somewhat functional notes table (needs improvement)

This commit is contained in:
Felix Ivo
2025-06-16 10:21:41 +02:00
parent 8c13989d47
commit b6d51cbc37
3 changed files with 69 additions and 19 deletions

View File

@@ -18,10 +18,19 @@ class NotesController
public function showNotes()
{
$this->view->setVars([
"notes" => $this->notesModel->selectNotes()
]);
$sortBy = $_GET['sort_by'] ?? 'updated_at';
$sortOrder = strtoupper($_GET['sort_order'] ?? 'DESC');
// Validate sort order to prevent SQL injection
$sortOrder = in_array($sortOrder, ['ASC', 'DESC']) ? $sortOrder : 'DESC';
// Validate sort column to prevent SQL injection
$validSortColumns = ['id', 'title', 'updated_at', 'created_at'];
$sortBy = in_array($sortBy, $validSortColumns) ? $sortBy : 'updated_at';
$this->view->setVars([
"notes" => $this->notesModel->selectNotesForUser(2, $sortBy, $sortOrder) //$_SESSION['user_id']
]);
}
}