mirror of
https://git.tt-rss.org/git/tt-rss.git
synced 2025-12-23 04:51:29 +00:00
properly check for article ownership in getArticleFeed()
This commit is contained in:
@@ -6475,7 +6475,7 @@
|
||||
|
||||
function getArticleFeed($link, $id) {
|
||||
$result = db_query($link, "SELECT feed_id FROM ttrss_user_entries
|
||||
WHERE ref_id = '$id'");
|
||||
WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
|
||||
|
||||
if (db_num_rows($result) != 0) {
|
||||
return db_fetch_result($result, 0, "feed_id");
|
||||
|
||||
Reference in New Issue
Block a user