mirror of
https://github.com/MarijnDoeve/TijdVoorDeTest.git
synced 2026-07-06 07:30:17 +02:00
246ff999d3
- Added CSRF validation to `enableQuiz`, `clearQuiz`, `deleteQuiz`, `toggleCandidate`, and `prepareElimination` actions. - Updated Twig templates to replace links with POST forms to include CSRF tokens. - Set HTTP method restrictions for related endpoints to `POST`.
53 lines
2.4 KiB
Twig
53 lines
2.4 KiB
Twig
<h4 class="mb-3">{{ 'Candidates'|trans }}</h4>
|
|
<table class="table table-hover mb-3">
|
|
<thead>
|
|
<tr>
|
|
<th scope="col">{{ 'Name'|trans }}</th>
|
|
<th scope="col">{{ 'Quiz Status'|trans }}</th>
|
|
<th scope="col">{{ 'Candidate Status'|trans }}</th>
|
|
<th scope="col">{{ 'Actions'|trans }}</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
{% for data in candidateData %}
|
|
{% set candidate = data.candidate %}
|
|
{% set quizCandidate = data.quizCandidate %}
|
|
{% set givenAnswersCount = data.givenAnswersCount %}
|
|
|
|
<tr>
|
|
<td>{{ candidate.name }}</td>
|
|
<td>
|
|
{% if quizCandidate and quizCandidate.started %}
|
|
{% if givenAnswersCount >= quiz.questions|length %}
|
|
<span class="badge text-bg-success">{{ 'Completed'|trans }}</span>
|
|
{% else %}
|
|
<span class="badge text-bg-warning">{{ 'In Progress'|trans }} ({{ givenAnswersCount }}/{{ quiz.questions|length }})</span>
|
|
{% endif %}
|
|
{% else %}
|
|
<span class="badge text-bg-secondary">{{ 'Not Started'|trans }}</span>
|
|
{% endif %}
|
|
</td>
|
|
<td>
|
|
{% if quizCandidate == null or quizCandidate.active %}
|
|
<span class="badge text-bg-success">{{ 'Active'|trans }}</span>
|
|
{% else %}
|
|
<span class="badge text-bg-secondary">{{ 'Inactive'|trans }}</span>
|
|
{% endif %}
|
|
</td>
|
|
<td>
|
|
<form action="{{ path('tvdt_backoffice_toggle_candidate', {quiz: quiz.id, candidate: candidate.id}) }}" method="POST">
|
|
<input type="hidden" name="_token" value="{{ csrf_token('toggle_candidate') }}">
|
|
<button type="submit" class="btn btn-sm btn-outline-secondary">
|
|
{% if quizCandidate == null or quizCandidate.active %}
|
|
{{ 'Deactivate'|trans }}
|
|
{% else %}
|
|
{{ 'Activate'|trans }}
|
|
{% endif %}
|
|
</button>
|
|
</form>
|
|
</td>
|
|
</tr>
|
|
{% endfor %}
|
|
</tbody>
|
|
</table>
|