blackicedbear/FHC-Core
1
0
Fork 0
mirror of https://github.com/FH-Complete/FHC-Core.git synced 2026-07-20 00:12:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

checks the size of the arrays before using the current method and does not allow mitarbeiter to access the student stundenplan

Browse Source
This commit is contained in:
SimonGschnell
2024-10-14 11:32:23 +02:00
parent 462857080b
commit 0528f3b262
2 changed files with 63 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
application/models/ressource/Stundenplan_model.php
+17 -4
View File
@@ -199,13 +199,26 @@ class Stundenplan_model extends DB_Model
from lehre.vw_stundenplan sp
WHERE
sp.datum >= ".$this->escape($start_date)."
AND sp.datum <= ".$this->escape($end_date)."
AND (
sp.gruppe_kurzbz IN (".implode(',',$gruppen).")";
AND sp.datum <= ".$this->escape($end_date);
if(count($gruppen) != 0 || count($studentlehrverbaende) != 0)
{
$query .= "AND ( ";
}
if(count($gruppen) != 0)
{
$query .="sp.gruppe_kurzbz IN (".implode(',',$gruppen).")";
}
foreach($studentlehrverbaende as $lehrverband){
$query .= "OR (sp.studiengang_kz = ".$this->escape($lehrverband->studiengang_kz)." AND sp.semester = ".$this->escape($lehrverband->semester)." AND sp.verband = ".$this->escape($lehrverband->verband)." AND sp.gruppe = ".$this->escape($lehrverband->gruppe).")";
}
$query .= ")";
if(count($gruppen) != 0 || count($studentlehrverbaende) != 0)
{
$query .= ")";
}
return $query;
}