Peter Goodhall c6bdee1bc5 Sanitize location lists and harden SQL ... Replace string-quoted station_id lists with comma-separated, integer-casted lists and harden SQL across awards models. This diff converts constructions like "'a','b'" to implode(',', array_map('intval', ...)) and uses $this->db->escape_str() for band/mode values and band lists to reduce injection/format issues. Added helper methods (addModeToQuery, addBandToQuery variants) to centralize mode/band filtering, parameterized time/mode/band queries in Gmdxsummer_model, and escaped band arrays when building IN() lists. Also added null/empty-checks for logbook arrays in several models and small refactors (e.g. VUCC addBandToQuery) to keep SQL building consistent.		2026-06-24 22:26:11 +01:00
..
Accumulate_model.php	Sanitize and escape query inputs in models	2026-06-24 22:19:35 +01:00
Activated_gridmap_model.php	Sanitize and escape query inputs in models	2026-06-24 22:19:35 +01:00
Activators_model.php	Sanitize IDs and migrate SQL to Query Builder	2026-06-24 22:15:31 +01:00
Adif_data.php	Sanitize and escape query inputs in models	2026-06-24 22:19:35 +01:00
Api_model.php	Cleaned up formatting of api model	2024-11-21 16:30:12 +00:00
Awards_model.php	Added Awards Settings	2025-12-02 13:32:11 +00:00
Bands.php	Sanitize location lists and harden SQL	2026-06-24 22:26:11 +01:00
Callhistory_model.php	Support compound callsign matching and base extraction	2026-03-26 13:07:25 +00:00
Cat.php	Use CI query builder for safer DB queries	2026-06-24 22:10:20 +01:00
Clublog_model.php	Include user_id in station profile query	2025-10-13 15:07:57 +01:00
Contesting_model.php	Sanitize IDs and migrate SQL to Query Builder	2026-06-24 22:15:31 +01:00
Counties.php	Sanitize location lists and harden SQL	2026-06-24 22:26:11 +01:00
Cq.php	Sanitize and escape query inputs in models	2026-06-24 22:19:35 +01:00
Csv_model.php	datetimepicker bs5	2023-11-17 15:34:24 +01:00
Dayswithqso_model.php	Sanitize location lists and harden SQL	2026-06-24 22:26:11 +01:00
Distances_model.php	Use direct lotw_users joins instead of subqueries	2026-02-11 10:50:22 +00:00
Dok.php	Sanitize location lists and harden SQL	2026-06-24 22:26:11 +01:00
Dxatlas_model.php	datetimpicker dxatlas export (+bugfix)	2023-11-17 15:27:44 +01:00
Dxcc.php	Sanitize location lists and harden SQL	2026-06-24 22:26:11 +01:00
Dxcc_entities.php	Removed all constructors in models, since this doesn't work in never CodeIgniter	2021-11-06 20:24:28 +01:00
Dxcc_exceptions.php	Removed all constructors in models, since this doesn't work in never CodeIgniter	2021-11-06 20:24:28 +01:00
Dxcc_prefixes.php	Removed all constructors in models, since this doesn't work in never CodeIgniter	2021-11-06 20:24:28 +01:00
Dxcluster_model.php	Add missing space	2023-12-20 07:45:30 +00:00
Emeinitials_model.php	Update application/models/Emeinitials_model.php	2025-09-29 22:07:22 +01:00
Eqsl_images.php	Update application/models/Eqsl_images.php	2025-07-17 17:38:33 +01:00
Eqslmethods_model.php	Use primary key for eQSL batch updates	2026-03-18 15:29:10 +00:00
Ffma_model.php	Sanitize location lists and harden SQL	2026-06-24 22:26:11 +01:00
Gmdxsummer_model.php	Sanitize location lists and harden SQL	2026-06-24 22:26:11 +01:00
Gridmap_model.php	Sanitize and escape query inputs in models	2026-06-24 22:19:35 +01:00
Gridmaster_model.php	Sanitize location lists and harden SQL	2026-06-24 22:26:11 +01:00
index.html	Added Basic Files	2011-04-25 16:24:01 +01:00
Iota.php	Sanitize location lists and harden SQL	2026-06-24 22:26:11 +01:00
