function addfeed() {
$feed = clean($_REQUEST['feed']);
$cat = clean($_REQUEST['cat']);
- $login = clean($_REQUEST['login']);
- $pass = trim(clean($_REQUEST['pass']));
+ $need_auth = isset($_REQUEST['need_auth']);
+ $login = $need_auth ? clean($_REQUEST['login']) : '';
+ $pass = $need_auth ? trim(clean($_REQUEST['pass'])) : '';
$rc = Feeds::subscribe_to_feed($feed, $cat, $login, $pass);
function setpref() {
// set_pref escapes input, so no need to double escape it here
$key = clean($_REQUEST['key']);
- $value = nl2br($_REQUEST['value']);
+ $value = $_REQUEST['value'];
set_pref($key, $value, false, $key != 'USER_STYLESHEET');