Not sure if I'm missing something obvious here, but how do I prevent XSS?

I've been able to insert a script alert function into the database and I can't see anywhere to add the validator to prevent this.

Line 32 on src/resources/views/usersmanagement/show-user.blade.php

{!! trans('laravelusers::laravelusers.showing-user-title', ['name' => $user->name]) !!}

This should be {{ }} instead of {!! to prevent raw output

Thanks

Hi, somehow, when I try to render these blade files, it's saying that a variable that's called "rolesEnabled" not defined, and so returning errors. Is there documentation somewhere saying:

1. What are the necessary fields needed to render these fields
2. What values and from what sources are we getting those values for those above fields to render the blade file

Thank you very much!!

Hi,

I followed : composer require jeremykenedy/laravel-users via CMD on window then got download "vendor" folder I don't know how to do next.

First of all, thank you very much for this excelent package.

So there is a simple problem in UsersManagementController extends from App\Http\Controllers\Controller

The package is for use in Laravel Framework, but in this usage App\Http\Controllers\Controller is in level of Laravel Application.

So if I had an other base class like this project https://github.com/guifabrin/finance_laravel on Controller is actually https://github.com/guifabrin/finance_laravel/blob/master/app/Base/ApplicationController.php we have a small issue on Controller class do not exists.

But if we use Illuminate\Routing\Controller which is the BaseControllerof the App\Http\Controllers\Controller works fine in both cases.

Thanks and I stay avaliable for any discussion.

Hello there,

I have read the following statement in your README file.

Laravel users can work out the box with or without the following roles packages:

I don't think it is true. I have installed spatie/laravel-permission package, but it does not seem to be working with your package.

For example, I tried to change user permission, but I got an exception saying that detachAllRoles() does not exist in User class.

ErrorException (E_ERROR) Argument 3 passed to NetoJose\Bootstrap4Forms\FormService::text() must be of the type string or null, array given, called in C:\server\www\projects\new\vendor\laravel\framework\src\Illuminate\Support\Facades\Facade.php on line 223 (View: C:\server\www\projects\new\vendor\jeremykenedy\laravel-users\src\resources\views\usersmanagement\create-user.blade.php) Previous exceptions Argument 3 passed to NetoJose\Bootstrap4Forms\FormService::text() must be of the type string or null, array given, called in C:\server\www\projects\new\vendor\laravel\framework\src\Illuminate\Support\Facades\Facade.php on line 223 (0)

Hello, can you help me with this problem, in defalut Laravel app.blade.php Logout shows but when i go to /users then laravel-users app.blade.php loads and there from I can't get Logout to show. Laravel version is latest i gues installer and created project with composer.

If it is stupid question just delete it. Thank you.

Edit: it has something to do with enableAppJs => false, but i don't understand if this is ok to do

Hello. I did clean install of LV 5.6 + this package. Unfortunately all icons are displayed as html entities not as parsed HTML which is default behaviour of blade templates. Could You fix it?

Steps to Reproduce

1. Follow Installation instructions to install into an existing Laravel Project
2. Edit the published config to point main template to one that exists in your layouts folder (for this, i simply remove the "laravevelusers::" as I had an app.blade.php)
3. Npm run dev and clear view cache just in case

Expected Result

Your template to change to my template

Actual Result

Defaults to your own template, although our template is working fine everywhere else.

I've recently switched over to this package and am migrating the user registration over. I am attempting to send database data from the Registration controller to the view. My RegisterController has the following line:

return view('auth.register')->with('accounts', $accounts);

I can see that this logic is contained in

jeremykenedy\laravelusers\app\Http\Controllers\UsersManagementController@create

under this function:

    public function create()
    {
        $roles = [];

        if ($this->_rolesEnabled) {
            $roles = config('laravelusers.roleModel')::all();
        }

        $data = [
            'rolesEnabled'  => $this->_rolesEnabled,
            'roles'         => $roles,
        ];

        return view(config('laravelusers.createUserBlade'))->with($data);
    }

Is there any way to migrate this logic into the CRUD routes that have setup by this package? Or extend the logic contained in the existing function?

Would it be possible to add a custom middleware to protect the routes?

The solution might be needed to protect the user related routes in case one does not install the roles and permissions module. There is case where it is not needed and admin is determined based on the users table itself. No other roles are really needed.

The perfect scenario would be to just add the a configuration or even two and to trigger it within __constuct() method of the controller. It could be similar to how roles middleware is checked and triggered, just that it would allow one to configure any middleware to be enforced.

There did not seem to be a convenient way to make changes to an already defined routes.

This addresses #82 in order to allow for non-alpha-numeric characters such as spaces, commas, periods, etc. in a user's name field while still keeping XSS checks.

This uses not_regex validation to check that there are no < characters in the string nor & characters just to be safe from any HTML entity business.

It seems that a side effect of #65 was the inability to use spaces within names. Given that a user's full name is often what is used in this field (at least it is in all of our applications), this should probably be changed to use a regex as was noted in the conversation on #63. I am entering this issue for posterity, but will be forking and submitting a PR soon.

Hello there, is there a way to overwrite or clone the usermanagementcontroller into the root project without modify on vendor folder?

I need add some columns and if i change the controller they doesnt upload on the github repository.

Hope you can help me.

Greetings.

should change the route from fixed path to this

<a href="{{ route('users.edit', $user->id) }}" class="btn btn-block btn-md btn-warning">
                                    {!! trans('laravelusers::laravelusers.buttons.edit-user') !!}
                                </a>

I am using a user model with a custom table named defined:

However when doing something like adding a new user, an error is thrown. The error seems to be spitting back the '.users' table which makes me think some kind of default is not being overridden. Is this the case? How can I fix this (while keeping my custom user table)?

Thanks!