ldc-jeusselin/routes/web-bo.php
Karl M'muller 470a84ae86 Merge branch 'fix-wysiwyg' into 'develop'
fix: 🐛 missing exclude sanitize html on news->content

See merge request ldc-web/projets/jeusselin!27
2026-10-08 11:05:04 +00:00

100 lines
3.9 KiB
PHP

<?php
use App\Http\Controllers\Bo\ArticlesController;
use App\Http\Controllers\Bo\BusinessSectorsController;
use App\Http\Controllers\Bo\CotationsController;
use App\Http\Controllers\Bo\CustomerController;
use App\Http\Controllers\Bo\DashboardController;
use App\Http\Controllers\Bo\EmployeesController;
use App\Http\Controllers\Bo\GeneralConfigController;
use App\Http\Controllers\Bo\HomeSlidersController;
use App\Http\Controllers\Bo\ObjectivesController;
use App\Http\Controllers\Bo\PublicPdfsController;
use App\Http\Controllers\Bo\StaticPageController;
use App\Http\Controllers\Bo\UsersController;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Route;
Route::prefix('bo')->name('bo.')->middleware('admin-secure')->group(function () {
Route::namespace('\App\Http\Controllers\Bo')->middleware(['throttle:credentials'])->group(function () {
Auth::routes([
'login' => true,
'logout' => true,
'register' => false,
// For resetting passwords.
'reset' => true,
// For additional password confirmations.
'confirm' => false,
// For email verification.
'verify' => false,
]);
});
Route::middleware('auth:backend')->group(function () {
// * Tableau de bord
Route::get('/', [DashboardController::class, 'index'])->name('dashboard');
// * Utilisateurs BO
Route::resource('objectives', ObjectivesController::class)->except([
'create',
'edit'
]);
Route::resources([
'users' => UsersController::class,
'employees' => EmployeesController::class,
'home-sliders' => HomeSlidersController::class,
'cotations' => CotationsController::class,
'public-pdfs' => PublicPdfsController::class,
]);
// * ARTICLES
Route::resource(
'articles',
ArticlesController::class,
)->withoutMiddleware('htmlsanitize')
->middleware('htmlsanitize:content');
Route::resource('customers', CustomerController::class)
->only(['index', 'edit', 'update']);
// *ordres
Route::get(
'/home-sliders/change-order/{id}/{action}',
[HomeSlidersController::class, 'changeOrder']
)->name('home-sliders.change-order');
Route::get(
'/employees/change-order/{id}/{action}',
[EmployeesController::class, 'changeOrder']
)->name('employees.change-order');
Route::get('/business-sector', [BusinessSectorsController::class, 'index'])->name('business-sector.index');
Route::prefix('ajax')->name('ajx.')->group(function () {
Route::post(
'/save-business-sector',
[BusinessSectorsController::class, 'saveDatas']
)->name('business-sector.save');
Route::post(
'/delete-business-sector',
[BusinessSectorsController::class, 'destroy']
)->name('business-sector.delete');
});
// * objectives
Route::get('/check-objectives', [CotationsController::class, 'checkObjectives'])->name('cotations.checkgoals');
// * STATIC PAGES
Route::resource('pages', StaticPageController::class)
->names([
'index' => 'static_pages.index',
'edit' => 'static_pages.edit',
'update' => 'static_pages.update',
])->parameters(['pages' => 'static_page'])
->only(['index', 'edit', 'update'])
->withoutMiddleware('htmlsanitize')
->middleware('htmlsanitize:content');
// * GENERAL CONFIG
Route::get('/config-general', [GeneralConfigController::class, 'edit'])->name('general-config.edit');
Route::patch('/config-general', [GeneralConfigController::class, 'upload'])->name('general-config.upload');
});
});