From c44af3585047575324ac19599ccb61a938f89179 Mon Sep 17 00:00:00 2001
From: phl0 <github@florian-wolters.de>
Date: Wed, 7 Jan 2026 18:21:21 +0100
Subject: [PATCH] Filter for file name extensions on various uploads

---
 application/views/adif/import.php            | 6 +++---
 application/views/lotw_views/upload_cert.php | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/application/views/adif/import.php b/application/views/adif/import.php
index 2454d59a7..f737173be 100644
--- a/application/views/adif/import.php
+++ b/application/views/adif/import.php
@@ -369,7 +369,7 @@
                                 <div class="small form-text text-muted"><?= __("If unchecked, information about QSOs which could not be found in Wavelog will be displayed.") ?></div>
                             </div>
                         </div>
-                        <input class="form-control w-auto mb-2 me-sm-2" type="file" name="userfile" size="20" />
+                        <input class="form-control w-auto mb-2 me-sm-2" type="file" name="userfile" size="20" accept=".adi,.ADI,.adif,.ADIF" />
                         <button type="submit" class="btn btn-sm btn-primary mb-2" value="Upload"><?= __("Upload") ?></button>
                     </form>
                 </div>
@@ -391,7 +391,7 @@
                     <p><?= sprintf(__("An example for a tool to export the POTA hunter log in ADIF format is %s made by AF0G and available on GitHub."), '<a target="_blank" href="https://github.com/adamfast/pota-hunter-log-adif">'.'pota-hunter-log-adif'.'</a>'); ?></p>
                     <form class="form" action="<?php echo site_url('adif/pota'); ?>" method="post" enctype="multipart/form-data">
 
-                        <input class="form-control w-auto mb-2 me-sm-2" type="file" name="userfile" size="20" />
+                        <input class="form-control w-auto mb-2 me-sm-2" type="file" name="userfile" size="20" accept=".adi,.ADI,.adif,.ADIF" />
                         <button type="submit" class="btn btn-sm btn-primary mb-2" value="Upload"><?= __("Upload") ?></button>
                     </form>
                 </div>
@@ -435,7 +435,7 @@
                                 <div class="small form-text text-muted"><?= __("If unchecked, this will erase the default serial number that (for example) N1MM+ produces. If checked, it will correct the serial number if necessary.") ?></div>
                             </div>
                         </div>
-                        <input class="form-control w-auto mb-2 me-sm-2" type="file" name="userfile" size="20" />
+                        <input class="form-control w-auto mb-2 me-sm-2" type="file" name="userfile" size="20" accept=".cbr,.CBR" />
                         <button type="submit" class="btn btn-sm btn-primary mb-2" value="Upload"><?= __("Upload") ?></button>
                     </form>
                 </div>
diff --git a/application/views/lotw_views/upload_cert.php b/application/views/lotw_views/upload_cert.php
index 5bd12cd55..ebbafe022 100644
--- a/application/views/lotw_views/upload_cert.php
+++ b/application/views/lotw_views/upload_cert.php
@@ -32,7 +32,7 @@
 			<?php echo form_open_multipart('lotw/do_cert_upload');?>
 				<div class="mb-3">
 					<label for="exampleFormControlFile1"><?= __("Upload Logbook of the World .p12 Certificate"); ?></label>
-					<input type="file" name="userfile" class="form-control" id="exampleFormControlFile1">
+					<input type="file" name="userfile" class="form-control" id="exampleFormControlFile1" accept=".p12,.P12">
 				 </div>
 
 				<button type="submit" value="upload" class="btn btn-primary"><?= __("Upload File"); ?></button>