Added data conversion to avoid XSS

This commit is contained in:
2017-09-09 13:27:36 +07:00
parent 645d98843b
commit 6e470f4e40
3 changed files with 22 additions and 5 deletions

View File

@@ -69,7 +69,7 @@ class Home
foreach ($args as $value) {
if ($value == '') {
Session::flash('info', 'Semua data harus diisi.');
Redirect::to('/');
Redirect::to('./register');
die();
}
}
@@ -88,7 +88,12 @@ class Home
$data = $this->model->showAll();
foreach ($data as $users) {
if ($args['username'] == $users['username']) {
if (is_array($users)) {
$known_uname = $users['username'];
} else {
$known_uname = $data['username'];
}
if ($args['username'] == $known_uname) {
Session::flash('info', 'Username telah digunakan. Silahkan gunakan username lain.');
Redirect::to('./register');
die();
@@ -96,7 +101,7 @@ class Home
}
$this->model->entry($args);
Session::flash('info', 'Registrasi berhasil');
Redirect::to('/');
die();
}
@@ -109,7 +114,7 @@ class Home
$user = $this->model->showAll([
['username', '=', $username]
]);
if ($user == false) {
$info = "Username/password salah.";
} else {
@@ -142,6 +147,9 @@ class Home
public function delete()
{
if (Session::exists('userid') == false) {
throw new \Exception("Bad request but thrown as 404", 404);
}
$userid = Session::get('userid');
$user = $this->model->showAll([