Make order_by more safe

This commit is contained in:
int2001
2025-04-02 09:43:22 +00:00
parent 3a88f64744
commit 5cfbfcd671

View File

@@ -443,6 +443,11 @@ class Logbookadvanced_model extends CI_Model {
return 'ORDER BY qsos.COL_TIME_ON desc';
} else {
$sortorder = explode(',', $sortorder);
if (strtoupper($sortorder[1] ?? '') == 'ASC') {
$sortorder[1]='asc';
} else {
$sortorder[1]='desc';
}
if ($this->session->userdata('user_lotw_name') != "" && $this->session->userdata('user_eqsl_name') != ""){
switch($sortorder[0]) {