You've already forked Atomcms-edit
Fix security, performance, and code quality issues across CMS
Security:
- Replace unescaped {!! !!} with Purify::clean() in 15+ Blade templates (XSS)
- Add rate limiting to register (3/hr), upload (10/min), SSE (6/min)
- Add max:5000 validation on article comments
- Remove duplicate exception handler callback
Hardcoded paths:
- Replace ~44 /var/www/ hardcoded paths with env() configs
- CatalogService (13), AutoDetectService (18), Commandocentrum (11), AppServiceProvider (2)
Performance:
- Add 10 missing database indexes (radio_song_requests, help_center_tickets, etc.)
- Replace Cache::flush() with targeted Cache::forget() in RadioSettings
- Cache getCachedCategories() in TicketController (N+1 fix)
- Remove redundant top-3 leaderboard query
Bug fixes:
- Fix undefined $enabled variable → $isOnline in radio index view
- Add getAvatarAttribute() accessor for non-existent avatar column
- Fix User::guilds() from wrong HasMany to HasManyThrough
Code quality:
- Replace file_get_contents with Http::timeout(10) in TraxService
- Remove commented Echo/Pusher boilerplate in bootstrap.js
- Remove TODO/FIXME comments from logo-generator templates
- Replace hardcoded Turnstile CDN URL with config()
- Restore QUEUE_CONNECTION=redis in .env.example files
This commit is contained in:
+18
-1
@@ -9,6 +9,7 @@ use App\Models\Articles\WebsiteArticleComment;
|
||||
use App\Models\Community\Staff\WebsiteStaffApplications;
|
||||
use App\Models\Community\Staff\WebsiteTeam;
|
||||
use App\Models\Game\Furniture\Item;
|
||||
use App\Models\Game\Guild\Guild;
|
||||
use App\Models\Game\Guild\GuildMember;
|
||||
use App\Models\Game\Permission;
|
||||
use App\Models\Game\Player\MessengerFriendship;
|
||||
@@ -35,6 +36,7 @@ use Illuminate\Database\Eloquent\Factories\Factory;
|
||||
use Illuminate\Database\Eloquent\Factories\HasFactory;
|
||||
use Illuminate\Database\Eloquent\Relations\BelongsTo;
|
||||
use Illuminate\Database\Eloquent\Relations\HasMany;
|
||||
use Illuminate\Database\Eloquent\Relations\HasManyThrough;
|
||||
use Illuminate\Database\Eloquent\Relations\HasOne;
|
||||
use Illuminate\Foundation\Auth\User as Authenticatable;
|
||||
use Illuminate\Notifications\Notifiable;
|
||||
@@ -294,7 +296,12 @@ class User extends Authenticatable implements FilamentUser, HasName
|
||||
return $this->hasMany(CameraWeb::class);
|
||||
}
|
||||
|
||||
public function guilds(): HasMany
|
||||
public function guilds(): HasManyThrough
|
||||
{
|
||||
return $this->hasManyThrough(Guild::class, GuildMember::class, 'user_id', 'id', 'id', 'guild_id');
|
||||
}
|
||||
|
||||
public function guildMemberships(): HasMany
|
||||
{
|
||||
return $this->hasMany(GuildMember::class, 'user_id');
|
||||
}
|
||||
@@ -377,6 +384,16 @@ class User extends Authenticatable implements FilamentUser, HasName
|
||||
$this->save();
|
||||
}
|
||||
|
||||
public function getAvatarAttribute(): ?string
|
||||
{
|
||||
$imager = setting('avatar_imager');
|
||||
if ($imager && $this->look) {
|
||||
return $imager . $this->look . '&direction=2&head_direction=3&gesture=sml&action=wav';
|
||||
}
|
||||
|
||||
return null;
|
||||
}
|
||||
|
||||
public function getFilamentName(): string
|
||||
{
|
||||
return $this->username ?? 'Guest';
|
||||
|
||||
Reference in New Issue
Block a user