public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-16 06:15:58 +00:00
Code Issues Releases Wiki Activity

fix title/link quote escaping issue when subscribing from feed browser (thread 108)

Browse Source
This commit is contained in:
Andrew Dolgov
2006-08-22 08:17:40 +01:00
parent e2a8a097bd
commit d0000401ad
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
backend.php
View File

@@ -1081,8 +1081,10 @@
$result = db_query($link, "SELECT feed_url,title FROM ttrss_feeds $result = db_query($link, "SELECT feed_url,title FROM ttrss_feeds
WHERE id = '$id'"); WHERE id = '$id'");
$feed_url = db_fetch_result($result, 0, "feed_url"); $feed_url = db_escape_string(db_fetch_result($result, 0, "feed_url"));
$title = db_fetch_result($result, 0, "title"); $title = db_escape_string(db_fetch_result($result, 0, "title"));
$title_orig = db_fetch_result($result, 0, "title");
$result = db_query($link, "SELECT id FROM ttrss_feeds WHERE $result = db_query($link, "SELECT id FROM ttrss_feeds WHERE
feed_url = '$feed_url' AND owner_uid = " . $_SESSION["uid"]); feed_url = '$feed_url' AND owner_uid = " . $_SESSION["uid"]);
@@ -1092,7 +1094,7 @@
"INSERT INTO ttrss_feeds (owner_uid,feed_url,title,cat_id) "INSERT INTO ttrss_feeds (owner_uid,feed_url,title,cat_id)
VALUES ('".$_SESSION["uid"]."', '$feed_url', '$title', NULL)"); VALUES ('".$_SESSION["uid"]."', '$feed_url', '$title', NULL)");
array_push($subscribed, $title); array_push($subscribed, $title_orig);
} }
} }