From 232edde8e49299d5c1cf9f560b517f8cca97ad59 Mon Sep 17 00:00:00 2001 From: Jack Goh Date: Thu, 16 Aug 2018 09:40:54 +0800 Subject: [PATCH] fix unauthorized booking access --- app/Http/Controllers/BookingController.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/Http/Controllers/BookingController.php b/app/Http/Controllers/BookingController.php index 49aee280..4b3d1705 100644 --- a/app/Http/Controllers/BookingController.php +++ b/app/Http/Controllers/BookingController.php @@ -24,12 +24,12 @@ class BookingController extends Controller public function index(){ $user = Auth::user(); $bookings = Booking::select('user_id', 'id', 'created_at', 'status', 'rate', 'term', 'amount', 'bia', 'verification_status') - ->where('user_id', Auth::user()->id) ->where('status', '=', '6') ->orwhere('status', '=', '4') ->orwhere('status', '=', '3') ->orwhere('status', '=', '2') ->orwhere('status', '=', '1') + ->where('user_id', Auth::user()->id) ->orderby('updated_at','desc') ->paginate(10);