fix security issue in view

2006-05-16 12:48:07 +01:00 · 2006-05-16 12:48:07 +01:00 · 12fb24b921
parent 7fb323413a
commit 12fb24b921
1 changed files with 1 additions and 1 deletions
--- a/backend.php
+++ b/backend.php
@ -520,7 +520,7 @@
 			num_comments,
 			author
 			FROM ttrss_entries,ttrss_user_entries
-			WHERE	id = '$id' AND ref_id = id");
+			WHERE	id = '$id' AND ref_id = id AND owner_uid = " . $_SESSION["uid"]);

 		print "<html><head>
 			<title>Tiny Tiny RSS : Article $id</title>