From: Andrew Dolgov <fox@madoka.spb.ru>
Date: Tue, 20 Dec 2005 09:46:06 +0000 (+0100)
Subject: escape html in getFeedCounters() error=
X-Git-Tag: schema_freeze_for_1.1.1~19
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=dd0e372803c27b133bc45a67be49dd54040f6c52;p=tt-rss.git

escape html in getFeedCounters() error=
---

diff --git a/backend.php b/backend.php
index ea5b6a0b..78760e5e 100644
--- a/backend.php
+++ b/backend.php
@@ -235,7 +235,7 @@
 			AND ttrss_user_entries.ref_id = ttrss_entries.id");
 	
 			$count = db_fetch_result($result, 0, "count");
-			$last_error = db_fetch_result($result, 0, "last_error");
+			$last_error = htmlspecialchars(db_fetch_result($result, 0, "last_error"));
 			
 			print "<counter type=\"feed\" id=\"$id\" counter=\"$count\" error=\"$last_error\"/>";		
 	}
@@ -264,7 +264,7 @@
 		
 			$id = $line["id"];
 			$count = $line["count"];
-			$last_error = $line["last_error"];	
+			$last_error = htmlspecialchars($line["last_error"]);	
 
 			$has_img = is_file(ICONS_DIR . "/$id.ico");