OpenSID · apidong · Mar 16, 2023 · Jan 13, 2023 · Jan 13, 2023 · Jan 14, 2023
diff --git a/app/Http/Controllers/Controller.php b/app/Http/Controllers/Controller.php
@@ -42,6 +42,7 @@
 use App\Models\Program;
 use App\Models\SettingAplikasi;
 use App\Models\SinergiProgram;
+use App\Models\Slide;
 use App\Models\TipePotensi;
 use Exception;
 use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
@@ -93,6 +94,32 @@ public function __construct()
         $navdesa    = DataDesa::all();
         $navpotensi = TipePotensi::orderby('nama_kategori', 'ASC')->get();
         $pengurus   = Pengurus::status()->get();
+        $slides     = Slide::orderBy('created_at', 'DESC')->get();
+
+        if (count($slides) < 1) {
+            $slides = collect([
+                (object) [
+                    'judul' => 'Pantai Garassikang',
+                    'deskripsi' => 'Lokasi: Bulu Jaya, Kecamatan Bangkala Barat, Kabupaten Jeneponto, Sulawesi Selatan',
+                    'gambar' => '/slide/slide-1.png',
+                ],
+                (object) [
+                    'judul' => 'Batu Siping',
+                    'deskripsi' => 'Lokasi: Karampuang, Desa Garassikang, Kecamatan Bangkala Barat, Kabupaten Jeneponto, Sulawesi Selatan',
+                    'gambar' => '/slide/slide-2.png',
+                ],
+                (object) [
+                    'judul' => 'Bukit Sinalu Bulu Jaya',
+                    'deskripsi' => 'Lokasi: Bulu Jaya, Kecamatan Bangkala Barat, Kabupaten Jeneponto, Sulawesi Selatan',
+                    'gambar' => '/slide/slide-3.png',
+                ],
+                (object) [
+                    'judul' => 'Pantai Tamarunang',
+                    'deskripsi' => 'Lokasi: Tamarunang, Pabiringa, Kecamatan Binamu, Kabupaten Jeneponto, Sulawesi Selatan',
+                    'gambar' => '/slide/slide-4.png',
+                ],
+            ]);
+        }
 
         View::share([
             'profil'                 => $this->profil,
@@ -106,6 +133,7 @@ public function __construct()
             'navpotensi'             => $navpotensi,
             'camat'                  => $this->nama_camat,
             'pengurus'               => $pengurus->sortBy('jabatan.jenis'),
+            'slides'                 => $slides,
         ]);
     }
 

diff --git a/app/Http/Controllers/SistemKomplain/SistemKomplainController.php b/app/Http/Controllers/SistemKomplain/SistemKomplainController.php
@@ -112,15 +112,15 @@ public function store(Request $request)
         try {
             $validator = Validator::make($request->all(), [
                 'nik'           => 'required|numeric|nik_exists:' . $request->input('tanggal_lahir'),
-                'judul'         => 'required',
+                'judul'         => 'required|string|max:255',
                 'kategori'      => 'required',
-                'laporan'       => 'required',
+                'laporan'       => 'required|string',
                 'captcha'       => 'required|captcha',
                 'tanggal_lahir' => 'password_exists:' . $request->input('nik'),
-                'lampiran1'     => 'file|mimes:jpeg,png,jpg,gif,svg|max:1024',
-                'lampiran2'     => 'file|mimes:jpeg,png,jpg,gif,svg|max:1024',
-                'lampiran3'     => 'file|mimes:jpeg,png,jpg,gif,svg|max:1024',
-                'lampiran4'     => 'file|mimes:jpeg,png,jpg,gif,svg|max:1024',
+                'lampiran1'     => 'file|mimes:jpeg,png,jpg,gif,svg|max:1024|valid_file',
+                'lampiran2'     => 'file|mimes:jpeg,png,jpg,gif,svg|max:1024|valid_file',
+                'lampiran3'     => 'file|mimes:jpeg,png,jpg,gif,svg|max:1024|valid_file',
+                'lampiran4'     => 'file|mimes:jpeg,png,jpg,gif,svg|max:1024|valid_file',
             ], [
                 'captcha.captcha' => 'Invalid captcha code.',
                 'nik_exists'      => 'NIK tidak ditemukan atau NIK dan Tanggal Lahir tidak sesuai.',
@@ -206,9 +206,9 @@ public function update(Request $request, $id)
     {
         request()->validate([
             'nik'      => 'required|numeric',
-            'judul'    => 'required',
+            'judul'    => 'required|string|max:255',
             'kategori' => 'required',
-            'laporan'  => 'required',
+            'laporan'  => 'required|string',
         ], ['captcha.captcha' => 'Invalid captcha code.']);
 
