X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/117b8d1a6ba88251354ca7e31e9c514c3de0daec..38b9f8f7927f09b32a94df87d1264f568f620480:/app/controllers/swf_controller.rb

diff --git a/app/controllers/swf_controller.rb b/app/controllers/swf_controller.rb
index 0e7e15bbf..5097aa8c3 100644
--- a/app/controllers/swf_controller.rb
+++ b/app/controllers/swf_controller.rb
@@ -1,4 +1,5 @@
 class SwfController < ApplicationController
+	skip_before_filter :verify_authenticity_token
 	before_filter :check_api_readable
 
 # to log:
@@ -20,10 +21,8 @@ class SwfController < ApplicationController
 		basey		=params['basey'].to_f
 		masterscale	=params['masterscale'].to_f
 	
-		xmin=params['xmin'].to_f;
-		xmax=params['xmax'].to_f;
-		ymin=params['ymin'].to_f;
-		ymax=params['ymax'].to_f;
+		bbox = BoundingBox.new(params['xmin'], params['ymin'],
+		                       params['xmax'], params['ymax'])
 		start=params['start'].to_i;
 	
 		# -	Begin movie
@@ -53,7 +52,7 @@ class SwfController < ApplicationController
 			   " FROM gpx_files,gps_points "+
 			   "WHERE gpx_files.id=gpx_id "+
 			   "  AND gpx_files.user_id=#{user.id} "+
-			   "  AND "+OSM.sql_for_area(ymin,xmin,ymax,xmax,"gps_points.")+
+			   "  AND "+OSM.sql_for_area(bbox,"gps_points.")+
 			   "  AND (gps_points.timestamp IS NOT NULL) "+
 			   "ORDER BY fileid DESC,ts "+
 			   "LIMIT 10000 OFFSET #{start}"
@@ -61,7 +60,7 @@ class SwfController < ApplicationController
 			sql="SELECT latitude*0.0000001 AS lat,longitude*0.0000001 AS lon,gpx_id AS fileid,"+
 			     "      EXTRACT(EPOCH FROM timestamp) AS ts, gps_points.trackid AS trackid "+
 				 " FROM gps_points "+
-				 "WHERE "+OSM.sql_for_area(ymin,xmin,ymax,xmax,"gps_points.")+
+				 "WHERE "+OSM.sql_for_area(bbox,"gps_points.")+
 				 "  AND (gps_points.timestamp IS NOT NULL) "+
 				 "ORDER BY fileid DESC,ts "+
 				 "LIMIT 10000 OFFSET #{start}"