From: Andrew Dolgov <fox@madoka.volgo-balt.ru>
Date: Sun, 9 Sep 2012 17:47:58 +0000 (+0400)
Subject: create_published_article: validate url
X-Git-Tag: 1.6.0~62
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=18cf1358e03322cbecd535b16f4a39f788f644af;p=tt-rss.git

create_published_article: validate url
---

diff --git a/include/functions.php b/include/functions.php
index 701949fd..65b794dd 100644
--- a/include/functions.php
+++ b/include/functions.php
@@ -5585,6 +5585,8 @@
 		if (!$title) $title = $url;
 		if (!$title && !$url) return false;
 
+		if (filter_var($url, FILTER_VALIDATE_URL) === FALSE) return false;
+
 		$result = db_query($link, "INSERT INTO ttrss_entries
 			(title, guid, link, updated, content, content_hash, date_entered, date_updated)
 			VALUES