mirror of
https://github.com/magicbug/Cloudlog
synced 2026-08-13 17:49:35 -04:00
4440582389
Replace ad-hoc xss_clean calls with explicit casting and stronger type checks for ID/parameter handling, and convert many raw SQL strings to CodeIgniter Query Builder usage. Added normalize_location_ids helpers (Activators_model, Oqrs_model) to safely parse location lists and used where_in/parameter binding/escaping to avoid injection and improve maintainability. Also adjusted session user_id handling, improved LIKE/DATE/TIMEDIFF usage, and tightened several model/controller methods (Labels, Activators, Bands, Contesting, Labels_model, Modes, Oqrs_model, Qsl_model, Setup_model, Sstv_model, User_model) for safer, clearer DB queries and inputs.
106 lines
3 KiB
PHP
106 lines
3 KiB
PHP
<?php
|
|
class Sstv_model extends CI_Model
|
|
{
|
|
|
|
function saveSstvImages($qsoid, $filename)
|
|
{
|
|
$clean_id = (int) $qsoid;
|
|
|
|
// be sure that QSO belongs to user and user has write permission
|
|
$CI = &get_instance();
|
|
$CI->load->model('logbook_model');
|
|
if (!$CI->logbook_model->check_qso_is_writable($clean_id)) {
|
|
return;
|
|
}
|
|
|
|
$data = array(
|
|
'qsoid' => $clean_id,
|
|
'filename' => $filename
|
|
);
|
|
|
|
$this->db->insert('sstv_images', $data);
|
|
|
|
return $this->db->insert_id();
|
|
}
|
|
|
|
function getSSTVFilename($id)
|
|
{
|
|
$clean_id = (int) $id;
|
|
|
|
// be sure that QSO belongs to user
|
|
$CI = &get_instance();
|
|
$CI->load->model('logbook_model');
|
|
$this->db->select('qsoid');
|
|
$this->db->from('sstv_images');
|
|
$this->db->where('id', $clean_id);
|
|
$qsoid = $this->db->get()->row()->qsoid;
|
|
if (!$CI->logbook_model->check_qso_is_accessible($qsoid)) {
|
|
return;
|
|
}
|
|
|
|
$this->db->select('filename');
|
|
$this->db->from('sstv_images');
|
|
$this->db->where('id', $clean_id);
|
|
|
|
return $this->db->get();
|
|
}
|
|
|
|
|
|
function deleteSstv($id)
|
|
{
|
|
$clean_id = (int) $id;
|
|
|
|
// be sure that QSO belongs to user and user has write permission
|
|
$CI = &get_instance();
|
|
$CI->load->model('logbook_model');
|
|
$this->db->select('qsoid');
|
|
$this->db->from('sstv_images');
|
|
$this->db->where('id', $clean_id);
|
|
$qsoid = $this->db->get()->row()->qsoid;
|
|
if (!$CI->logbook_model->check_qso_is_writable($qsoid)) {
|
|
return;
|
|
}
|
|
|
|
// Delete Mode
|
|
$this->db->delete('sstv_images', array('id' => $clean_id));
|
|
}
|
|
|
|
|
|
function getSstvForQsoId($id)
|
|
{
|
|
$clean_id = (int) $id;
|
|
|
|
// be sure that QSO belongs to user
|
|
$CI = &get_instance();
|
|
$CI->load->model('logbook_model');
|
|
if (!$CI->logbook_model->check_qso_is_accessible($clean_id)) {
|
|
return;
|
|
}
|
|
|
|
$this->db->select('*');
|
|
$this->db->from('sstv_images');
|
|
$this->db->where('qsoid', $clean_id);
|
|
|
|
return $this->db->get()->result();
|
|
}
|
|
|
|
function getQsoWithSstvImageList()
|
|
{
|
|
$CI = &get_instance();
|
|
$CI->load->model('logbooks_model');
|
|
$logbooks_locations_array = $CI->logbooks_model->list_logbook_relationships($this->session->userdata('active_station_logbook'));
|
|
|
|
if (is_array($logbooks_locations_array) && !empty($logbooks_locations_array)) {
|
|
$this->db->select('*');
|
|
$this->db->from($this->config->item('table_name'));
|
|
$this->db->join('sstv_images', 'sstv_images.qsoid = ' . $this->config->item('table_name') . '.col_primary_key');
|
|
$this->db->where_in('station_id', $logbooks_locations_array);
|
|
$this->db->order_by("id", "desc");
|
|
|
|
return $this->db->get();
|
|
} else {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
}
|