Labels_model.php	Sanitize IDs and migrate SQL to Query Builder	2026-06-24 22:15:31 +01:00
Logbook_model.php	Treat empty numeric inputs as NULL	2026-06-09 11:22:01 +01:00
Logbookadvanced_model.php	Add gridsquare prefix index and optimizations	2026-02-11 11:09:39 +00:00
Logbooks_model.php	Support varying slp permission column names	2026-05-21 16:12:22 +01:00
Lookup_model.php	Add pagination and DXCC tab to previous QSOs	2026-03-26 22:26:47 +00:00
LotwCert.php	Add LoTW batch updates and performance indexes	2026-02-11 11:14:59 +00:00
MigrationVersion.php	new MigrationVersion Model	2023-11-12 15:34:48 +01:00
Modes.php	Sanitize IDs and migrate SQL to Query Builder	2026-06-24 22:15:31 +01:00
Monthlyreport_model.php	Add new gridsquares by band to monthly report	2025-11-14 17:49:25 +00:00
Mostworked_model.php	Update REGEXP to include 'R' in col_call filter	2025-08-24 10:54:17 +01:00
Note.php	Add public station-diary search	2026-04-15 11:38:38 +01:00
Options_model.php	Allow partial option saves and surface save errors	2026-04-26 18:04:58 +01:00
Oqrs_model.php	Sanitize IDs and migrate SQL to Query Builder	2026-06-24 22:15:31 +01:00
Plugins_model.php	Add plugin system and Plugin Manager	2026-04-29 22:33:22 +01:00
Pota.php	Support multiple POTA refs, DB + UI	2026-03-24 14:32:17 +00:00
Publicsearch.php	Adjust SQL to be less picky about callsigns	2023-07-14 07:53:54 +02:00
Qsl_model.php	Sanitize IDs and migrate SQL to Query Builder	2026-06-24 22:15:31 +01:00
Qslprint_model.php	make sure only requested callsign is shown	2023-12-07 01:18:24 +01:00
Search.php	changed search filter from active logbook to all stations of the user	2022-02-06 09:41:11 +01:00
Search_filter.php	Removed all constructors in models, since this doesn't work in never CodeIgniter	2021-11-06 20:24:28 +01:00
Setup_model.php	Sanitize IDs and migrate SQL to Query Builder	2026-06-24 22:15:31 +01:00
Sig.php	Add SIG award filters and translations	2026-01-21 17:15:01 +00:00
Sota.php	Refactor and enhance SOTA awards support	2026-01-13 13:35:11 +00:00
Sota_model.php	Refactor and enhance SOTA awards support	2026-01-13 13:35:11 +00:00
Sstv_model.php	Sanitize IDs and migrate SQL to Query Builder	2026-06-24 22:15:31 +01:00
Stations.php	Support multiple POTA refs, DB + UI	2026-03-24 14:32:17 +00:00
Stats.php	Add gridsquare prefix index and optimizations	2026-02-11 11:09:39 +00:00
Themes_model.php	Cast IDs to int; use query builder	2026-06-24 22:08:30 +01:00
Thirdpartylogin.php	[Third Party Logins] Created Model with functions and the controller which needs code	2022-07-10 21:28:21 +01:00
Timeline_model.php	Sort timeline by earliest contact	2026-04-26 21:46:32 +01:00
Timeplotter_model.php	[Timeplotter] Fixed error when no QSOs found.	2021-11-14 17:20:10 +01:00
User_model.php	Sanitize IDs and migrate SQL to Query Builder	2026-06-24 22:15:31 +01:00
User_options_model.php	Add option to configure private feed key and show only workable passe	2024-03-09 08:49:12 +01:00
Vucc.php	Sanitize location lists and harden SQL	2026-06-24 22:26:11 +01:00
Waja.php	Sanitize location lists and harden SQL	2026-06-24 22:26:11 +01:00
Was.php	Sanitize location lists and harden SQL	2026-06-24 22:26:11 +01:00
Winkey.php	Improve CW macro saving and UI feedback	2025-10-10 14:54:50 +01:00
Workabledxcc_model.php	Add option to count satellite QSOs in DXPeditions	2026-03-26 15:00:56 +00:00
Worked_all_britain_model.php	Use direct lotw_users joins instead of subqueries	2026-02-11 10:50:22 +00:00
Wwff.php	Add advanced filtering and stats to WWFF awards page	2026-01-21 17:36:18 +00:00