From 7475580b37263955445c5ea8a9d292b001f7b9c6 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <noreply@fakecake.org>
Date: Mon, 2 Nov 2015 14:22:37 +0300
Subject: [PATCH] getLabelCounters: stricter ownership check

---
 include/functions.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/include/functions.php b/include/functions.php
index 31008148..e9107227 100644
--- a/include/functions.php
+++ b/include/functions.php
@@ -456,7 +456,7 @@
 							'method' => 'GET',
 							'protocol_version'=> 1.1
 					  )));
-			} 
+			}
 
 			$old_error = error_get_last();
 
@@ -1582,7 +1582,8 @@
 			FROM ttrss_labels2 LEFT JOIN ttrss_user_labels2 ON
 				(ttrss_labels2.id = label_id)
 				LEFT JOIN ttrss_user_entries AS u1 ON u1.ref_id = article_id
-				WHERE ttrss_labels2.owner_uid = $owner_uid GROUP BY ttrss_labels2.id,
+				WHERE ttrss_labels2.owner_uid = $owner_uid AND u1.owner_uid = $owner_uid
+				GROUP BY ttrss_labels2.id,
 					ttrss_labels2.caption");
 
 		while ($line = db_fetch_assoc($result)) {
-- 
2.39.5