mirror of
https://git.tt-rss.org/git/tt-rss.git
synced 2025-12-13 17:05:56 +00:00
api/getArticle: validate id list
This commit is contained in:
@@ -274,7 +274,7 @@
|
|||||||
|
|
||||||
case "getArticle":
|
case "getArticle":
|
||||||
|
|
||||||
$article_id = db_escape_string($_REQUEST["article_id"]);
|
$article_id = join(",", array_filter(explode(",", db_escape_string($_REQUEST["article_id"])), is_numeric));
|
||||||
|
|
||||||
$query = "SELECT id,title,link,content,feed_id,comments,int_id,
|
$query = "SELECT id,title,link,content,feed_id,comments,int_id,
|
||||||
marked,unread,published,
|
marked,unread,published,
|
||||||
|
|||||||
Reference in New Issue
Block a user