mirror
/
Cloudlog
kopia lustrzana https://github.com/magicbug/Cloudlog
1
0
Forkuj 0
Kod Zgłoszenia Packages Projekty Wydania Wiki Aktywność

Added XSS clean to incoming items and code to delete clublog adif files

pull/360/head
Peter Goodhall 2019-10-05 19:26:07 +01:00
rodzic 49f7bdf6e8
commit 51723d146c
1 zmienionych plików z 10 dodań i 4 usunięć
Pokaż statystyki Ściągnij plik aktualizacji Ściągnij plik porównania Expand all files Collapse all files

14
application/controllers/Clublog.php
Wyświetl plik

@ -13,6 +13,9 @@ class Clublog extends CI_Controller {
// Upload ADIF to Clublog
public function upload($username) {
$clean_username = $this->security->xss_clean($username);
$this->config->load('config');
ini_set('memory_limit', '-1');
ini_set('display_errors', 1);
@ -27,7 +30,7 @@ class Clublog extends CI_Controller {
$this->load->model('clublog_model');
$clublog_info = $this->clublog_model->get_clublog_auth_info($username);
$clublog_info = $this->clublog_model->get_clublog_auth_info($clean_username);
if(!isset($clublog_info['user_name'])) {
echo "Username unknown";
@ -117,19 +120,22 @@ class Clublog extends CI_Controller {
}
function markqso($station_id) {
$clean_station_id = $this->security->xss_clean($station_id);
$this->load->model('clublog_model');
$this->clublog_model->mark_qsos_sent($station_id);
$this->clublog_model->mark_qsos_sent($clean_station_id);
}
function markallnotsent() {
$clean_station_id = $this->security->xss_clean($station_id);
$this->load->model('clublog_model');
$this->clublog_model->mark_all_qsos_notsent($station_id);
$this->clublog_model->mark_all_qsos_notsent($clean_station_id);
}
// Find DXCC
function find_dxcc($callsign) {
$clean_callsign = $this->security->xss_clean($callsign);
// Live lookup against Clublogs API
$url = "https://secure.clublog.org/dxcc?call=".$callsign."&api=a11c3235cd74b88212ce726857056939d52372bd&full=1";
$url = "https://secure.clublog.org/dxcc?call=".$clean_callsign."&api=a11c3235cd74b88212ce726857056939d52372bd&full=1";
$json = file_get_contents($url);
$data = json_decode($json, TRUE);