sander/rowsandall
Private
Public Access
1
0
Fork 0
Code Activity

bug fix

Browse Source
This commit is contained in:
Sander Roosendaal
2020-07-04 06:47:46 +02:00
parent 9e85364c37
commit 34810fbf75
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
rowers/views/racesviews.py
View File

@@ -378,7 +378,12 @@ def standard_view(request,id=0):
r = getrower(request.user) r = getrower(request.user)
allower = ["-referencespeed","agemax","agemin","sex","name",
"referencespeed","-agemax","-agemin","-sex","-name"]
orderby = request.GET.get('order_by') orderby = request.GET.get('order_by')
if orderby not in allowed:
orderby = None
if orderby is not None: if orderby is not None:
standards = CourseStandard.objects.filter( standards = CourseStandard.objects.filter(
@@ -1328,7 +1333,11 @@ def virtualevent_view(request,id=0):
} }
] ]
allowed = ["duration","distance","-distance","points","-points","-duration","-distance"]
orderby = request.GET.get('order_by') orderby = request.GET.get('order_by')
if orderby not in allowed:
orderby = None
if orderby is not None: if orderby is not None:
try: try:
results = results.order_by(orderby) results = results.order_by(orderby)