goodspeed/Cloudlog
1
0
派生 0
代码 工单 合并请求 项目 版本发布 软件包 百科 动态 Actions

secure post value

浏览代码
这个提交包含在：
abarrau 2023-12-12 14:54:13 +01:00
父节点 d34f9d2441
当前提交 fae3c8a86e
共有 1 个文件被更改，包括 7 次插入 和 7 次删除
显示统计信息 下载 Patch 文件 下载 Diff 文件 展开所有文件 折叠所有文件

14
application/controllers/Map.php
查看文件

@ -105,18 +105,18 @@ class Map extends CI_Controller {
// set informations // // set informations //
if ($this->input->post('isCustom') == true) { if ($this->input->post('isCustom') == true) {
$date_from = $this->input->post('date_from'); $date_from = xss_clean($this->input->post('date_from'));
$date_to = $this->input->post('date_to'); $date_to = xss_clean($this->input->post('date_to'));
$band = $this->input->post('band'); $band = xss_clean($this->input->post('band'));
$mode = $this->input->post('mode'); $mode = xss_clean($this->input->post('mode'));
$prop_mode = $this->input->post('prop_mode'); $prop_mode = xss_clean($this->input->post('prop_mode'));
$qsos = $this->logbook_model->map_custom_qsos($date_from, $date_to, $band, $mode, $prop_mode); $qsos = $this->logbook_model->map_custom_qsos($date_from, $date_to, $band, $mode, $prop_mode);
} else if ($this->input->post('isFull') == true) { } else if ($this->input->post('isFull') == true) {
$station_id = $this->Stations->find_active(); $station_id = $this->Stations->find_active();
$qsos = $this->logbook_model->get_qsos(null,null,array($station_id)); // no limit for full // $qsos = $this->logbook_model->get_qsos(null,null,array($station_id)); // no limit for full //
} else { } else {
$nb_qso = (intval($this->input->post('nb_qso'))>0)?$this->input->post('nb_qso'):25; $nb_qso = (intval($this->input->post('nb_qso'))>0)?xss_clean($this->input->post('nb_qso')):18;
$offset = (intval($this->input->post('offset'))>0)?$this->input->post('offset'):0; $offset = (intval($this->input->post('offset'))>0)?xss_clean($this->input->post('offset')):null;
$qsos = $this->logbook_model->get_qsos($nb_qso, $offset); $qsos = $this->logbook_model->get_qsos($nb_qso, $offset);
} }
// [PLOT] ADD plot // // [PLOT] ADD plot //