From: Andrew Dolgov <fox@madoka.spb.ru>
Date: Mon, 21 Aug 2006 04:03:26 +0000 (+0100)
Subject: security fix for op=digestTest
X-Git-Tag: 1.2.3~49
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=448b0abdd5b3292a411958576b3d27d329e085ac;p=tt-rss.git

security fix for op=digestTest
---

diff --git a/backend.php b/backend.php
index 74cc9730..430086bf 100644
--- a/backend.php
+++ b/backend.php
@@ -3946,6 +3946,7 @@
 
 	if ($op == "digestTest") {
 		header("Content-Type: text/plain");
+
 		echo prepare_headlines_digest($link, $_SESSION["uid"]);
 		$print_exec_time = false;
 
diff --git a/functions.php b/functions.php
index 7ec46f09..3dbe0f84 100644
--- a/functions.php
+++ b/functions.php
@@ -2398,6 +2398,7 @@
 			WHERE 
 				ref_id = ttrss_entries.id AND feed_id = ttrss_feeds.id 
 				AND $interval_query
+				AND ttrss_user_entries.owner_uid = $user_id
 				AND unread = true ORDER BY ttrss_feeds.title, date_entered DESC
 			LIMIT $limit");