From 9652fa6b6687b0aa2ac55cd735cdf43f32398faa Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <noreply@fakecake.org>
Date: Fri, 1 Dec 2017 22:49:12 +0300
Subject: [PATCH] API: small fix

---
 classes/api.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/classes/api.php b/classes/api.php
index a4cfcff5..ad0372db 100644
--- a/classes/api.php
+++ b/classes/api.php
@@ -298,7 +298,8 @@ class API extends Handler {
 
 			if ($num_updated > 0 && $field == "unread") {
 				$sth = $this->pdo->query("SELECT DISTINCT feed_id FROM ttrss_user_entries
-					WHERE ref_id IN ($article_ids)");
+					WHERE ref_id IN ($article_qmarks)");
+				$sth->execute($article_ids);
 
 				while ($line = $sth->fetch()) {
 					CCache::update($line["feed_id"], $_SESSION["uid"]);
-- 
2.39.5