opml: fix export broken by special characters in category titles

diff --git a/classes/opml.php b/classes/opml.php
index 12beb991b16064a48b33421a251f1c15f8ea5bc1..c076cbda7d315c4dae6ae715d1ca0d3b237387cd 100644 (file)
--- a/classes/opml.php
+++ b/classes/opml.php
@@ -68,7 +68,7 @@ class Opml extends Handler_Protected {
                if ($cat_id) {
                        $result = db_query($this->link, "SELECT title FROM ttrss_feed_categories WHERE id = '$cat_id'
                                AND owner_uid = '$owner_uid'");
-                       $cat_title = db_fetch_result($result, 0, "title");
+                       $cat_title = htmlspecialchars(db_fetch_result($result, 0, "title"));
                }
 
                if ($cat_title) $out .= "<outline text=\"$cat_title\">\n";