From c30f5e18119d1935e8fe6d422053b127e8f4f1b3 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <noreply@fakecake.org>
Date: Fri, 5 Jan 2018 06:50:37 +0300
Subject: [PATCH] subscribe_to_feed: force-cast login and password to string

---
 classes/feeds.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/classes/feeds.php b/classes/feeds.php
index 5814f06b1..015418328 100755
--- a/classes/feeds.php
+++ b/classes/feeds.php
@@ -1504,7 +1504,7 @@ class Feeds extends Handler_Protected {
 					(owner_uid,feed_url,title,cat_id, auth_login,auth_pass,update_method,auth_pass_encrypted)
 				VALUES (?, ?, ?, ?, ?, ?, 0, false)");
 
-			$sth->execute([$_SESSION['uid'], $url, "[Unknown]", $cat_id, $auth_login, $auth_pass]);
+			$sth->execute([$_SESSION['uid'], $url, "[Unknown]", $cat_id, (string)$auth_login, (string)$auth_pass]);
 
 			$sth = $pdo->prepare("SELECT id FROM ttrss_feeds WHERE feed_url = ?
 					AND owner_uid = ?");