2025-09-08_08-25-59Z_Monday database changed

bin/hpr_ccdn_stats.bash

@@ -1,4 +0,0 @@
-#!/bin/bash
-
-yesterday="$( \date -u +%Y-%m-%d -d yesterday)" 
-echo -e "${yesterday}\t$( grep -Ec "${yesterday}T.*Sending request to" /home/hpr/logs/naughty-ip.txt )" >> /home/hpr/hub/hpr_ccdn_stats.tsv

bin/hpr_db_backup.bash

@@ -1,7 +0,0 @@
-#!/bin/bash
-pw=$(grep -E '^\$databasePassword = ' /home/hpr/php/credentials.php | awk -F "'" '{print $2}' )
-pw=${pw##* }
-mysqldump --user=hpr_hpr --password="$pw" -c -e --default-character-set=utf8 --single-transaction --skip-set-charset --add-drop-database --databases hpr_hpr > /home/hpr/hpr_hpr.sql
-mysqldump --databases hpr_hpr --add-drop-database --tz-utc --host=localhost --user=hpr_hpr --password="$pw" > /home/hpr/mysqldump.sql
-mysqldump --user=hpr_hpr --password="$pw" -c -e --default-character-set=utf8 --single-transaction --skip-set-charset --add-drop-database --databases hpr_hpr --ignore-table=hpr_hpr.reservations > /home/hpr/www/hpr.sql
-

bin/mdb.bash

@@ -1,4 +0,0 @@
-#!/bin/bash
-pw=$(grep -E '^\$databasePassword = ' /home/hpr/php/credentials.php | awk -F "'" '{print $2}' )
-pw=${pw##* }
-mysql --host=localhost --user=hpr_hpr --password="$pw" hpr_hpr

bin/run-speedtest.bash

@@ -1,6 +0,0 @@
-#!/bin/bash
-
-# * * * * * /usr/local/bin/run-speedtest.bash >/dev/null 2>&1
-
-speedtest-cli --json | jq '.' > /var/www/html/speedtest.json
-chown apache:apache /var/www/html/speedtest.json

bin/update-stats.bash

@@ -1,8 +0,0 @@
-#!/bin/bash
-
-hub_dir="/home/hpr/hub"
-
-for format in txt csv json xml
-do 
-  curl --silent --netrc-file /home/hpr/.netrc https://hub.hackerpublicradio.org/cms/stats.php?format=${format} --output ${hub_dir}/stats.${format} 
-done

cms/comment_checks.php

@@ -134,13 +134,13 @@
     $justification_ascii = "EXTENDED";
   }
 
-  $comment_author_name_json = json_encode( $comment_author_name );
+  $comment_author_name_json = json_encode( htmlentities( $comment_author_name ) );
   
-  $comment_title_json = json_encode( $comment_title );
+  $comment_title_json = json_encode( htmlentities( $comment_title ) );
   
-  $comment_text_json = json_encode( $comment_text );
+  $comment_text_json = json_encode( htmlentities( $comment_text ) );
   
-  $justification_json = json_encode( $justification );
+  $justification_json = json_encode( htmlentities( $justification ) );
   
   $comment_timestamp_json = json_encode( $comment_timestamp );
   

cms/comment_process.php

@@ -6,7 +6,6 @@ date_default_timezone_set('UTC');
 if ( $_SERVER['REQUEST_METHOD'] !== 'GET' ) {
   naughty("5c965856fd6e1af9256c04d400698fae not GET methog"); 
 }
-
 $num_get_args=0;
 
 foreach($_GET as $k => $v) { 
@@ -56,7 +55,6 @@ if (count($files) === 0) {
 else {
   $file = $files[0];
 }
-
 list($begin, $file_ip, $end) = explode('_', $file);
 
 if ( ! filter_var($file_ip, FILTER_VALIDATE_IP) ) {
@@ -93,14 +91,14 @@ if ( $action === 'approve' ) {
   echo json_encode($db);
   exit;
 }
-
 if ( $action === 'publish' ) {
 
+
   $comment = file_get_contents("$file");
 
   $json = json_decode($comment, true);
   
-  require "/home/hpr/public_html_hub/cms/comment_checks.php";
+  require "/home/hpr/public_html/cms/comment_checks.php";
   
   $ep_num = mysqli_real_escape_string( $connection, $ep_num );
   $comment_timestamp_db = mysqli_real_escape_string( $connection, $comment_timestamp_db );

cms/schedule.php

@@ -73,7 +73,9 @@ if ($result = mysqli_query($connection, $ep_retrieve)) {
     else {
       $status = "Reserved";
     }
-    $show_array[$id]  = array ( "date" => date('Y-m-d', strtotime($date) ), 
+    $show_array[$id]  = array ( 
+                                "id" => $id,
+                                "date" => date('Y-m-d', strtotime($date) ), 
                                 "title" => $title,
                                 "host" => $host,
                                 "status" => $status,
@@ -102,7 +104,8 @@ if ($result = mysqli_query($connection, $ep_retrieve)) {
     $id = $row['ep_num'];
     $date = $row['ep_date'];
     $status = $row['status'];
-    $show_array[$id]  = array ( "date" => date('Y-m-d', strtotime($date) ), 
+    $show_array[$id]  = array ( "id" => $id,
+                                "date" => date('Y-m-d', strtotime($date) ), 
                                 "title" => $status,
                                 "host" => "Unverified",
                                 "status" => "Processing",
@@ -121,7 +124,8 @@ if ($result = mysqli_query($connection, $ep_retrieve)) {
     $date = $row['ep_date'];
     $seconds_to_expiration = $row['seconds_to_expiration'];
     $minutes = floor($seconds_to_expiration / 60) + 1;
-    $show_array[$id]  = array ( "date" => date('Y-m-d', strtotime($date) ), 
+    $show_array[$id]  = array ( "id" => $id,
+                                "date" => date('Y-m-d', strtotime($date) ), 
                                 "title" => " Available again in $minutes minutes",
                                 "host" => "Unverified",
                                 "status" => "Locked",
@@ -153,7 +157,8 @@ if ($result = mysqli_query($connection, $ep_retrieve)) {
     $date = $row['date'];
     $title = $row['title'];
     $host = $row['host'];
-    $show_array[$id]  = array ( "date" => date('Y-m-d', strtotime($date) ), 
+    $show_array[$id]  = array ( "id" => $id,
+                                "date" => date('Y-m-d', strtotime($date) ), 
                                 "title" => $title,
                                 "host" => $host,
                                 "status" => "Finished",