Knowledge Base

validate_build_url()

Description

Sanitise the url provided when saving a dash tile. This function will take the value obtained by the form and pass it through if valid.
If the url supplied is invalid, a blank value will be returned allowing the default standard tile type to be used.

Parameters

Column	Type	Default	Description
$buildurl	string		url supplied when dash tile is edited, containing a number of optional parameters.

Return

string

A valid url or empty string if invalid.

Location

include/dash_functions.php lines 1900 to 1960

Definition

 
function validate_build_url($buildurl)
    {
    global $tile_styles;
    if ($buildurl != "")
        {
        # Sanitise the url provided.
        $build_url_parts = explode('?',$buildurl);
        $valid_tile_urls = array();
        $valid_tile_urls[] = 'pages/ajax/dash_tile.php';
        $valid_tile_urls[] = 'pages/team/ajax/graph.php';
        if (!in_array($build_url_parts[0],$valid_tile_urls))
            {
            // Url is invalid
            $buildurl = "";
            }
        else
            {
            parse_str(($build_url_parts[1]??""), $build_url_parts_param);
            foreach ($build_url_parts_param as $param => $value)
                {
                switch ($param)
                    {
                    case 'tltype':
                        # type checks
                        if (!array_key_exists($value,$tile_styles))
                            {
                            $buildurl = "";
                            }
                        break;
                    case 'tlsize':
                        # size checks
                        if (!in_array($value,array('single','double','')))
                            {
                            $buildurl = "";
                            }
                        break;
                    case 'tlstyle':
                        # style checks
                        $all_tile_styles = array();
                        foreach ($tile_styles as $tile_type_style)
                            {
                            $all_tile_styles = array_merge($all_tile_styles, $tile_type_style);
                            }
                        if (!in_array($value,$all_tile_styles))
                            {
                            $buildurl = "";
                            }
                        break;
                    case 'promimg':
                        # img checks
                        if (!is_int_loose($value) && !is_bool($build_url_parts_param[1]))
                            {
                            $buildurl = "";
                            }
                        break;
                    }
                }
            }
        }
    return $buildurl;
    }


This article was last updated 26th April 2024 18:05 Europe/London time based on the source file dated 25th April 2024 16:15 Europe/London time.