valvin
/
ttrss
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

prevent frontend updating of feeds on view if open_basedir is set to prevent plugins potentially not working correctly (i.e. if backend system has open_basedir disabled)

This commit is contained in:
Andrew Dolgov 2016-01-23 12:13:03 +03:00
parent 8f2268dd5e
commit 29c92d7b08
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
classes/api.php
View File

@ -416,7 +416,9 @@ class API extends Handler {
$feed_id = (int) $this->dbh->escape_string($_REQUEST["feed_id"]);
update_rss_feed($feed_id, true);
if (!ini_get("open_basedir")) {
update_rss_feed($feed_id, true);
}
$this->wrap(self::STATUS_OK, array("status" => "OK"));
}

2
classes/feeds.php
View File

@ -166,7 +166,7 @@ class Feeds extends Handler_Protected {
$method_split = explode(":", $method);
if ($method == "ForceUpdate" && $feed > 0 && is_numeric($feed)) {
if ($method == "ForceUpdate" && $feed > 0 && is_numeric($feed) && !ini_get("open_basedir")) {
// Update the feed if required with some basic flood control
$result = $this->dbh->query(