escape fetch error message before saving in the db (closes #550)

diff --git a/include/rssfuncs.php b/include/rssfuncs.php
index 2b13f9457191a4246f2e1c6ba4632cff9216a5f6..0b1d06564c3d93547f7b1f4a7635e473d28d22b9 100644 (file)
--- a/include/rssfuncs.php
+++ b/include/rssfuncs.php
@@ -238,8 +238,10 @@
                                _debug("update_rss_feed: unable to fetch: $fetch_last_error");
                        }
 
+                       $error_escaped = db_escape_string($fetch_last_error);
+
                        db_query($link,
-                               "UPDATE ttrss_feeds SET last_error = '$fetch_last_error',
+                               "UPDATE ttrss_feeds SET last_error = '$error_escaped',
                                        last_updated = NOW() WHERE id = '$feed'");
 
                        return;