From dd0e372803c27b133bc45a67be49dd54040f6c52 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <fox@madoka.spb.ru>
Date: Tue, 20 Dec 2005 10:46:06 +0100
Subject: [PATCH] escape html in getFeedCounters() error=

---
 backend.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backend.php b/backend.php
index ea5b6a0b..78760e5e 100644
--- a/backend.php
+++ b/backend.php
@@ -235,7 +235,7 @@
 			AND ttrss_user_entries.ref_id = ttrss_entries.id");
 	
 			$count = db_fetch_result($result, 0, "count");
-			$last_error = db_fetch_result($result, 0, "last_error");
+			$last_error = htmlspecialchars(db_fetch_result($result, 0, "last_error"));
 			
 			print "<counter type=\"feed\" id=\"$id\" counter=\"$count\" error=\"$last_error\"/>";		
 	}
@@ -264,7 +264,7 @@
 		
 			$id = $line["id"];
 			$count = $line["count"];
-			$last_error = $line["last_error"];	
+			$last_error = htmlspecialchars($line["last_error"]);	
 
 			$has_img = is_file(ICONS_DIR . "/$id.ico");
 
-- 
2.39.5