public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-15 05:35:56 +00:00
Code Issues Releases Wiki Activity

api/updateArticle: validate article_ids parameter (refs #375)

Browse Source
This commit is contained in:
Andrew Dolgov
2011-11-05 15:00:30 +04:00
parent e894e97f49
commit 52ebaf93e9
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
api/index.php
View File

@@ -207,7 +207,7 @@
break; break;
case "updateArticle": case "updateArticle":
$article_ids = split(",", db_escape_string($_REQUEST["article_ids"])); $article_ids = array_filter(explode(",", db_escape_string($_REQUEST["article_ids"])), is_numeric);
$mode = (int) db_escape_string($_REQUEST["mode"]); $mode = (int) db_escape_string($_REQUEST["mode"]);
$field_raw = (int)db_escape_string($_REQUEST["field"]); $field_raw = (int)db_escape_string($_REQUEST["field"]);