main
Yasen Pramatarov 2024-10-04 18:13:55 +03:00
parent 37c5bdb4b4
commit d82219eea0
3 changed files with 12 additions and 12 deletions

View File

@ -66,7 +66,7 @@ class Database {
$this->pdo = new PDO($dsn, $options['user'], $options['password'] ?? ''); $this->pdo = new PDO($dsn, $options['user'], $options['password'] ?? '');
$this->pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); $this->pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
} catch (PDOException $e) { } catch (PDOException $e) {
$error = getError('MySQL connection failed: ', $config['environment'], $e->getMessage()); $error = getError('MySQL connection failed: ', $e->getMessage(), $config['environment']);
} }
} }

View File

@ -4,22 +4,22 @@
<?php <?php
$param = ''; $param = '';
if (isset($_REQUEST['id'])) { if (isset($_REQUEST['id'])) {
$param .= '&id=' . $_REQUEST['id']; $param .= '&id=' . htmlspecialchars($_REQUEST['id']);
} }
if (isset($_REQUEST['name'])) { if (isset($_REQUEST['name'])) {
$param .= '&name=' . $_REQUEST['name']; $param .= '&name=' . htmlspecialchars($_REQUEST['name']);
} }
if (isset($_REQUEST['ip'])) { if (isset($_REQUEST['ip'])) {
$param .= '&ip=' . $_REQUEST['ip']; $param .= '&ip=' . htmlspecialchars($_REQUEST['ip']);
} }
if (isset($_REQUEST['event'])) { if (isset($_REQUEST['event'])) {
$param .= '&event=' . $_REQUEST['event']; $param .= '&event=' . htmlspecialchars($_REQUEST['event']);
} }
if (isset($_REQUEST['from_time'])) { if (isset($_REQUEST['from_time'])) {
$param .= '&from_time=' . $from_time; $param .= '&from_time=' . htmlspecialchars($from_time);
} }
if (isset($_REQUEST['until_time'])) { if (isset($_REQUEST['until_time'])) {
$param .= '&until_time=' . $until_time; $param .= '&until_time=' . htmlspecialchars($until_time);
} }
$max_visible_pages = 10; $max_visible_pages = 10;
@ -47,20 +47,20 @@
if ($i === $browse_page) { if ($i === $browse_page) {
// current page, no link // current page, no link
if ($browse_page > 1) { if ($browse_page > 1) {
echo '<span><a href="' . htmlspecialchars($app_root) . '?platform=' . htmlspecialchars($platform_id) . '&page=' . htmlspecialchars($page) . htmlspecialchars($param) . '&p=' . (htmlspecialchars($browse_page) -1) . '"><<</a></span>'; echo '<span><a href="' . htmlspecialchars($app_root) . '?platform=' . htmlspecialchars($platform_id) . '&page=' . htmlspecialchars($page) . $param . '&p=' . (htmlspecialchars($browse_page) -1) . '"><<</a></span>';
} else { } else {
echo '<span><<</span>'; echo '<span><<</span>';
} }
echo '[' . htmlspecialchars($i) . ']'; echo '[' . htmlspecialchars($i) . ']';
if ($browse_page < $page_count) { if ($browse_page < $page_count) {
echo '<span><a href="' . htmlspecialchars($app_root) . '?platform=' . htmlspecialchars($platform_id) . '&page=' . htmlspecialchars($page) . htmlspecialchars($param) . '&p=' . (htmlspecialchars($browse_page) +1) . '">>></a></span>'; echo '<span><a href="' . htmlspecialchars($app_root) . '?platform=' . htmlspecialchars($platform_id) . '&page=' . htmlspecialchars($page) . $param . '&p=' . (htmlspecialchars($browse_page) +1) . '">>></a></span>';
} else { } else {
echo '<span>>></span>'; echo '<span>>></span>';
} }
} else { } else {
// other pages // other pages
echo '<span><a href="' . htmlspecialchars($app_root) . '?platform=' . htmlspecialchars($platform_id) . '&page=' . htmlspecialchars($page) . htmlspecialchars($param) . '&p=' . htmlspecialchars($i) . '">[' . htmlspecialchars($i) . ']</a></span>'; echo '<span><a href="' . htmlspecialchars($app_root) . '?platform=' . htmlspecialchars($platform_id) . '&page=' . htmlspecialchars($page) . $param . '&p=' . htmlspecialchars($i) . '">[' . htmlspecialchars($i) . ']</a></span>';
} }
// show ellipses between distant pages // show ellipses between distant pages
} elseif ( } elseif (
@ -72,7 +72,7 @@
} }
if ($browse_page < $page_count) { if ($browse_page < $page_count) {
echo '<span><a href="' . htmlspecialchars($app_root) . '?platform=' . htmlspecialchars($platform_id) . '&page=' . htmlspecialchars($page) . htmlspecialchars($param) . '&p=' . (htmlspecialchars($page_count)) . '">last</a></span>'; echo '<span><a href="' . htmlspecialchars($app_root) . '?platform=' . htmlspecialchars($platform_id) . '&page=' . htmlspecialchars($page) . $param . '&p=' . (htmlspecialchars($page_count)) . '">last</a></span>';
} else { } else {
echo '<span>last</span>'; echo '<span>last</span>';
} }

View File

@ -68,7 +68,7 @@ if ($config_file) {
die('Config file not found'); die('Config file not found');
} }
$app_root = htmlspecialchars($config['folder']); $app_root = $config['folder'];
session_name('jilo'); session_name('jilo');
session_start(); session_start();