nok/wms-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

code audit fixes: require_once, issue flow, role guards

Browse Source
This commit is contained in:
Thanakorn S
2026-05-23 17:06:08 +07:00
parent 54f3f11fd2
commit 5ca6b49fd0
191 changed files with 534 additions and 464 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/reports/api/engine_report/expired_stock.php
+3 -3
View File
@@ -1,11 +1,11 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/UsageGuard.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/UsageGuard.php';
(new UsageGuard($pdo1, $company_id, $packages))->assertFeatureAccessible('reports');
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$report = new ReportManager($pdo2, $company_id);
app/reports/api/engine_report/lot_stock_log.php
+3 -3
View File
@@ -1,10 +1,10 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/UsageGuard.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/UsageGuard.php';
(new UsageGuard($pdo1, $company_id, $packages))->assertFeatureAccessible('reports');
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$report = new ReportManager($pdo2, $company_id);
$answer['output'] = $report->getLotStockLog(
app/reports/api/engine_report/product_lot.php
+3 -3
View File
@@ -1,10 +1,10 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/UsageGuard.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/UsageGuard.php';
(new UsageGuard($pdo1, $company_id, $packages))->assertFeatureAccessible('reports');
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$report = new ReportManager($pdo2, $company_id);
$result = $report->getProductLots();
app/reports/api/engine_report/rack_log.php
+3 -3
View File
@@ -1,10 +1,10 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/UsageGuard.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/UsageGuard.php';
(new UsageGuard($pdo1, $company_id, $packages))->assertFeatureAccessible('reports');
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$rack_id = (int)($data['rack_id'] ?? 0);
app/reports/api/engine_report/rack_occupancy.php
+3 -3
View File
@@ -1,10 +1,10 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/UsageGuard.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/UsageGuard.php';
(new UsageGuard($pdo1, $company_id, $packages))->assertFeatureAccessible('reports');
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$report = new ReportManager($pdo2, $company_id);
$total = $report->getTotalCapacity();
app/reports/api/engine_report/stock_movement.php
+3 -3
View File
@@ -1,10 +1,10 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/UsageGuard.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/UsageGuard.php';
(new UsageGuard($pdo1, $company_id, $packages))->assertFeatureAccessible('reports');
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$data = json_decode($_POST['json'] ?? '{}', true) ?: [];
$warehouse_id = (int)($data['warehouse_id'] ?? 0);
app/reports/api/engine_report/stock_movement_sku.php
+3 -3
View File
@@ -1,10 +1,10 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/UsageGuard.php';
require_once '../../../assets/utils/db_auth.php';
require_once '../../../assets/utils/classes/UsageGuard.php';
(new UsageGuard($pdo1, $company_id, $packages))->assertFeatureAccessible('reports');
require '../../../assets/utils/classes/ReportManager.php';
require_once '../../../assets/utils/classes/ReportManager.php';
$data = json_decode($_POST['json'] ?? '{}', true) ?: [];
$warehouse_id = (int)($data['warehouse_id'] ?? 0);