mirror of
https://github.com/magicbug/Cloudlog
synced 2026-08-13 17:49:35 -04:00
4440582389
Replace ad-hoc xss_clean calls with explicit casting and stronger type checks for ID/parameter handling, and convert many raw SQL strings to CodeIgniter Query Builder usage. Added normalize_location_ids helpers (Activators_model, Oqrs_model) to safely parse location lists and used where_in/parameter binding/escaping to avoid injection and improve maintainability. Also adjusted session user_id handling, improved LIKE/DATE/TIMEDIFF usage, and tightened several model/controller methods (Labels, Activators, Bands, Contesting, Labels_model, Modes, Oqrs_model, Qsl_model, Setup_model, Sstv_model, User_model) for safer, clearer DB queries and inputs.
225 lines
11 KiB
PHP
225 lines
11 KiB
PHP
<?php
|
|
|
|
class Labels_model extends CI_Model {
|
|
function addLabel() {
|
|
$data = array(
|
|
'user_id' => $this->session->userdata('user_id'),
|
|
'label_name' => xss_clean($this->input->post('label_name', true)),
|
|
'paper_type_id' => xss_clean($this->input->post('paper_type_id', true)),
|
|
'metric' => xss_clean($this->input->post('measurementType', true)),
|
|
'marginleft' => xss_clean($this->input->post('marginLeft', true)),
|
|
'margintop' => xss_clean($this->input->post('marginTop', true)),
|
|
'nx' => xss_clean($this->input->post('NX', true)),
|
|
'ny' => xss_clean($this->input->post('NY', true)),
|
|
'spacex' => xss_clean($this->input->post('SpaceX', true)),
|
|
'spacey' => xss_clean($this->input->post('SpaceY', true)),
|
|
'width' => xss_clean($this->input->post('width', true)),
|
|
'height' => xss_clean($this->input->post('height', true)),
|
|
'font_size' => xss_clean($this->input->post('font_size', true)),
|
|
'qsos' => xss_clean($this->input->post('label_qsos', true)),
|
|
'font' => xss_clean($this->input->post('font', true)),
|
|
'last_modified' => date('Y-m-d H:i:s'),
|
|
);
|
|
|
|
$this->db->insert('label_types', $data);
|
|
|
|
}
|
|
|
|
function addPaper() {
|
|
$data = array(
|
|
'user_id' => $this->session->userdata('user_id'),
|
|
'paper_name' => xss_clean($this->input->post('paper_name', true)),
|
|
'metric' => xss_clean($this->input->post('measurementType', true)),
|
|
'width' => xss_clean($this->input->post('width', true)),
|
|
'height' => xss_clean($this->input->post('height', true)),
|
|
'orientation' => xss_clean($this->input->post('orientation', true)),
|
|
'last_modified' => date('Y-m-d H:i:s'),
|
|
);
|
|
|
|
$this->db->insert('paper_types', $data);
|
|
|
|
}
|
|
|
|
function getLabel($id,$user_id) {
|
|
$sql="SELECT l.id, l.user_id,l.label_name, p.paper_name, p.paper_id,l.paper_type_id,l.metric, l.marginleft, l.margintop, l.nx, l.ny, l.spacex, l.spacey, l.width, l.height, l.font_size, l.font, l.qsos, l.useforprint, l.last_modified FROM label_types l left outer join paper_types p on (p.user_id=l.user_id and p.paper_id=l.paper_type_id) where l.user_id=? and l.id=?;";
|
|
$query=$this->db->query($sql,array($user_id,$id));
|
|
$result=$query->result();
|
|
return $result[0];
|
|
}
|
|
|
|
|
|
function updateLabel($id) {
|
|
$data = array(
|
|
'user_id' => $this->session->userdata('user_id'),
|
|
'label_name' => xss_clean($this->input->post('label_name', true)),
|
|
'paper_type_id' => xss_clean($this->input->post('paper_type_id', true)),
|
|
'metric' => xss_clean($this->input->post('measurementType', true)),
|
|
'marginleft' => xss_clean($this->input->post('marginLeft', true)),
|
|
'margintop' => xss_clean($this->input->post('marginTop', true)),
|
|
'nx' => xss_clean($this->input->post('NX', true)),
|
|
'ny' => xss_clean($this->input->post('NY', true)),
|
|
'spacex' => xss_clean($this->input->post('SpaceX', true)),
|
|
'spacey' => xss_clean($this->input->post('SpaceY', true)),
|
|
'width' => xss_clean($this->input->post('width', true)),
|
|
'height' => xss_clean($this->input->post('height', true)),
|
|
