From: Andrew Dolgov <fox@bah.spb.su>
Date: Thu, 29 Sep 2005 01:05:34 +0000 (+0100)
Subject: escape title when auto-updated from channel
X-Git-Tag: 1.0.7~72
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=e1305a97d0d99aaa3def982011cfae73701aa3b1;p=tt-rss.git

escape title when auto-updated from channel
---

diff --git a/functions.php b/functions.php
index 378e123f..962b03e8 100644
--- a/functions.php
+++ b/functions.php
@@ -91,7 +91,7 @@
 			$orig_icon_url = db_fetch_result($result, 0, "icon_url");
 
 			if (!$registered_title) {
-				$feed_title = $rss->channel["title"];
+				$feed_title = db_escape_string($rss->channel["title"]);
 				db_query($link, "UPDATE ttrss_feeds SET title = '$feed_title' WHERE id = '$feed'");
 			}