Commit graph

11 commits

Author SHA1 Message Date
Peter Goodhall
d6fe6e8110 Sanitize and escape query inputs in models
Sanitize location lists and escape query parameters across multiple models to prevent SQL injection and fix query formatting. Changes include: converting location arrays to comma-separated integer lists (array_map('intval')) instead of quoted implode, adding escape_str for band/mode/sat, adding a sanitize_location_list helper and early-return checks in CQ, escaping band lists, and updating Adif_data date where clauses to use $this->db->escape(..., NULL, FALSE). Files modified: Accumulate_model, Activated_gridmap_model, Adif_data, Cq, and Gridmap_model.
2026-06-24 22:19:35 +01:00
Andreas
ff7fed6dfb [Accumulated Statistics] Updated queries for WAS, WAZ and IOTA for speedup. 2022-09-03 21:00:54 +02:00
Andreas
1328533948 [Accumulated DXCC] Rewrote query for accumulated dxcc. Major speedup for monthly stats 2022-09-03 18:01:36 +02:00
Andreas
9e4c97e45b [Accumulated Statistics] Fixed when no QSOs found. 2021-11-14 17:33:24 +01:00
Andreas Kristiansen
42fa1a06d0
Merge branch 'station_logbooks' into cloudlog_php8_compatible 2021-11-13 16:03:52 +01:00
Andreas
939434090d [Bands] Consolidated get_worked_bands to it's own model. This will make it easier to have everything in one place, and perhaps also move bands to db. 2021-11-13 15:55:17 +01:00
Andreas
1b2a88b355 Removed all constructors in models, since this doesn't work in never CodeIgniter 2021-11-06 20:24:28 +01:00
Andreas
33cdbca735 [Accumulated Statistics] Updated code to support station logbooks 2021-09-10 22:59:10 +02:00
Andreas
dd200871cc Mode and period has been added. 2020-10-08 11:45:41 +02:00
Andreas
20dc1caa27 Implemented dynamic loading of chart and table. Band and award is now selectable. 2020-10-06 21:12:14 +02:00
Andreas
e80c9b8ef8 Added mode, view and controller for accumulated stats. 2020-10-04 21:41:01 +02:00