js/bootstrap.bundle.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/datatables.min.js?v3"></script> <script src="js/datatables.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/buttons.flash.min.js?v3"></script> <script src="js/buttons.flash.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/buttons.html5.min.js?v3"></script> <script src="js/buttons.html5.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/buttons.print.min.js?v3"></script> <script src="js/buttons.print.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/dataTables.buttons.min.js?v3"></script> <script src="js/dataTables.buttons.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/jszip.min.js?v3"></script> <script src="js/jszip.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/pdfmake.min.js?v45"></script> <script src="js/pdfmake.min.js?v46" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/vfs_fonts.js?v3"></script> <script src="js/vfs_fonts.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/moment.min.js?v3"></script> <script src="js/moment.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/tempusdominus-bootstrap-4.min.js?v3"></script> <script src="js/tempusdominus-bootstrap-4.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<script src="js/jSignature.min.js?v3"></script> <script src="js/jSignature.min.js?v3" nonce="<?=$_SESSION['nonce']?>"></script>
<title><?php echo $transLang['STR_VENDORINFO_FORM_TITLE']; ?></title> <title><?php echo $transLang['STR_VENDORINFO_FORM_TITLE']; ?></title>
</head> </head>
<!-- END HEAD --> <!-- END HEAD -->

6
reports.php
View File

@ -154,12 +154,12 @@ $form_data = filter_input_array(INPUT_POST, [
<div class="input-group"> <div class="input-group">
<span class="input-group-text date form-control-lg" data-bs-toggle="datetimepicker" data-target=".datetimepicker-2"><i class="fas fa-calendar"></i>&nbsp <?php echo $transLang['END']; ?></span> <span class="input-group-text date form-control-lg" data-bs-toggle="datetimepicker" data-target=".datetimepicker-2"><i class="fas fa-calendar"></i>&nbsp <?php echo $transLang['END']; ?></span>
<input name="endtime" type="text" class="form-control form-control-lg bg-white datetimepicker-input datetimepicker-2" id="datetimepicker-2" data-toggle="datetimepicker" data-target=".datetimepicker-2" required /> <input name="endtime" type="text" class="form-control form-control-lg bg-white datetimepicker-input datetimepicker-2" id="datetimepicker-2" data-toggle="datetimepicker" data-target=".datetimepicker-2" required />
<script type="text/javascript"> <script type="text/javascript" nonce="<?=$_SESSION['nonce']?>">
$(function () { $(function () {
$('.datetimepicker-1').datetimepicker({defaultDate:'<?php if (isset($form_data['starttime'])) { echo $form_data['starttime']; }; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true }); $('.datetimepicker-1').datetimepicker({defaultDate:'<?php if (isset($form_data['starttime'])) { echo $form_data['starttime']; }; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true });
}); });
</script> </script>
<script type="text/javascript"> <script type="text/javascript" nonce="<?=$_SESSION['nonce']?>">
$(function () { $(function () {
$('.datetimepicker-2').datetimepicker({defaultDate:'<?php if (isset($form_data['endtime'])) { echo $form_data['endtime']; }; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true }); $('.datetimepicker-2').datetimepicker({defaultDate:'<?php if (isset($form_data['endtime'])) { echo $form_data['endtime']; }; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true });
}); });
@ -380,7 +380,7 @@ $form_data = filter_input_array(INPUT_POST, [
</div> </div>
</div> </div>
<?php } ?> <?php } ?>
<script> <script nonce="<?=$_SESSION['nonce']?>">
$(document).ready(function() { $(document).ready(function() {
$('#report').DataTable( { $('#report').DataTable( {
"order": [[ 0, "desc" ]], "order": [[ 0, "desc" ]],

