valvin
/
ttrss
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

misc rpc security bugfixes

This commit is contained in:
Andrew Dolgov 2005-11-19 18:52:40 +01:00
parent a5873b2eaf
commit f72dbbdefc
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
backend.php
View File

@ -921,7 +921,7 @@
title = '$feed_title', feed_url = '$feed_link', title = '$feed_title', feed_url = '$feed_link',
update_interval = '$upd_intl', update_interval = '$upd_intl',
purge_interval = '$purge_intl' purge_interval = '$purge_intl'
WHERE id = '$feed_id'"); WHERE id = '$feed_id' AND owner_uid = " . $_SESSION["uid"]);
} }
@ -932,7 +932,8 @@
$ids = split(",", $_GET["ids"]); $ids = split(",", $_GET["ids"]);
foreach ($ids as $id) { foreach ($ids as $id) {
db_query($link, "DELETE FROM ttrss_feeds WHERE id = '$id'"); db_query($link, "DELETE FROM ttrss_feeds
WHERE id = '$id' AND owner_uid = " . $_SESSION["uid"]);
$icons_dir = ICONS_DIR; $icons_dir = ICONS_DIR;
@ -953,7 +954,7 @@
"INSERT INTO ttrss_feeds (owner_uid,feed_url,title) VALUES ('".$_SESSION["uid"]."', '$feed_link', '')"); "INSERT INTO ttrss_feeds (owner_uid,feed_url,title) VALUES ('".$_SESSION["uid"]."', '$feed_link', '')");
$result = db_query($link, $result = db_query($link,
"SELECT id FROM ttrss_feeds WHERE feed_url = '$feed_link'"); "SELECT id FROM ttrss_feeds WHERE feed_url = '$feed_link' AND owner_uid = " . $_SESSION["uid"]);
$feed_id = db_fetch_result($result, 0, "id"); $feed_id = db_fetch_result($result, 0, "id");