public: fix share() returning random unshared articles if uuid is not given

This commit is contained in:
Andrew Dolgov 2019-07-05 16:02:51 +03:00
parent 088fcf8131
commit ea30061cce
1 changed files with 13 additions and 11 deletions

View File

@ -298,8 +298,9 @@ class Handler_Public extends Handler {
function share() { function share() {
$uuid = clean($_REQUEST["key"]); $uuid = clean($_REQUEST["key"]);
$sth = $this->pdo->prepare("SELECT ref_id, owner_uid FROM ttrss_user_entries WHERE if ($uuid) {
uuid = ?"); $sth = $this->pdo->prepare("SELECT ref_id, owner_uid
FROM ttrss_user_entries WHERE uuid = ?");
$sth->execute([$uuid]); $sth->execute([$uuid]);
if ($row = $sth->fetch()) { if ($row = $sth->fetch()) {
@ -310,11 +311,12 @@ class Handler_Public extends Handler {
print $this->format_article($id, $owner_uid); print $this->format_article($id, $owner_uid);
} else { return;
header($_SERVER["SERVER_PROTOCOL"]." 404 Not Found"); }
print "Article not found.";
} }
header($_SERVER["SERVER_PROTOCOL"]." 404 Not Found");
print "Article not found.";
} }
private function get_article_image($enclosures, $content, $site_url) { private function get_article_image($enclosures, $content, $site_url) {