nok/wms-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

code audit fixes: require_once, issue flow, role guards

Browse Source
This commit is contained in:
Thanakorn S
2026-05-23 17:06:08 +07:00
parent 54f3f11fd2
commit 5ca6b49fd0
191 changed files with 534 additions and 464 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/ics/api/engine/approve_stock.php
+3 -3
View File
@@ -12,9 +12,9 @@
* type string 'in' | 'out' | 'transfer'
*/
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/StockManager.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/StockManager.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
require_role($user_role, ['owner', 'admin']);
app/ics/api/engine/barcode_lookup.php
+2 -2
View File
@@ -1,8 +1,8 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/CompanySettingManager.php';
require '../../../assets/utils/classes/BarcodeManager.php';
require_once '../../../assets/utils/classes/BarcodeManager.php';
$barcode = trim($data['barcode'] ?? '');
app/ics/api/engine/contact_search.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/ContactManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/ContactManager.php';
$contact = new ContactManager($pdo2, $company_id);
$answer['result'] = $contact->searchContact($data['keyword'] ?? '');
app/ics/api/engine/delete_stock_in.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
require_role($user_role, ['owner', 'admin']);
app/ics/api/engine/delete_stock_out.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
require_role($user_role, ['owner', 'admin']);
app/ics/api/engine/delete_stock_transfer.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
require_role($user_role, ['owner', 'admin']);
app/ics/api/engine/location_barcode_label.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/BarcodeManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/BarcodeManager.php';
$label_action = $data['label_action'] ?? 'create';
$barcode = trim($data['barcode'] ?? '');
app/ics/api/engine/manage_stock_in.php
+4 -4
View File
@@ -1,9 +1,9 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/UsageGuard.php';
require '../../../assets/utils/classes/StockManager.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/UsageGuard.php';
require_once '../../../assets/utils/classes/StockManager.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/classes/CompanySettingManager.php';
require_role($user_role, ['owner', 'admin', 'staff']);
app/ics/api/engine/manage_stock_out.php
+4 -4
View File
@@ -1,9 +1,9 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/UsageGuard.php';
require '../../../assets/utils/classes/StockManager.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/UsageGuard.php';
require_once '../../../assets/utils/classes/StockManager.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/classes/CompanySettingManager.php';
require_role($user_role, ['owner', 'admin', 'staff']);
app/ics/api/engine/manage_stock_transfer.php
+4 -4
View File
@@ -1,9 +1,9 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/UsageGuard.php';
require '../../../assets/utils/classes/StockManager.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/UsageGuard.php';
require_once '../../../assets/utils/classes/StockManager.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/classes/CompanySettingManager.php';
require_role($user_role, ['owner', 'admin', 'staff']);
app/ics/api/engine/product_search.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/ProductManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/ProductManager.php';
$product = new ProductManager($pdo2, $company_id);
$answer['result'] = $product->searchProduct($data['keyword'] ?? '');
app/ics/api/engine/retrieve_active_lot.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
$product_sku = $data['product_sku'] ?? '';
app/ics/api/engine/retrieve_active_serial.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
$product_sku = $data['product_sku'] ?? '';
app/ics/api/engine/retrieve_aisle.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
$type = $data['type'] ?? '';
$whMgmt = new WarehouseManager($pdo2, $company_id);
app/ics/api/engine/retrieve_lot.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
$wh = new WarehouseManager($pdo2, $company_id);
$answer['result'] = $wh->getLotList(
app/ics/api/engine/retrieve_rack.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
$type = $data['type'] ?? '';
$whMgmt = new WarehouseManager($pdo2, $company_id);
app/ics/api/engine/retrieve_stock_by_source.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/StockSourceManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/StockSourceManager.php';
try {
$mgr = new StockSourceManager($pdo2, $company_id);
app/ics/api/engine/retrieve_stock_in.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/StockManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/StockManager.php';
$stock = new StockManager($pdo2, $company_id);
$answer['output'] = $stock->getStockInById((int)$data['wh'], (int)$data['id']);
app/ics/api/engine/retrieve_stock_out.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/StockManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/StockManager.php';
$stock = new StockManager($pdo2, $company_id);
$answer['output'] = $stock->getStockOutById((int)$data['wh'], (int)$data['id']);
app/ics/api/engine/retrieve_stock_transfer.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/StockManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/StockManager.php';
$stock = new StockManager($pdo2, $company_id);
$answer['output'] = $stock->getTransferById((int)$data['wh'], (int)$data['id']);
app/ics/api/engine/retrieve_warehouse.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
$wh = new WarehouseManager($pdo2, $company_id);
$type = $data['type'] ?? '';
app/ics/api/engine/retrieve_zone.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
$type = $data['type'] ?? '';
$whMgmt = new WarehouseManager($pdo2, $company_id);
app/ics/api/engine/sku_barcode_label.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/BarcodeManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/BarcodeManager.php';
$label_action = $data['label_action'] ?? 'read';
$product_sku = trim($data['product_sku'] ?? '');
app/ics/api/engine/sku_label_lots.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/BarcodeManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/BarcodeManager.php';
$bm = new BarcodeManager($pdo2, $company_id);
app/ics/api/engine/sku_label_products.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/BarcodeManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/BarcodeManager.php';
$bm = new BarcodeManager($pdo2, $company_id);
app/ics/api/engine/stock_in.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/StockManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/StockManager.php';
$stock = new StockManager($pdo2, $company_id);
$answer['output'] = $stock->getStockList((int)$data['warehouse'], 'in');
app/ics/api/engine/stock_out.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/StockManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/StockManager.php';
$stock = new StockManager($pdo2, $company_id);
$answer['output'] = $stock->getStockList((int)$data['warehouse'], 'out');
app/ics/api/engine/stock_transfer.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/StockManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/StockManager.php';
$stock = new StockManager($pdo2, $company_id);
$answer['output'] = $stock->getStockList((int)$data['warehouse'], 'transfer');
app/ics/api/engine/validate_scan_location.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/WarehouseManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/WarehouseManager.php';
require_role($user_role, ['owner', 'admin', 'staff']);
app/ics/api/engine_report/product_stats.php
+2 -2
View File
@@ -1,8 +1,8 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$report = new ReportManager($pdo2, $company_id);
app/ics/api/engine_report/stock_activity.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$report = new ReportManager($pdo2, $company_id);
$answer['output'] = $report->getWarehouseActivity((int)$data['warehouse']);
app/ics/api/engine_report/stock_movement.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$report = new ReportManager($pdo2, $company_id);
$answer['output'] = $report->getWarehouseStockMovement((int)$data['warehouse']);
app/ics/api/engine_report/stock_trend.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$report = new ReportManager($pdo2, $company_id);
$answer['output'] = $report->getWarehouseStockTrend((int)$data['warehouse']);
app/ics/api/engine_report/warehouse_balance.php
+2 -2
View File
@@ -1,7 +1,7 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$report = new ReportManager($pdo2, $company_id);
$answer['output'] = $report->getWarehouseBalanceSummary();
app/ics/api/engine_report/warehouse_overview.php
+2 -2
View File
@@ -1,8 +1,8 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$warehouse_id = (int)($data['warehouse'] ?? 0);
app/ics/api/engine_report/warehouse_stats.php
+2 -2
View File
@@ -1,8 +1,8 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$report = new ReportManager($pdo2, $company_id);