valvin
/
ttrss
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

cats_of: enforce owner_uid

This commit is contained in:
Andrew Dolgov 2021-02-24 10:09:08 +03:00
parent 6ea1430a04
commit e468e5a589
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
classes/feeds.php
View File

@ -1798,8 +1798,8 @@ class Feeds extends Handler_Protected {
$sth = $pdo->prepare("SELECT DISTINCT cat_id, fc.parent_cat FROM ttrss_feeds f LEFT JOIN ttrss_feed_categories fc $sth = $pdo->prepare("SELECT DISTINCT cat_id, fc.parent_cat FROM ttrss_feeds f LEFT JOIN ttrss_feed_categories fc
ON (fc.id = f.cat_id) ON (fc.id = f.cat_id)
WHERE f.id IN ($feeds_qmarks)"); WHERE f.owner_uid = ? AND f.id IN ($feeds_qmarks)");
$sth->execute($feeds); $sth->execute(array_merge([$owner_uid], $feeds));
$rv = []; $rv = [];