dotkernel / admin Goto Github PK

and is_deleted login admins

user role dropdown is not read correctly

Using form modal to POST will not submit any uploaded files

How to set the values COOKIE to be configurable in local.php for the following values :
SameSite
HostOnly
HttpOnly
Secure

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie

Steps to re-create problem in admin UI

• open modal form like add admin/user etc.
• submit form with errors(submit it empty)
• the form will re-appear with errors, but it seems there is a doubled backdrop
• if closing the form, one backdrop remains, making the UI unaccesible

there is still binary in uuid session ?

The total count found in background call /user/list/ is always equal to 1, no matter how many items are there to be displayed. Because of this, bootstrap displays only one page of items and no links for the rest of the pages.
{"total":**1**,"rows":[...]}

update the package.json file in order to have an up to date version of all packages

check for abandonned packages
for security issues
etc

in config/autoload/local.php (also local.php.dist) the variable $app is used, but not defined
what structure should it have, besides $app['name']?
or could it be simply replaced with a string?

in odcumentation

Read more here

@alexmerlin knows the issue

Please check with @kakapiciu and @Calin23 what is the problem

composer.json
"php": "~7.4.0 || ~8.0.0 || ~8.1.0", -> "php": "~8.0.0 || ~8.1.0 || ~8.2.0",

"mezzio/mezzio": "^3.11.0", -> "mezzio/mezzio": "^3.13.0",

2 pages with logins

the successful login

failed logins

remove packages from root composer.json if they are are already required by other packages

check the identity field

why is doctrine-module required in composer.json ?

https://packagist.org/packages/doctrine/doctrine-module

to be determined in order to upgrade to PHP > 8.0

based on this article
https://framework.zend.com/blog/2017-02-22-zend-config.html

You should upgade conposer.json to use ^2.6 || ^3.1

when you want to logout, is redirecting back to the dashboard

cleaning time

Using the geoip and user-agent packages, we should log every time an admin:

1. login
2. failed logins
   Record the IP , user agent, date

"The input was not found in the haystack"

on dotkernel.com

what is admin
An application based on Mezzio , with the main purpose of displaying tabular data from one or many databases
components
provided by which package

1. check if the package laminas/laminas-form is required
2. if can be removed from composer, remove it
3. make a new release with the updated composer.json file
4. trebe sa dam la baietii noul composer sa stie gen

https://github.com/dotkernel/admin/blob/4.0/config/cli-config.php

we should not have the string " Dotkernel" , neither "frontend"

Take a look at how migrations are working in the API https://github.com/dotkernel/api

please make a release , after you remove php 7.4 from admin

after is closed #126

release 4.0.1
which include data-fixtures

As requested for frontend, modify error pages in DK3 Admin as well to look like the attached image:

Small issues with the menu(or feature??)

When hovering over the menu items, it seems that the icon covers the anchor link. This leads to this behavior, which to me seems a bit inconsistent: clicking when active it will go to the page, clicking on the icon will expand the menu. Is this the desired behavior?

I would suggest we find a consistent way for the menu to work

1. the expand button is good
2. when clicking on a menu item with subitems, expanding is good
3. what should happen(always) when clicking on a menu item without sub-items?? Go to the page directly(user won't see the item label, and the icon could not be always enough to describe the actions, unless they expand from the button) OR always expand(it will require 2 clicks, though)

from composer.json and from config

and run the tests to be sure its ok

update the composer and entire admin project
and replace tuupolza cors with mezzio cors

add default login infos

fix the composer 2.0 compatibility

https://blog.packagist.com/composer-2-0-is-now-available/

yes

"dotkernel/dot-mail": "~3.4 || ~4.0",

based on the PHP version

in v3 and v4 versions

https://github.com/dotkernel/dotkernel-v1/blob/master/library/Dot/Kernel.php#L205

functions getUserIp and validateIp

the same as in dotkernel/frontend#258

See this issue for more info.

As it was pointed out by @d3aq in this issue

Because writer stream is specified in ./config/autoload/error-handling.global.php
sprintf('%s/../../log/error-log-%s.log', __DIR__, date('Y-m-d'))
it will be cached in ./data/cache/config-cache.php and the date() in filename it will remain the date when config-cache.php was created.

This issue needs to be fixed in DK3 Admin as well.

https://js.libhunt.com/bootbox-alternatives

Cross-Site Scripting in bootbox

All version of bootbox are vulnerable to Cross-Site Scripting. The package does not sanitize user input in the provided dialog boxes, allowing attackers to inject HTML code and execute arbitrary JavaScript.
Recommendation

Sanitize user input being passed to bootbox or consider using an alternative package.

what password? it's not possible to go to the demo site.

"Current Password is incorrect" is not a good message when the password is too short, or is missing

Current ramsey/uuid:4.1.0 ERROR
"message":"An exception has been thrown during the rendering of a template ("Could not convert database value "11eadd26-efe4-58ba-b..." to Doctrine Type uuid_binary_ordered_time. Expected format: UuidV1").","extra":{"\u0000Twig\Error\Error\u0000lineno":57,"\u0000Twig\Error\Error\u0000name":"@partial/account-menu.html.twig",

Temporary solution :
composer require ramsey/uuid:4.0.1

related to dotkernel/frontend#288

remove it
keep only admin logins and other stuff

to avoid conflicts with Frontend