From: Andrew Dolgov <fox@bah.spb.su>
Date: Sun, 20 Nov 2005 07:18:56 +0000 (+0100)
Subject: trim feed,label,filter,login input on add
X-Git-Tag: schema_feature_freeze_for_1.1~170
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=b6b535ca74da3729b4bc4c3c95cee309ff624f39;p=tt-rss.git

trim feed,label,filter,login input on add
---

diff --git a/backend.php b/backend.php
index 4320f513..a3b4f699 100644
--- a/backend.php
+++ b/backend.php
@@ -948,7 +948,7 @@
 		
 			if (!WEB_DEMO_MODE) {
 
-				$feed_link = db_escape_string($_GET["link"]);
+				$feed_link = db_escape_string(trim($_GET["link"]));
 
 				$result = db_query($link,
 					"SELECT id FROM ttrss_feeds 
@@ -1200,8 +1200,8 @@
 		
 			if (!WEB_DEMO_MODE) {
 
-				$regexp = db_escape_string($_GET["regexp"]);
-				$match = db_escape_string($_GET["match"]);
+				$regexp = db_escape_string(trim($_GET["regexp"]));
+				$match = db_escape_string(trim($_GET["match"]));
 					
 				$result = db_query($link,
 					"INSERT INTO ttrss_filters (reg_exp,filter_type,owner_uid) VALUES 
@@ -1373,7 +1373,7 @@
 		
 			if (!WEB_DEMO_MODE) {
 
-				$exp = $_GET["exp"];
+				$exp = db_escape_string(trim($_GET["exp"]));
 					
 				$result = db_query($link,
 					"INSERT INTO ttrss_labels (sql_exp,description,owner_uid) 
@@ -1916,7 +1916,7 @@
 		
 			if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) {
 
-				$login = db_escape_string($_GET["login"]);
+				$login = db_escape_string(trim($_GET["login"]));
 				$tmp_user_pwd = make_password(8);
 				$pwd_hash = 'SHA1:' . sha1($tmp_user_pwd);