Commit graph

3 commits

Author SHA1 Message Date
Peter Goodhall
f5e3aac0d0 Cast IDs to int; use query builder
Normalize incoming ID parameters to integers and replace concatenated/raw SQL with CodeIgniter query builder. Controllers (Contesting.php, Themes.php) now cast $id to (int) instead of using xss_clean; models (Contesting_model.php, Themes_model.php) cast $id and use $this->db->where()/get()/select() to build queries. This improves type safety and reduces risk of injection while using more idiomatic CI DB APIs.
2026-06-24 22:08:30 +01:00
Andreas
1b2a88b355 Removed all constructors in models, since this doesn't work in never CodeIgniter 2021-11-06 20:24:28 +01:00
Andreas
d24eeafcdf [Custom CSS Theme Support] Added user interface for add/edit/delete theme 2021-08-09 14:29:53 +02:00