Commit graph

11 commits

Author SHA1 Message Date
Peter Goodhall
4440582389 Sanitize IDs and migrate SQL to Query Builder
Replace ad-hoc xss_clean calls with explicit casting and stronger type checks for ID/parameter handling, and convert many raw SQL strings to CodeIgniter Query Builder usage. Added normalize_location_ids helpers (Activators_model, Oqrs_model) to safely parse location lists and used where_in/parameter binding/escaping to avoid injection and improve maintainability. Also adjusted session user_id handling, improved LIKE/DATE/TIMEDIFF usage, and tightened several model/controller methods (Labels, Activators, Bands, Contesting, Labels_model, Modes, Oqrs_model, Qsl_model, Setup_model, Sstv_model, User_model) for safer, clearer DB queries and inputs.
2026-06-24 22:15:31 +01:00
Peter Goodhall
b368cba876 Enforce write permissions for QSO modifications
Replaced checks for QSO accessibility with stricter write permission checks across controllers and models. Added a new check_qso_is_writable method to Logbook_model to ensure only authorized users can modify or delete QSOs, including shared logbook scenarios. Updated QSO, Qsl_model, and Sstv_model to use the new permission logic for all write operations.
2025-12-23 11:06:19 +00:00
Peter Goodhall
7f48eb7140 Reformatted the code 2024-03-18 14:45:08 +00:00
Peter Goodhall
6dde203bf5 Fixes #2915 2024-03-18 14:25:30 +00:00
phl0
965323202c
Use QSO ID to delete QSL rather than QSL ID 2022-12-28 21:58:09 +01:00
phl0
4cb0a9a3e9
Sort QSL images by last added to be on top 2022-05-06 08:02:16 +02:00
Thomas Werzmirzowsky
0ff857357c added user checks to previous contacts and qsl management 2021-11-14 17:50:11 +01:00
Andreas
1b2a88b355 Removed all constructors in models, since this doesn't work in never CodeIgniter 2021-11-06 20:24:28 +01:00
Andreas
edd518cabc [QSL Card] Feature for adding more QSOs to a QSL Card 2021-07-22 07:55:34 +02:00
Andreas
bcfe979573 [QSL Card image] jQuery upload, dynamically adding/deleting to table and carousel. 2020-11-01 12:36:02 +01:00
Andreas
6b1f30cb0d New feature: QSL card image upload 2020-10-28 23:20:03 +01:00