From 833fd68b2a2cd14af1d04e44add40e3bf19a13ac Mon Sep 17 00:00:00 2001 From: int2001 Date: Wed, 10 Jan 2024 20:16:22 +0000 Subject: [PATCH] Removed never used (dangerous!) functions, where one can inject SQL to --- application/models/Logbook_model.php | 12 +----------- 1 file changed, 1 insertion(+), 11 deletions(-) diff --git a/application/models/Logbook_model.php b/application/models/Logbook_model.php index ecdfe8272..086578d34 100755 --- a/application/models/Logbook_model.php +++ b/application/models/Logbook_model.php @@ -4208,17 +4208,7 @@ function lotw_last_qsl_date($user_id) { * Same as check_dxcc_table, but the functionality is in * a stored procedure which we call */ - public function check_dxcc_stored_proc($call, $date){ - $this->db->query("call find_country('".$call."','".$date."', @country, @adif, @cqz)"); - $res = $this->db->query("select @country as country, @adif as adif, @cqz as cqz"); - $d = $res->result_array(); - - // Should only be one result. - // NOTE: might cause unexpected data if there's an - // error with clublog.org data. - return $d[0]; - } - + public function check_missing_dxcc_id($all){ // get all records with no COL_DXCC $this->db->select("COL_PRIMARY_KEY, COL_CALL, COL_TIME_ON, COL_TIME_OFF");