One Hat Cyber Team

Your IP : 18.191.153.105

Server IP : 192.145.235.60

Server : Linux ngx365.inmotionhosting.com 5.14.0-427.33.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 30 09:45:56 EDT 2024 x86_64

Server Software : Apache

PHP Version : 8.2.27

Buat File | Buat Folder

View File Name : CheckCompanyPackage.php

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;
use Symfony\Component\HttpFoundation\Response;

class CheckCompanyPackage
{

    /**
     * Handle an incoming request.
     *
     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
     */
    public function handle(Request $request, Closure $next): Response
    {

        $allowedRoutes = [
            'employees.index',
            'employees.edit',
            'employees.update',
            'employees.destroy',
            'employees.apply_quick_action',
            'import.process.progress',
            'import.process.exception',
            'profile.dark_theme',
        ];

        if (user() && user()->company_id && !$request->routeIs($allowedRoutes)) {

            $isAllowedInCurrentPackage = checkCompanyPackageIsValid(user()->company_id);


            if (!$isAllowedInCurrentPackage) {
                if(in_array('admin', user_roles())) {
                    return redirect()->route('billing.index');
                }

                return redirect()->route('superadmin.notify.admin');
            }
        }

        $notAllowedRoutes = [
            'employees.create',
            'employees.store',
            'employees.import',
            'employees.import.store',
            'employees.send_invite',
            'employees.create_link',
        ];

        if (user() && user()->company_id && $request->routeIs($notAllowedRoutes)) {
            abort_403(!checkCompanyCanAddMoreEmployees(user()->company_id));
        }

        return $next($request);
    }

}