Public_Tools/wavelog
2
0
Fork 0
mirror of https://github.com/wavelog/wavelog.git synced 2026-03-22 10:24:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

verwende binding statt escape

Browse Source
This commit is contained in:
HB9HIL
2024-12-14 10:53:45 +01:00
parent b79e503f00
commit 283e9e67a4
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
application/models/Qslprint_model.php
View File

@@ -165,13 +165,13 @@ class Qslprint_model extends CI_Model {
}
$where = [];
$binding = [];
foreach ($qso_data as $qso) {
$call = $this->db->escape($qso['call']);
$mode = $this->db->escape($qso['mode']);
$band = $this->db->escape($qso['band']);
$sat_name = $this->db->escape($qso['sat_name'] ?? '');
$where[] = "(COL_CALL = $call AND COL_MODE = $mode AND COL_BAND = $band AND COL_SAT_NAME = $sat_name)";
$where[] = "(COL_CALL = ? AND COL_MODE = ? AND COL_BAND = ? AND COL_SAT_NAME = ?)";
$binding[] = $qso['call'];
$binding[] = $qso['mode'];
$binding[] = $qso['band'];
$binding[] = $qso['sat_name'] ?? '';
}
$sql = "SELECT COL_CALL, COL_MODE, COL_BAND, COL_SAT_NAME, COUNT(COL_PRIMARY_KEY) AS count FROM " . $this->config->item('table_name') . "
@@ -180,7 +180,7 @@ class Qslprint_model extends CI_Model {
GROUP BY COL_CALL, COL_MODE, COL_BAND, COL_SAT_NAME
";
return $this->db->query($sql)->result();
return $this->db->query($sql, $binding)->result();
}
}