'font_size' => xss_clean($this->input->post('font_size', true)),
|
|
'qsos' => xss_clean($this->input->post('label_qsos', true)),
|
|
'font' => xss_clean($this->input->post('font', true)),
|
|
'last_modified' => date('Y-m-d H:i:s'),
|
|
);
|
|
|
|
$cleanid = $this->security->xss_clean($id);
|
|
|
|
$this->db->where('user_id', $this->session->userdata('user_id'));
|
|
$this->db->where('id', $cleanid);
|
|
$this->db->update('label_types', $data);
|
|
}
|
|
|
|
function deleteLabel($id) {
|
|
$cleanid = xss_clean($id);
|
|
|
|
$this->db->delete('label_types', array('id' => $cleanid, 'user_id' => $this->session->userdata('user_id')));
|
|
}
|
|
|
|
function fetchLabels($user_id) {
|
|
$sql="SELECT l.id, l.user_id,l.label_name, p.paper_name, l.metric, l.marginleft, l.margintop, l.nx, l.ny, l.spacex, l.spacey, l.width, l.height, l.font_size, l.font, l.qsos, l.useforprint, l.last_modified FROM label_types l left outer join paper_types p on (p.user_id=l.user_id and p.paper_id=l.paper_type_id) where l.user_id=?;";
|
|
$query=$this->db->query($sql,$user_id);
|
|
return $query->result();
|
|
}
|
|
|
|
function fetchPapertypes($user_id) {
|
|
$sql="SELECT p.paper_id,p.user_id,p.paper_name,p.metric,p.width,p.height,p.last_modified, p.orientation,COUNT(DISTINCT l.id) AS lbl_cnt FROM paper_types p LEFT OUTER JOIN label_types l ON (p.paper_id = l.paper_type_id and p.user_id=l.user_id) WHERE p.user_id = ? group by p.paper_id,p.user_id,p.paper_name,p.metric,p.width,p.height,p.last_modified;";
|
|
$query = $this->db->query($sql, $this->session->userdata('user_id'));
|
|
return $query->result();
|
|
}
|
|
|
|
function fetchQsos($user_id) {
|
|
|
|
$this->db->select("count(*) count, station_profile.station_profile_name, station_profile.station_callsign, station_profile.station_id, station_profile.station_gridsquare", false);
|
|
$this->db->from($this->config->item('table_name') . ' as l');
|
|
$this->db->join('station_profile', 'l.station_id = station_profile.station_id');
|
|
$this->db->where_in('l.COL_QSL_SENT', array('R', 'Q'));
|
|
$this->db->where('station_profile.user_id', (int) $user_id);
|
|
$this->db->group_by('station_profile.station_profile_name, station_profile.station_callsign, station_profile.station_id, station_profile.station_gridsquare');
|
|
$this->db->order_by('station_profile.station_callsign');
|
|
$query = $this->db->get();
|
|
|
|
return $query->result();
|
|
}
|
|
|
|
function getDefaultLabel() {
|
|
$this->db->where('user_id', $this->session->userdata('user_id'));
|
|
$this->db->where('useforprint', '1');
|
|
$query = $this->db->get('label_types');
|
|
|
|
return $query->row();
|
|
}
|
|
|
|
function getPaperType($ptype_id) {
|
|
$this->db->where('user_id', $this->session->userdata('user_id'));
|
|
$this->db->where('paper_id',$ptype_id);
|
|
$query = $this->db->get('paper_types');
|
|
|
|
return $query->row();
|
|
}
|
|
|
|
function saveDefaultLabel($id) {
|
|
$user_id = (int) $this->session->userdata('user_id');
|
|
$cleanid = (int) $id;
|
|
|
|
$this->db->where('user_id', $user_id);
|
|
$this->db->update('label_types', array('useforprint' => 0));
|
|
|
|
$this->db->where('user_id', $user_id);
|
|
$this->db->where('id', $cleanid);
|
|
$this->db->update('label_types', array('useforprint' => 1));
|
|
}
|
|
|
|
function export_printrequested($station_id = NULL) {
|
|
$this->load->model('stations');
|
|
$active_station_id = $this->stations->find_active();
|
|
|
|
$this->db->select($this->config->item('table_name').'.*, station_profile.*, dxcc_entities.name as station_country');
|
|
|
|
if ($station_id == NULL) {
|
|
$this->db->where($this->config->item('table_name').'.station_id', $active_station_id);
|
|
} else if ($station_id != 'All') {
|
|
$this->db->where($this->config->item('table_name').'.station_id', $station_id);
|
|
}
|
|
|
|
$this->db->join('station_profile', 'station_profile.station_id = '.$this->config->item('table_name').'.station_id');
