Nhances/nhance
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

FIX_CLAIMS_SQL_INJECTION

Browse Source
This commit is contained in:
velz 2026-02-11 17:51:36 +05:30
parent 4ff4b35912
commit 0e1648b628
1 changed files with 18 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
app/Models/TicketMasterModel.php
View File

@ -664,9 +664,13 @@ class TicketMasterModel extends Model
// Execute the query // Execute the query
$binds = ["start_date"=>$start_date,"end_date"=>$end_date]; $binds = ["start_date"=>$start_date,"end_date"=>$end_date];
// Merge policy_type binds if present
if (!empty($statusBinds)) {
$binds = array_merge($binds, $statusBinds);
}
$result = $this->db->query($sql, $binds)->getResultArray(); $result = $this->db->query($sql, $binds)->getResultArray();
// print_rr(count(($result)));
// print_rr($result);die(); // print_rr($this->db->lastQuery);die();
return $result; return $result;
} }
@ -729,8 +733,13 @@ class TicketMasterModel extends Model
"; ";
$binds = ["start_date"=>$start_date,"end_date"=>$end_date]; $binds = ["start_date"=>$start_date,"end_date"=>$end_date];
// Merge policy_type binds if present
if (!empty($statusBinds)) {
$binds = array_merge($binds, $statusBinds);
}
$result = $this->db->query($sql,$binds)->getResultArray(); $result = $this->db->query($sql,$binds)->getResultArray();
// print_rr(count(($result)));
// print_rr($this->db->lastQuery);die();
return $result; return $result;
} else { } else {
$ticket_type_data_1 = ""; $ticket_type_data_1 = "";
@ -804,8 +813,13 @@ class TicketMasterModel extends Model
$binds = ["start_date"=>$start_date,"end_date"=>$end_date]; $binds = ["start_date"=>$start_date,"end_date"=>$end_date];
// Execute the query // Execute the query
$result = $this->db->query($sql,$binds)->getResultArray(); // Merge policy_type binds if present
if (!empty($statusBinds)) {
$binds = array_merge($binds, $statusBinds);
}
$result = $this->db->query($sql,$binds)->getResultArray();
// print_rr($this->db->lastQuery);die();
return $result; return $result;