Peter Goodhall 3e944f71cc Normalize location lists and sanitize SQL ... Replace fragile quoted-implode station lists with normalized integer CSVs and where_in usage to ensure station_id lists are numeric. Add normalize_location_list helpers in multiple models (Lookup_model, Sig, Timeline_model) and update controllers to cast inputs (e.g. dxcc_id) to ints. Escape user-supplied SQL fragments with $this->db->escape_str/escape_like_str and sanitize band/mode parameters; consolidate band/mode filtering into add_band_mode_filters in Timeline_model. Add guards for empty location lists (returning empty results) and a method_exists check around a legacy vucc_shit call. Overall this improves input validation and reduces SQL injection risk while removing duplicated list-building logic.		2026-06-24 22:29:00 +01:00
..
Accumulated.php	Add HTMX component and refactor accumulated UI/JS	2026-04-26 22:05:52 +01:00
Activated_gridmap.php	Cleaned up code formatting	2025-05-23 15:03:32 +01:00
Activators.php	Add HTMX activators endpoint and table view	2026-04-26 21:55:55 +01:00
Activatorsmap.php	Add activators map	2022-06-12 13:18:26 +02:00
Adif.php	Refactor Adif controller for code style and readability	2025-08-29 10:59:42 +01:00
Api.php	Remove redundant qso['lng'] assignments	2026-05-18 22:02:40 +01:00
Award.php	Add plugin award menu and settings	2026-04-29 22:40:24 +01:00
Awards.php	Normalize location lists and sanitize SQL	2026-06-24 22:29:00 +01:00
Backup.php	Add ZIP extension check to backup page	2026-01-15 15:26:15 +00:00
Band.php	[Bands] Added master checkbox for award	2022-10-06 11:41:01 +02:00
Cabrillo.php	Add Cabrillo export modal & format improvements	2026-03-27 00:04:21 +00:00
Callhistory.php	Support compound callsign matching and base extraction	2026-03-26 13:07:25 +00:00
Calltester.php	Secure calltester so that it can only run when logged in and you are admin	2023-08-01 13:25:36 +02:00
Clublog.php	Return upload status and report no Clublog QSOs	2026-05-28 13:42:41 +01:00
Commands.php	Add radio command queueing and management system	2025-10-04 11:48:48 +01:00
Components.php	Improve error handling for hams.at API fetch	2025-08-22 17:27:35 +01:00
Contesting.php	Cast IDs to int; use query builder	2026-06-24 22:08:30 +01:00
Continents.php	Add HTMX continent component and refactor JS	2026-04-26 22:15:35 +01:00
Csv.php	SOTA-Export was broken for Non-Admins...	2023-08-08 17:13:01 +00:00
Dashboard.php	Refactor dashboard helpers and improve UX	2026-05-07 22:12:05 +01:00
Dayswithqso.php	Analytics: graph of QSOs for each day in the log	2024-11-30 16:53:52 +01:00
Debug.php	Add Docker environment detection to debug page	2026-01-15 15:40:34 +00:00
Distances.php	Distances worked analytics: filter on propagation mode	2024-11-17 16:31:27 +01:00
Dxatlas.php	[DXAtlas export] Fix for some systems when writing temp file	2023-08-08 21:00:24 +02:00
Dxcluster.php	Refactor DXCC checks; add CW RBN lock UI	2026-03-29 13:37:16 +01:00
Emeinitials.php	Add HTMX component and filters for EME initials	2026-04-26 22:20:45 +01:00
Eqsl.php	Batch eQSL updates and add indexes	2026-02-11 11:32:25 +00:00
Gridmap.php	[Gridsquare Map] Shows 2,4,6 grids	2024-06-19 14:29:01 +01:00
Hamsat.php	Fixed logbooks-array bug	2023-09-14 14:20:47 +00:00
Hrdlog.php	Add indexes and batch processing for uploads	2026-02-11 10:59:24 +00:00
index.html	Added Basic Files	2011-04-25 16:24:01 +01:00
Information.php	Update Information.php	2024-06-11 15:00:32 +01:00
Kmlexport.php	post correction	2023-11-17 13:32:23 +01:00
Labels.php	Sanitize IDs and migrate SQL to Query Builder	2026-06-24 22:15:31 +01:00
Logbook.php	Improve callsign lookup, caching & recent details	2026-04-13 13:57:03 +01:00
