fix unauthorized booking access

2026-08-19 12:34:13 +00:00 · 2018-08-16 09:40:54 +08:00
parent df8c0312c9
commit 232edde8e4
1 changed files with 1 additions and 1 deletions
@@ -24,12 +24,12 @@ class BookingController extends Controller
    public function index(){
 		$user = Auth::user();
        $bookings = Booking::select('user_id', 'id', 'created_at', 'status', 'rate', 'term', 'amount', 'bia', 'verification_status')
-                                    ->where('user_id', Auth::user()->id)
                                    ->where('status', '=', '6')
                                    ->orwhere('status', '=', '4')
                                    ->orwhere('status', '=', '3')
                                    ->orwhere('status', '=', '2')
                                    ->orwhere('status', '=', '1') 
+                                    ->where('user_id', Auth::user()->id)
                                    ->orderby('updated_at','desc')
                                    ->paginate(10);