|
|
$this->db->join('dxcc_entities', 'station_profile.station_dxcc = dxcc_entities.adif');
|
|
// always filter user. this ensures that even if the station_id is from another user no inaccesible QSOs will be returned
|
|
$this->db->where('station_profile.user_id', $this->session->userdata('user_id'));
|
|
$this->db->where_in('COL_QSL_SENT', array('R', 'Q'));
|
|
// Natural callsign sorting: DXCC first, then callsign broken into prefix + number (padded) + suffix
|
|
$this->db->order_by('COL_DXCC', 'ASC', FALSE);
|
|
$this->db->order_by('REGEXP_REPLACE(COALESCE(NULLIF(COL_QSL_VIA, \'\'), COL_CALL), \'[0-9]\', \'\'), CAST(REGEXP_REPLACE(COALESCE(NULLIF(COL_QSL_VIA, \'\'), COL_CALL), \'[^0-9]\', \'\') AS UNSIGNED), COALESCE(NULLIF(COL_QSL_VIA, \'\'), COL_CALL)', 'ASC', FALSE);
|
|
$this->db->order_by('COL_SAT_NAME', 'ASC', FALSE);
|
|
$this->db->order_by('COL_SAT_MODE', 'ASC', FALSE);
|
|
$this->db->order_by('COL_BAND_RX', 'ASC', FALSE);
|
|
$this->db->order_by('COL_TIME_ON', 'ASC', FALSE);
|
|
$this->db->order_by('COL_MODE', 'ASC', FALSE);
|
|
$query = $this->db->get($this->config->item('table_name'));
|
|
|
|
return $query;
|
|
}
|
|
|
|
function export_printrequestedids($ids) {
|
|
$this->db->select($this->config->item('table_name').'.*, station_profile.*, dxcc_entities.name as station_country');
|
|
$this->db->join('station_profile', 'station_profile.station_id = '.$this->config->item('table_name').'.station_id');
|
|
$this->db->join('dxcc_entities', 'station_profile.station_dxcc = dxcc_entities.adif');
|
|
$this->db->where('station_profile.user_id', $this->session->userdata('user_id'));
|
|
$this->db->where_in('COL_PRIMARY_KEY', $ids);
|
|
// Natural callsign sorting: DXCC first, then callsign broken into prefix + number (padded) + suffix
|
|
$this->db->order_by('COL_DXCC', 'ASC', FALSE);
|
|
$this->db->order_by('REGEXP_REPLACE(COALESCE(NULLIF(COL_QSL_VIA, \'\'), COL_CALL), \'[0-9]\', \'\'), CAST(REGEXP_REPLACE(COALESCE(NULLIF(COL_QSL_VIA, \'\'), COL_CALL), \'[^0-9]\', \'\') AS UNSIGNED), COALESCE(NULLIF(COL_QSL_VIA, \'\'), COL_CALL)', 'ASC', FALSE);
|
|
$query = $this->db->get($this->config->item('table_name'));
|
|
|
|
return $query;
|
|
}
|
|
|
|
function updatePaper($id) {
|
|
$data = array(
|
|
'user_id' => $this->session->userdata('user_id'),
|
|
'paper_name' => xss_clean($this->input->post('paper_name', true)),
|
|
'metric' => xss_clean($this->input->post('measurementType', true)),
|
|
'width' => xss_clean($this->input->post('width', true)),
|
|
'height' => xss_clean($this->input->post('height', true)),
|
|
'orientation' => xss_clean($this->input->post('orientation', true)),
|
|
'last_modified' => date('Y-m-d H:i:s'),
|
|
);
|
|
|
|
$cleanid = $this->security->xss_clean($id);
|
|
|
|
$this->db->where('user_id', $this->session->userdata('user_id'));
|
|
$this->db->where('paper_id', $cleanid);
|
|
$this->db->update('paper_types', $data);
|
|
}
|
|
|
|
function label_cnt_with_paper($paper_id) {
|
|
$clean_paper_id=xss_clean($paper_id);
|
|
$sql="select count(distinct l.id) as CNT from label_types l inner join paper_types p on (p.paper_id=l.paper_type_id) where l.user_id=? and p.user_id=? and l.paper_type_id=?";
|
|
$query = $this->db->query($sql, array($this->session->userdata('user_id'), $this->session->userdata('user_id'), $clean_paper_id));
|
|
$row = $query->row();
|
|
if (isset($row)) {
|
|
return($row->CNT);
|
|
} else {
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
function deletePaper($id) {
|
|
$cleanid = xss_clean($id);
|
|
|
|
$this->db->delete('paper_types', array('paper_id' => $cleanid, 'user_id' => $this->session->userdata('user_id')));
|
|
}
|
|
|
|
function getPaper($id) {
|
|
$this->db->where('user_id', $this->session->userdata('user_id'));
|
|
$this->db->where('paper_id', $id);
|
|
$query = $this->db->get('paper_types');
|
|
|
|
return $query->row();
|
|
}
|
|
}
|