Logbookadvanced.php	Add bulk satellite assignment to logbook entries	2025-11-07 15:28:18 +00:00
Logbooks.php	Improve logbook ownership checks and permissions	2025-12-20 21:50:21 +00:00
Lookup.php	Normalize location lists and sanitize SQL	2026-06-24 22:29:00 +01:00
Lotw.php	Add TEVEL2 satellites and migration	2026-05-16 11:45:03 +01:00
Maintenance.php	Add UI for manual data file updates in maintenance	2026-01-14 14:55:07 +00:00
Map.php	Custom maps: set dates to full log range + submodes filter fix + some wording fixes	2024-10-12 16:56:04 +02:00
Migrate.php	fixed migration cock up	2019-09-22 21:51:55 +01:00
Mode.php	[Modes] Added buttons for activate / activate all	2021-10-23 19:55:57 +02:00
Monthlyreport.php	Add new gridsquares by band to monthly report	2025-11-14 17:49:25 +00:00
Mostworked.php	Add Most Worked Callsigns feature	2025-08-23 21:11:36 +01:00
Notes.php	Optimize uploaded images: resize/compress to 1080	2026-03-09 13:35:07 +00:00
Options.php	Allow partial option saves and surface save errors	2026-04-26 18:04:58 +01:00
Oqrs.php	Normalize location lists and sanitize SQL	2026-06-24 22:29:00 +01:00
Plugin_awards.php	Add plugin system and Plugin Manager	2026-04-29 22:33:22 +01:00
Plugins.php	Enforce plugin read-only policy and show alerts	2026-04-30 23:03:29 +01:00
Propagationadvisor.php	Add Personal Propagation Advisor feature	2026-01-05 22:14:00 +00:00
Qrbcalc.php	Minor layout beauty :)	2022-02-16 14:57:07 +01:00
Qrz.php	Add indexes and batch processing for uploads	2026-02-11 10:59:24 +00:00
Qsl.php	added SSTV image page to the nav menu in the header	2024-04-02 16:55:00 -05:00
Qslmanagement.php	Started QSL management system	2019-10-08 21:38:34 +01:00
Qslprint.php	qslprint language	2023-12-07 01:18:04 +01:00
Qso.php	Persist remote operation secret to account	2026-05-16 13:55:11 +01:00
Radio.php	Disable caching for radio JSON; use $.ajax	2026-05-01 10:22:11 +01:00
Sattimers.php	Limit Grid square to 6 chars in request to df2et.de API	2024-03-31 18:00:32 +02:00
Search.php	[Advanced search] This fixes adif export	2023-09-22 09:09:01 +02:00
Settings.php	Start of settings	2019-10-04 18:30:55 +01:00
Simplefle.php	datetimepicker to html 5	2023-11-19 14:05:00 +01:00
Sstv.php	added SSTV image page to the nav menu in the header	2024-04-02 16:55:00 -05:00
Station.php	Remove debug log messages from Station controller and model	2025-08-02 11:31:45 +01:00
Stationdiary.php	Add public station-diary search	2026-04-15 11:38:38 +01:00
Statistics.php	Enhance country count filtering in statistics	2026-01-06 22:37:36 +00:00
Themes.php	Cast IDs to int; use query builder	2026-06-24 22:08:30 +01:00
Thirdpartylogins.php	[Third Party Logins] Created Model with functions and the controller which needs code	2022-07-10 21:28:21 +01:00
Timeline.php	[Timeline] Fix for DXCC QSO details	2023-02-22 12:15:11 +01:00
Timeplotter.php	Add HTMX-driven Timeplot UI and JS refactor	2026-04-26 22:10:29 +01:00
Update.php	Add UI for manual data file updates in maintenance	2026-01-14 14:55:07 +00:00
User.php	Apply user remote_operation option and messaging	2026-05-16 16:01:12 +01:00
User_options.php	end to end testing	2024-04-05 15:36:16 -05:00
Version_Dialog.php	basic controller	2023-12-04 01:20:36 +01:00
Visitor.php	Normalize location lists and sanitize SQL	2026-06-24 22:29:00 +01:00
Webadif.php	Comments added (testing branch/merge/PR-Issue)	2023-07-31 09:44:27 +00:00
Welcome.php	protect DANGEROUS Functions from being called without authed user	2023-08-01 10:37:20 +00:00
Widgets.php	Allow overriding displayed callsign in widgets	2026-03-30 10:45:51 +01:00
Workabledxcc.php	Normalize DXped callsigns, add paginated UI	2026-03-26 14:36:29 +00:00