GSP/Panel
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix code review issues

Browse source 
- Remove unnecessary mysqli_real_escape_string calls on prepared statement params
- Add validation for strtotime to handle invalid dates gracefully

Co-authored-by: iaretechnician <2749183+iaretechnician@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot] 2025-10-29 02:21:33 +00:00
parent 4397e67ccb
commit a16dfcd15f
2 changed files with 18 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

18
modules/billing/create_servers.php
View file

@ -303,7 +303,11 @@ function exec_ogp_module()
}
else{
//this is a renewel, start from end of previous order
$end_date = strtotime('+'.$order['qty'].' day',strtotime($order['end_date']));
$current_end = strtotime($order['end_date']);
if ($current_end === false) {
$current_end = time(); // fallback to now if date is invalid
}
$end_date = strtotime('+'.$order['qty'].' day', $current_end);
}
}
@ -316,7 +320,11 @@ function exec_ogp_module()
}
else{
//this is a renewel, start from end of previous order
$end_date = strtotime('+'.$order['qty'].' month',strtotime($order['end_date']));
$current_end = strtotime($order['end_date']);
if ($current_end === false) {
$current_end = time(); // fallback to now if date is invalid
}
$end_date = strtotime('+'.$order['qty'].' month', $current_end);
}
}
elseif ($order['invoice_duration'] == "year")
@ -327,7 +335,11 @@ function exec_ogp_module()
}
else{
//this is a renewel, start from end of previous order
$end_date = strtotime('+'.$order['qty'].' year',strtotime($order['end_date']));
$current_end = strtotime($order['end_date']);
if ($current_end === false) {
$current_end = time(); // fallback to now if date is invalid
}
$end_date = strtotime('+'.$order['qty'].' year', $current_end);
}