         try {

diff --git a/app/Http/Requests/ArtikelRequest.php b/app/Http/Requests/ArtikelRequest.php
@@ -56,7 +56,7 @@ public function rules()
             'judul'     => 'required|string|max:191',
             'isi'       => 'required',
             'status'    => 'required',
-            'gambar'    => 'nullable|image|mimes:jpg,jpeg,png|max:1024',
+            'gambar'    => 'nullable|image|mimes:jpg,jpeg,png|max:1024|valid_file',
         ];
     }
 }
diff --git a/app/Http/Requests/DokumenRequest.php b/app/Http/Requests/DokumenRequest.php
@@ -53,8 +53,8 @@ public function authorize()
     public function rules()
     {
         return [
-            'nama_dokumen' => 'required',
-            'file_dokumen' => 'file|mimes:jpeg,png,jpg,gif,svg,xlsx,xls,doc,docx,pdf,ppt,pptx|max:2048',
+            'nama_dokumen' => 'required|string|max:255',
+            'file_dokumen' => 'file|mimes:jpeg,png,jpg,gif,svg,xlsx,xls,doc,docx,pdf,ppt,pptx|max:2048|valid_file',
         ];
     }
 }
diff --git a/app/Http/Requests/PengurusRequest.php b/app/Http/Requests/PengurusRequest.php
@@ -59,7 +59,7 @@ public function rules()
         }
 
         return [
-            'foto'              => 'nullable|image|mimes:jpg,jpeg,png|max:1024',
+            'foto'              => 'nullable|image|mimes:jpg,jpeg,png|max:1024|valid_file',
             'nama'              =>  "required|regex:/^[a-zA-Z '\.,\-]+$/|max:150",
             'gelar_depan'       =>  "nullable|regex:/^[a-zA-Z '\.,\-]+$/|max:150",
             'gelar_belakang'    =>  "nullable|regex:/^[a-zA-Z '\.,\-]+$/|max:150",

diff --git a/app/Http/Requests/PotensiRequest.php b/app/Http/Requests/PotensiRequest.php
@@ -54,9 +54,9 @@ public function rules()
     {
         return [
             'kategori_id'  => 'required',
-            'nama_potensi' => 'required',
-            'deskripsi'    => 'required',
-            'file_gambar'  => 'file|mimes:bmp,jpg,jpeg,gif,png|max:1024',
+            'nama_potensi' => 'required|string|max:200',
+            'deskripsi'    => 'required|string',
+            'file_gambar'  => 'file|mimes:bmp,jpg,jpeg,gif,png|max:1024|valid_file',
         ];
     }
 }
diff --git a/app/Http/Requests/ProsedurRequest.php b/app/Http/Requests/ProsedurRequest.php
@@ -54,7 +54,7 @@ public function rules()
     {
         return [
             'judul_prosedur' => 'required|string|min:5|max:150',
-            'file_prosedur'  => 'file|mimes:jpg,jpeg,png,gif,pdf|max:2048',
+            'file_prosedur'  => 'file|mimes:jpg,jpeg,png,gif,pdf|max:2048|valid_file',
         ];
     }
 }
diff --git a/app/Http/Requests/RegulasiRequest.php b/app/Http/Requests/RegulasiRequest.php
@@ -54,9 +54,9 @@ public function rules()
     {
         return [
             'tipe_regulasi' => 'required',
-            'judul'         => 'required',
-            'deskripsi'     => 'required',
-            'file_regulasi' => 'file|mimes:jpg,jpeg,png,gif,pdf|max:2048',
+            'judul'         => 'required|string|max:200',
+            'deskripsi'     => 'required|string',
+            'file_regulasi' => 'file|mimes:jpg,jpeg,png,gif,pdf|max:2048|valid_file',
         ];
     }
 }
diff --git a/app/Providers/AppServiceProvider.php b/app/Providers/AppServiceProvider.php
@@ -37,6 +37,7 @@
 use Illuminate\Support\Facades\Blade;
 use Illuminate\Support\Facades\Cache;
 use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\File;
 use Illuminate\Support\Facades\Schema;
 use Illuminate\Support\Facades\Validator;
 use Illuminate\Support\ServiceProvider;
@@ -55,6 +56,7 @@ public function boot()
         $this->penduduk();
         $this->config();
         $this->blade();
+        $this->file();
     }
 
