From: Andrew Dolgov <fox@madoka.spb.ru>
Date: Tue, 20 Jan 2009 16:53:12 +0000 (+0100)
Subject: feed browser: fix escaping
X-Git-Tag: 1.3.0~15
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=e609c3a4d2dae7b43b8180753e57fa5e0d2f27ac;p=tt-rss.git

feed browser: fix escaping
---

diff --git a/modules/pref-feed-browser.php b/modules/pref-feed-browser.php
index 576b684a..aa6ef311 100644
--- a/modules/pref-feed-browser.php
+++ b/modules/pref-feed-browser.php
@@ -170,7 +170,7 @@
 			$feedctr = 0;
 	
 			while ($line = db_fetch_assoc($result)) {
-				$feed_url = $line["feed_url"];
+				$feed_url = db_escape_string($line["feed_url"]);
 				$subscribers = $line["subscribers"];
 	
 				// mysql returns NULL records first by default