feed browser: try to filter out feeds with login/pass in the URI

[tt-rss.git] / modules / pref-feed-browser.php

diff --git a/modules/pref-feed-browser.php b/modules/pref-feed-browser.php
index a80109bc575f3efd0e1e4604885279b972fe02c3..76d180bb51891f23c12994447b9c0195799d2c0d 100644 (file)
--- a/modules/pref-feed-browser.php
+++ b/modules/pref-feed-browser.php
@@ -18,7 +18,8 @@
                                        feed_url,site_url,
                                        ".SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated 
                                FROM ttrss_feeds WHERE id = '$id' AND
-                                       auth_login = '' AND auth_pass = '' AND private IS NOT true");
+                                       auth_login = '' AND auth_pass = '' AND private IS NOT true
+                                       AND feed_url NOT LIKE '%:%@%/%'");
 
                        if (db_num_rows($result) == 1) {