mirror of
https://github.com/snipe/snipe-it.git
synced 2024-12-25 05:34:06 -08:00
c6ce928567
Signed-off-by: snipe <snipe@snipe.net>
49 lines
1.2 KiB
PHP
49 lines
1.2 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Helpers\Helper;
|
|
|
|
class ModalController extends Controller
|
|
{
|
|
|
|
/**
|
|
* Load the modal views after confirming they are in the allowed_types array.
|
|
* The allowed types away just prevents shithead skiddies from fuzzing the urls
|
|
* with automated scripts and junking up the logs. - snipe
|
|
*/
|
|
function show ($type, $itemId = null) {
|
|
|
|
$allowed_types = [
|
|
'category',
|
|
'kit-model',
|
|
'kit-license',
|
|
'kit-consumable',
|
|
'kit-accessory',
|
|
'location',
|
|
'manufacturer',
|
|
'model',
|
|
'statuslabel',
|
|
'supplier',
|
|
'upload-file',
|
|
'user',
|
|
];
|
|
|
|
|
|
if (in_array($type, $allowed_types)) {
|
|
$view = view("modals.${type}");
|
|
|
|
if ($type == "statuslabel") {
|
|
$view->with('statuslabel_types', Helper::statusTypeList());
|
|
}
|
|
if (in_array($type, ['kit-model', 'kit-license', 'kit-consumable', 'kit-accessory'])) {
|
|
$view->with('kitId', $itemId);
|
|
}
|
|
return $view;
|
|
}
|
|
|
|
abort(404,'Page not found');
|
|
|
|
}
|
|
}
|