mirror of
https://github.com/magicbug/Cloudlog
synced 2026-08-13 17:49:35 -04:00
445706ecdc
Introduces user session validation checks to all controller actions before authorization checks. This ensures users are redirected to the login page if their session is invalid, improving security and consistency across the application.
54 lines
2.2 KiB
PHP
54 lines
2.2 KiB
PHP
<?php if ( ! defined('BASEPATH')) exit('No direct script access allowed');
|
|
|
|
class Csv extends CI_Controller {
|
|
|
|
public function index() {
|
|
$this->load->model('user_model');
|
|
if (!$this->user_model->validate_session()) {
|
|
redirect('user/login');
|
|
}
|
|
if(!$this->user_model->authorize(2)) { $this->session->set_flashdata('notice', 'You\'re not allowed to do that!'); redirect('dashboard'); }
|
|
|
|
$this->load->model('modes');
|
|
$this->load->model('logbook_model');
|
|
$this->load->model('stations');
|
|
$this->load->model('bands');
|
|
|
|
$data['station_profile'] = $this->stations->all_of_user(); // Used in the view for station location select
|
|
$data['worked_bands'] = $this->bands->get_worked_bands(); // Used in the view for band select
|
|
$data['modes'] = $this->modes->active(); // Used in the view for mode select
|
|
$data['dxcc'] = $this->logbook_model->fetchDxcc(); // Used in the view for dxcc select
|
|
|
|
$data['page_title'] = "SOTA CSV Export";
|
|
|
|
$this->load->view('interface_assets/header', $data);
|
|
$this->load->view('csv/index');
|
|
$this->load->view('interface_assets/footer');
|
|
|
|
}
|
|
|
|
public function export() {
|
|
$this->load->model('user_model');
|
|
if (!$this->user_model->validate_session()) {
|
|
redirect('user/login');
|
|
}
|
|
if(!$this->user_model->authorize(2)) { $this->session->set_flashdata('notice', 'You\'re not allowed to do that!'); redirect('dashboard'); }
|
|
|
|
$this->load->model('csv_model');
|
|
// Parameters
|
|
$station_id = $this->security->xss_clean($this->input->post('station_profile'));
|
|
$band = $this->security->xss_clean($this->input->post('band'));
|
|
$mode = $this->security->xss_clean($this->input->post('mode'));
|
|
$dxcc = $this->security->xss_clean($this->input->post('dxcc_id'));
|
|
$cqz = $this->security->xss_clean($this->input->post('cqz'));
|
|
$propagation = $this->security->xss_clean($this->input->post('prop_mode'));
|
|
$fromdate = $this->security->xss_clean($this->input->post('fromdate'));
|
|
$todate = $this->security->xss_clean($this->input->post('todate'));
|
|
|
|
// Get QSOs with valid SOTA info
|
|
$data['qsos'] = $this->csv_model->get_qsos($station_id, $band, $mode, $dxcc, $cqz, $propagation, $fromdate, $todate);
|
|
|
|
$this->load->view('csv/data/export', $data);
|
|
}
|
|
|
|
}
|