ouyang/snipe-it
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Additional escaping

Browse Source
This commit is contained in:
snipe
2016-03-25 15:24:12 -07:00
parent f1bdaeaf95
commit 27543d16f6
20 changed files with 199 additions and 205 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/Http/Controllers/AssetModelsController.php
+3 -3
View File
@@ -441,7 +441,7 @@ class AssetModelsController extends Controller
$allowed_columns = ['id','name','modelno'];
$order = Input::get('order') === 'asc' ? 'asc' : 'desc';
$sort = in_array(Input::get('sort'), $allowed_columns) ? Input::get('sort') : 'created_at';
$sort = in_array(Input::get('sort'), $allowed_columns) ? e(Input::get('sort')) : 'created_at';
$models = $models->orderBy($sort, $order);
@@ -491,7 +491,7 @@ class AssetModelsController extends Controller
$assets = Asset::where('model_id', '=', $modelID)->withTrashed()->with('company');
if (Input::has('search')) {
$assets = $assets->TextSearch(Input::get('search'));
$assets = $assets->TextSearch(e(Input::get('search')));
}
if (Input::has('offset')) {
@@ -509,7 +509,7 @@ class AssetModelsController extends Controller
$allowed_columns = ['name', 'serial','asset_tag'];
$order = Input::get('order') === 'asc' ? 'asc' : 'desc';
$sort = in_array(Input::get('sort'), $allowed_columns) ? Input::get('sort') : 'created_at';
$sort = in_array(Input::get('sort'), $allowed_columns) ? e(Input::get('sort')) : 'created_at';
$assets = $assets->orderBy($sort, $order);