Security hardening: fixed 13 vulnerabilities, added AI-powered SupportController (Gemini), and stabilized Flutter Complaint logic

This commit is contained in:
Hamza-Ayed
2026-04-24 22:55:56 +03:00
parent cc85fe1815
commit 540c5cc7ab
11 changed files with 292 additions and 71 deletions

View File

@@ -505,11 +505,18 @@ class RideController extends Controller
* GET /v2/rides/{id}
* Replaces: ride/rides/getRideOrderID.php
*/
public function show(int $rideId): JsonResponse
public function show(Request $request, int $rideId): JsonResponse
{
$ride = Ride::find($rideId);
$userId = $request->attributes->get('_jwt_user_id');
$ride = Ride::where('id', $rideId)
->where(function($q) use ($userId) {
$q->where('passenger_id', $userId)
->orWhere('driver_id', $userId);
})
->first();
if (!$ride) {
return response()->json(['status' => 'failure', 'message' => 'Ride not found'], 404);
return response()->json(['status' => 'failure', 'message' => 'Ride not found or access denied'], 404);
}
return response()->json(['status' => 'success', 'data' => $ride]);
}