mirror of
https://github.com/wavelog/wavelog.git
synced 2026-03-22 10:24:14 +00:00
Make order_by more safe
This commit is contained in:
@@ -443,6 +443,11 @@ class Logbookadvanced_model extends CI_Model {
|
||||
return 'ORDER BY qsos.COL_TIME_ON desc';
|
||||
} else {
|
||||
$sortorder = explode(',', $sortorder);
|
||||
if (strtoupper($sortorder[1] ?? '') == 'ASC') {
|
||||
$sortorder[1]='asc';
|
||||
} else {
|
||||
$sortorder[1]='desc';
|
||||
}
|
||||
|
||||
if ($this->session->userdata('user_lotw_name') != "" && $this->session->userdata('user_eqsl_name') != ""){
|
||||
switch($sortorder[0]) {
|
||||
|
||||
Reference in New Issue
Block a user