simplepie: properly escape feed title

diff --git a/functions.php b/functions.php
index f3f82d312f27e398439d9bf7c55f0920da54cef9..d12120a637ebfd3e90b3e8c129ae3161889cd1f3 100644 (file)
--- a/functions.php
+++ b/functions.php
@@ -499,7 +499,7 @@
                        if (!$registered_title || $registered_title == "[Unknown]") {
 
                                if (ENABLE_SIMPLEPIE) {
-                                       $feed_title = $rss->get_title();
+                                       $feed_title = db_escape_string($rss->get_title());
                                } else {
                                        $feed_title = db_escape_string($rss->channel["title"]);
                                }