8
signin.php
View File

@ -156,7 +156,7 @@ if(empty($form_data['fd_formAction'])){
</div> </div>
</form> </form>
</div> </div>
<script> <script nonce="<?=$_SESSION['nonce']?>">
// Example starter JavaScript for disabling form submissions if there are invalid fields // Example starter JavaScript for disabling form submissions if there are invalid fields
(function() { (function() {
'use strict'; 'use strict';
@ -278,7 +278,7 @@ if(empty($form_data['fd_formAction'])){
<div class="input-group mb-3"> <div class="input-group mb-3">
<span class="input-group-text" data-bs-toggle="datetimepicker" data-target=".datetimepicker-fd_workEndTime"><?=$transLang['STR_VENDORINFO_WORKEND_TITLE']?>&nbsp;<i class="fas fa-clock"></i></span> <span class="input-group-text" data-bs-toggle="datetimepicker" data-target=".datetimepicker-fd_workEndTime"><?=$transLang['STR_VENDORINFO_WORKEND_TITLE']?>&nbsp;<i class="fas fa-clock"></i></span>
<input name="fd_workEndTime" type="text" class="form-control form-control-sm bg-white datetimepicker-input datetimepicker-fd_workEndTime" id="datetimepicker-fd_workEndTime" data-toggle="datetimepicker" data-target=".datetimepicker-fd_workEndTime"/> <input name="fd_workEndTime" type="text" class="form-control form-control-sm bg-white datetimepicker-input datetimepicker-fd_workEndTime" id="datetimepicker-fd_workEndTime" data-toggle="datetimepicker" data-target=".datetimepicker-fd_workEndTime"/>
<script type="text/javascript"> <script type="text/javascript" nonce="<?=$_SESSION['nonce']?>">
$(function () { $(function () {
$('.datetimepicker-fd_workStartTime').datetimepicker({'timeZone': '<?php echo $timezone; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true, 'defaultDate':'<?php echo $timenow; ?>' }); $('.datetimepicker-fd_workStartTime').datetimepicker({'timeZone': '<?php echo $timezone; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true, 'defaultDate':'<?php echo $timenow; ?>' });
$('.datetimepicker-fd_workEndTime').datetimepicker({'timeZone': '<?php echo $timezone; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true, 'defaultDate':'<?php echo date('Y-m-d H:i:s', time()+43200); ?>' }); $('.datetimepicker-fd_workEndTime').datetimepicker({'timeZone': '<?php echo $timezone; ?>', 'sideBySide':true, 'format':'YYYY-MM-DD HH:mm:ss', 'allowInputToggle': true, 'defaultDate':'<?php echo date('Y-m-d H:i:s', time()+43200); ?>' });
@ -388,7 +388,7 @@ if(empty($form_data['fd_formAction'])){
</div> </div>
</div> </div>
<?php } ?> <?php } ?>
<script> <script nonce="<?=$_SESSION['nonce']?>">
$(document).ready(function() { $(document).ready(function() {
// Init jSignature for Visitor field, onchange store in text field // Init jSignature for Visitor field, onchange store in text field
var $vsignature = $("#vsignature").jSignature({ width:"100%", height: 200 }); var $vsignature = $("#vsignature").jSignature({ width:"100%", height: 200 });
@ -457,7 +457,7 @@ if(empty($form_data['fd_formAction'])){
</div> </div>
</div> </div>
</div> </div>
<script> <script nonce="<?=$_SESSION['nonce']?>">
$(document).ready(function() { $(document).ready(function() {
// Init jSignature for Escort field, onchange store in text field // Init jSignature for Escort field, onchange store in text field
var $esignature = $("#esignature").jSignature({ width:"100%", height: 200 }); var $esignature = $("#esignature").jSignature({ width:"100%", height: 200 });

2
signout.php
View File

@ -173,7 +173,7 @@ if(empty($form_data['fd_formAction'])){
</div> </div>
</div> </div>
</div> </div>
<script> <script nonce="<?=$_SESSION['nonce']?>">
setTimeout(function(){ window.location.href = 'index.php'; }, 5000); setTimeout(function(){ window.location.href = 'index.php'; }, 5000);
</script> </script>
<!-- SIGNOUT ACKNOWLEGEMENT END--> <!-- SIGNOUT ACKNOWLEGEMENT END-->