change .htaccess, update edit user in admin panel

Author: Igor Chepurnoy

modules/admin/views/layouts/column2.php

@@ -1,4 +1,5 @@
 <?php
+
 use app\assets\AdminAsset;
 use kartik\alert\AlertBlock;
 use kartik\sidenav\SideNav;
@@ -9,6 +10,7 @@
 
 /* @var $this \yii\web\View */
 /* @var $content string */
+
 AdminAsset::register($this);
 ?>
 <?php $this->beginPage() ?>
@@ -31,8 +33,7 @@
 ]);
 ?>
 <div class="wrap">
-    <?php
-    NavBar::begin([
+    <?php NavBar::begin([
         'brandLabel' => 'Admin Panel',
         'brandUrl' => '/admin',
         'options' => [
@@ -57,7 +58,6 @@
                     ]
                 ]
             ],
-
             [
                 'label' => '<i class="glyphicon glyphicon-cog"></i> Settings',
                 'items' => [
@@ -116,8 +116,6 @@
         </div>
     </div>
 </div>
-</div>
-</div>
 <?php $this->endBody() ?>
 </body>
 </html>

modules/admin/views/user/index.php

@@ -9,6 +9,7 @@
 
 /* @var $this yii\web\View */
 /* @var $dataProvider yii\data\ActiveDataProvider */
+/* @var $searchModel \app\models\UserModelSearch */
 
 $this->title = 'Users';
 $this->params['breadcrumbs'][] = $this->title;

modules/admin/views/user/update.php

@@ -5,7 +5,7 @@
 /* @var $this yii\web\View */
 /* @var $model app\models\UserModel */
 
-$this->title = 'Update User: ' . ' ' . $model->id;
+$this->title = 'Update User: ' . ' ' . $model->username;
 $this->params['breadcrumbs'][] = ['label' => 'Users', 'url' => ['index']];
 $this->params['breadcrumbs'][] = 'Update';
 ?>

web/.htaccess

@@ -1,11 +1,32 @@
-AddDefaultCharset utf-8
-Options +FollowSymLinks
-IndexIgnore */*
+# Block access to "hidden" directories whose names begin with a period. This
+# includes directories used by version control systems such as Subversion or Git.
+<IfModule mod_rewrite.c>
+  RewriteCond %{SCRIPT_FILENAME} -d
+  RewriteCond %{SCRIPT_FILENAME} -f
+  RewriteRule "(^|/)\." - [F]
+</IfModule>
 
+
+# Block access to backup and source files
+# This files may be left by some text/html editors and
+# pose a great security danger, when someone can access them
+<FilesMatch "(\.(bak|bat|config|sql|fla|md|psd|ini|log|sh|inc|swp|dist)|~|init|composer\.json|composer\.lock)$">
+ Order allow,deny
+ Deny from all
+ Satisfy All
+</FilesMatch>
+
+# Increase cookie security
+<IfModule php5_module>
+  php_value session.cookie_httponly true
+</IfModule>
+
+# Settings to hide index.php and ensure pretty urls
 RewriteEngine on
-RewriteRule ^favicon.ico$ - [F,L]
-# If a directory or a file exists, use it directly
+
+# if a directory or a file exists, use it directly
 RewriteCond %{REQUEST_FILENAME} !-f
 RewriteCond %{REQUEST_FILENAME} !-d
-# Otherwise forward it to index.php
-RewriteRule ^([^/].*)$ /index.php/$1 [L]
+
+# otherwise forward it to index.php
+RewriteRule ^([^/].*)$ /index.php/$1 [L]