From: Andrew Dolgov <fox@bah.org.ru>
Date: Tue, 29 Dec 2009 13:19:53 +0000 (+0300)
Subject: properly check for article ownership in getArticleFeed()
X-Git-Tag: 1.4.0~120
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=a545dc31a403ef6130f78f089441bc06f33d2ed3;p=tt-rss.git

properly check for article ownership in getArticleFeed()
---

diff --git a/functions.php b/functions.php
index 464a2cbd..6621b361 100644
--- a/functions.php
+++ b/functions.php
@@ -6475,7 +6475,7 @@
 
 	function getArticleFeed($link, $id) {
 		$result = db_query($link, "SELECT feed_id FROM ttrss_user_entries 
-			WHERE ref_id = '$id'");
+			WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]);
 
 		if (db_num_rows($result) != 0) {
 			return db_fetch_result($result, 0, "feed_id");