valvin
/
ttrss
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

api: improve getHeadlines/updateArticle

This commit is contained in:
Andrew Dolgov 2010-01-05 20:33:08 +03:00
parent 6f068202d7
commit ef6c9ba403
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
api/index.php
View File

@ -223,6 +223,8 @@
$is_cat = (bool)db_escape_string($_REQUEST["is_cat"]); $is_cat = (bool)db_escape_string($_REQUEST["is_cat"]);
$show_excerpt = (bool)db_escape_string($_REQUEST["show_excerpt"]); $show_excerpt = (bool)db_escape_string($_REQUEST["show_excerpt"]);
$show_content = (bool)db_escape_string($_REQUEST["show_content"]); $show_content = (bool)db_escape_string($_REQUEST["show_content"]);
/* all_articles, unread, adaptive, marked, updated */
$view_mode = db_escape_string($_REQUEST["view_mode"]);
/* do not rely on params below */ /* do not rely on params below */
@ -250,6 +252,7 @@
"updated" => strtotime($line["updated"]), "updated" => strtotime($line["updated"]),
"is_updated" => $is_updated, "is_updated" => $is_updated,
"title" => $line["title"], "title" => $line["title"],
"link" => $line["link"],
"feed_id" => $line["feed_id"], "feed_id" => $line["feed_id"],
); );
@ -269,7 +272,7 @@
break; break;
case "updateArticle": case "updateArticle":
$article_id = (int) db_escape_string($_REQUEST["article_id"]); $article_ids = split(",", db_escape_string($_REQUEST["article_ids"]));
$mode = (int) db_escape_string($_REQUEST["mode"]); $mode = (int) db_escape_string($_REQUEST["mode"]);
$field_raw = (int)db_escape_string($_REQUEST["field"]); $field_raw = (int)db_escape_string($_REQUEST["field"]);
@ -300,14 +303,17 @@
break; break;
} }
if ($field && $set_to) { if ($field && $set_to && count($article_ids) > 0) {
$article_ids = join(", ", $article_ids);
if ($field == "unread") { if ($field == "unread") {
$result = db_query($link, "UPDATE ttrss_user_entries SET $field = $set_to, $result = db_query($link, "UPDATE ttrss_user_entries SET $field = $set_to,
last_read = NOW() last_read = NOW()
WHERE ref_id = '$article_id' AND owner_uid = " . $_SESSION["uid"]); WHERE ref_id IN ($article_ids) AND owner_uid = " . $_SESSION["uid"]);
} else { } else {
$result = db_query($link, "UPDATE ttrss_user_entries SET $field = $set_to $result = db_query($link, "UPDATE ttrss_user_entries SET $field = $set_to
WHERE ref_id = '$article_id' AND owner_uid = " . $_SESSION["uid"]); WHERE ref_id IN ($article_ids) AND owner_uid = " . $_SESSION["uid"]);
} }
} }