feed browser: fix escaping

diff --git a/modules/pref-feed-browser.php b/modules/pref-feed-browser.php
index 576b684a9282a690b610baa16874895b6b411566..aa6ef31147e3452df65c0b60a44acc98e55c960b 100644 (file)
--- a/modules/pref-feed-browser.php
+++ b/modules/pref-feed-browser.php
@@ -170,7 +170,7 @@
                        $feedctr = 0;
        
                        while ($line = db_fetch_assoc($result)) {
-                               $feed_url = $line["feed_url"];
+                               $feed_url = db_escape_string($line["feed_url"]);
                                $subscribers = $line["subscribers"];
        
                                // mysql returns NULL records first by default