From: Andrew Dolgov <noreply@fakecake.org>
Date: Mon, 2 Nov 2015 11:22:37 +0000 (+0300)
Subject: getLabelCounters: stricter ownership check
X-Git-Tag: 16.3~99
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=7475580b37263955445c5ea8a9d292b001f7b9c6;p=tt-rss.git

getLabelCounters: stricter ownership check
---

diff --git a/include/functions.php b/include/functions.php
index 31008148..e9107227 100644
--- a/include/functions.php
+++ b/include/functions.php
@@ -456,7 +456,7 @@
 							'method' => 'GET',
 							'protocol_version'=> 1.1
 					  )));
-			} 
+			}
 
 			$old_error = error_get_last();
 
@@ -1582,7 +1582,8 @@
 			FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
 				(ttrss_labels2.id = label_id)
 				LEFT JOIN ttrss_user_entries AS u1 ON u1.ref_id = article_id
-				WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
+				WHERE ttrss_labels2.owner_uid = $owner_uid AND u1.owner_uid = $owner_uid
+				GROUP BY ttrss_labels2.id,
 					ttrss_labels2.caption");
 
 		while ($line = db_fetch_assoc($result)) {