Don't allow redirecting to someones subscription. Closes #2047
This commit is contained in:
@@ -20,18 +20,44 @@
|
||||
</div>
|
||||
<form action="{{ route('subscribe.manage', $subscriber->verify_code) }}" method="post">
|
||||
<input type="hidden" name="_token" value="{{ csrf_token() }}">
|
||||
<div class="panel panel-default">
|
||||
<div class="panel-heading">
|
||||
{{ trans('cachet.subscriber.manage.my_subscriptions') }}
|
||||
</div>
|
||||
<div class="panel-body">
|
||||
@if(!$component_groups->isEmpty() || !$ungrouped_components->isEmpty())
|
||||
@include('partials.components_form')
|
||||
@else
|
||||
<p>{{ trans('cachet.subscriber.manage.no_subscriptions') }}</p>
|
||||
@endif
|
||||
</div>
|
||||
@if(!$component_groups->isEmpty() || !$ungrouped_components->isEmpty())
|
||||
@if($component_groups->count() > 0)
|
||||
@foreach($component_groups as $componentGroup)
|
||||
<div class="list-group components">
|
||||
@if($componentGroup->enabled_components->count() > 0)
|
||||
<div class="list-group-item group-name">
|
||||
<i class="{{ $componentGroup->collapse_class_with_subscriptions($subscriptions) }} group-toggle"></i>
|
||||
<strong>{{ $componentGroup->name }}</strong>
|
||||
<div class="pull-right text-muted small">
|
||||
<a href="#" class="select-group" id="select-all-{{$componentGroup->id}}">Select All</a>
|
||||
|
|
||||
<a href="#" class="deselect-group" id="deselect-all-{{$componentGroup->id}}">Deselect All</a>
|
||||
</div>
|
||||
</div>
|
||||
<div class="form-group group-items {{ $componentGroup->has_subscriber($subscriptions) ? null : "hide" }}">
|
||||
@foreach($componentGroup->enabled_components()->orderBy('order')->get() as $component)
|
||||
@include('partials.component_input', compact($component))
|
||||
@endforeach
|
||||
</div>
|
||||
@endif
|
||||
</div>
|
||||
@endforeach
|
||||
@endif
|
||||
|
||||
@if($ungrouped_components->count() > 0)
|
||||
<ul class="list-group components">
|
||||
<div class="list-group-item group-name">
|
||||
<strong>{{ trans('cachet.components.group.other') }}</strong>
|
||||
</div>
|
||||
@foreach($ungrouped_components as $component)
|
||||
@include('partials.component_input', compact($component))
|
||||
@endforeach
|
||||
</ul>
|
||||
@endif
|
||||
@else
|
||||
<p>{{ trans('cachet.subscriber.manage.no_subscriptions') }}</p>
|
||||
@endif
|
||||
|
||||
<div class="text-right">
|
||||
<button type="submit" class="btn btn-success">Update Subscription</button>
|
||||
</div>
|
||||
|
||||
Reference in New Issue
Block a user