Added data conversion to avoid XSS
This commit is contained in:
@@ -69,7 +69,7 @@ class Home
|
||||
foreach ($args as $value) {
|
||||
if ($value == '') {
|
||||
Session::flash('info', 'Semua data harus diisi.');
|
||||
Redirect::to('/');
|
||||
Redirect::to('./register');
|
||||
die();
|
||||
}
|
||||
}
|
||||
@@ -88,7 +88,12 @@ class Home
|
||||
|
||||
$data = $this->model->showAll();
|
||||
foreach ($data as $users) {
|
||||
if ($args['username'] == $users['username']) {
|
||||
if (is_array($users)) {
|
||||
$known_uname = $users['username'];
|
||||
} else {
|
||||
$known_uname = $data['username'];
|
||||
}
|
||||
if ($args['username'] == $known_uname) {
|
||||
Session::flash('info', 'Username telah digunakan. Silahkan gunakan username lain.');
|
||||
Redirect::to('./register');
|
||||
die();
|
||||
@@ -96,7 +101,7 @@ class Home
|
||||
}
|
||||
|
||||
$this->model->entry($args);
|
||||
|
||||
Session::flash('info', 'Registrasi berhasil');
|
||||
Redirect::to('/');
|
||||
die();
|
||||
}
|
||||
@@ -109,7 +114,7 @@ class Home
|
||||
$user = $this->model->showAll([
|
||||
['username', '=', $username]
|
||||
]);
|
||||
|
||||
|
||||
if ($user == false) {
|
||||
$info = "Username/password salah.";
|
||||
} else {
|
||||
@@ -142,6 +147,9 @@ class Home
|
||||
|
||||
public function delete()
|
||||
{
|
||||
if (Session::exists('userid') == false) {
|
||||
throw new \Exception("Bad request but thrown as 404", 404);
|
||||
}
|
||||
$userid = Session::get('userid');
|
||||
|
||||
$user = $this->model->showAll([
|
||||
|
||||
Reference in New Issue
Block a user