Public_Tools/wavelog
2
0
Fork 0
mirror of https://github.com/wavelog/wavelog.git synced 2026-03-22 02:14:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Adding support for optional cat_url argument in api/radio endpoint

Browse Source
This commit is contained in:
Luca
2025-09-14 20:25:25 +02:00
parent dc0250e7cc
commit 25df9c0490
2 changed files with 36 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
application/controllers/Api.php
View File

@@ -653,6 +653,13 @@ class API extends CI_Controller {
break;
}
// Handle optional cat_url
if (isset($obj['cat_url']) && !empty($obj['cat_url'])) {
$cat_url = $this->sanitize_callback_url($obj['cat_url']);
if ($cat_url !== false) {
$obj['cat_url'] = $cat_url;
}
}
// Store Result to Database
$this->cat->update($obj, $user_id, $operator);
@@ -1126,4 +1133,28 @@ class API extends CI_Controller {
echo json_encode(['status' => 'successful', 'message' => 'Export successful', 'statistics' => $data]);
}
/**
* Sanitize and validate callback URL
* @param string $url The URL to sanitize
* @return string|false Returns sanitized URL or false if invalid
*/
private function sanitize_callback_url($url) {
// Basic sanitization
$url = trim($url);
// Check if URL is valid and uses http or https
if (!filter_var($url, FILTER_VALIDATE_URL) ||
(!preg_match('/^https?:\/\//', $url))) {
return false;
}
// Remove trailing slashes
$url = rtrim($url, '/');
// Additional XSS cleaning
$url = $this->security->xss_clean($url);
return $url;
}
}

5
application/models/Cat.php
View File

@@ -27,6 +27,11 @@
'timestamp' => $timestamp,
);
// Handle callback URL if provided
if (isset($result['cat_url']) && !empty($result['cat_url'])) {
$data['cat_url'] = $result['cat_url'];
}
if ( (isset($result['power'])) && ($result['power'] != "NULL") && ($result['power'] != '') && (is_numeric($result['power']))) {
$data['power'] = $result['power'];
} else {