     protected function penduduk()
@@ -174,6 +176,17 @@ protected function blade()
         });
     }
 
+    protected function file()
+    {
+        Validator::extend('valid_file', function ($attributes, $value, $parameters) {
+            $contains = preg_match('/<\?php|<script|function|__halt_compiler|<html/i', File::get($value));
+            if ($contains) {
+                return false;
+            }
+            return true;
+        });
+    }
+
     /**
      * Register any application services.
      *

diff --git a/catatan_rilis.md b/catatan_rilis.md
@@ -1,12 +1,17 @@
-#### [v23.03.01]
+#### [v23.03.02]
 
-Di rilis v23.03.01 berisi perbaikan yang diminta Komunitas OpenDK.
+Di rilis v23.03.02 berisi perbaikan yang diminta Komunitas OpenDK.
 
 #### Perbaikan bug
 
-1. [#626](https://github.com/OpenSID/OpenDK/issues/626) Perbaikan eror menu keluarga.
-2. [#628](https://github.com/OpenSID/OpenDK/issues/628) Perbaikan eror data demo.
-3. [#641](https://github.com/OpenSID/OpenDK/issues/641) Perbaikan sambutan camat kosong
-4. [#637](https://github.com/OpenSID/OpenDK/issues/637) Perbaikan preview gambar slider
-5. [#639](https://github.com/OpenSID/OpenDK/issues/639) Perbaikan pengisian kolom sejarah.
-6. [#2089](https://github.com/OpenSID/premium/issues/2089) Perbaikan validasi saat unggah gambar di artikel.
+1. [#638](https://github.com/OpenSID/OpenDK/issues/638) Perbaiki slider tidak bisa lebih dari 4.
+
+#### Teknis
+
+1. [#2089](https://github.com/OpenSID/premium/issues/2089) Audit keamanan validasi saat unggah gambar di artikel.
+2. [#2114](https://github.com/OpenSID/premium/issues/2114) Audit keamanan form prosedur.
+3. [#2115](https://github.com/OpenSID/premium/issues/2115) Audit keamanan form regulasi.
+4. [#2116](https://github.com/OpenSID/premium/issues/2116) Audit keamanan form potensi.
+5. [#2118](https://github.com/OpenSID/premium/issues/2118) Audit keamanan form dokumen.
+6. [#2121](https://github.com/OpenSID/premium/issues/2121) Audit keamanan form pengurus.
+7. [#2124](https://github.com/OpenSID/premium/issues/2124) Audit keamanan form keluhan.
diff --git a/config/app.php b/config/app.php
@@ -37,7 +37,7 @@
     |--------------------------------------------------------------------------
     */
 
-    'version' => 'v23.03.01',
+    'version' => 'v23.03.02',
 
     /*
     |--------------------------------------------------------------------------