clear_feed_articles: check caller UID

diff --git a/functions.php b/functions.php
index cf5d421c9ccd074f1a9e00e247256a03388675ca..d82cb38ea5f14692a074304ef1ec42ee085c9bfe 100644 (file)
--- a/functions.php
+++ b/functions.php
@@ -4698,7 +4698,7 @@
 
        function clear_feed_articles($link, $id) {
                $result = db_query($link, "DELETE FROM ttrss_user_entries
-                       WHERE feed_id = '$id' AND marked = false");
+                       WHERE feed_id = '$id' AND marked = false AND owner_uid = " . $_SESSION["uid"]);
 
                $result = db_query($link, "DELETE FROM ttrss_entries WHERE 
                        (SELECT COUNT(int_id) FROM ttrss_user_entries WHERE ref_id = id) = 0");