experimental split of public calls into public.php (refs #389)

[tt-rss.git] / modules / pref-feeds.php

diff --git a/modules/pref-feeds.php b/modules/pref-feeds.php
index 8bc7c19fd52e5d6fbd1a59562164c6aaf6e86dad..bbae468bf01450498ab6a227269dd8b00a85a953 100644 (file)
--- a/modules/pref-feeds.php
+++ b/modules/pref-feeds.php
@@ -711,11 +711,11 @@
 
                        $feed_title = db_escape_string(trim($_POST["title"]));
                        $feed_link = db_escape_string(trim($_POST["feed_url"]));
-                       $upd_intl = db_escape_string($_POST["update_interval"]);
-                       $purge_intl = db_escape_string($_POST["purge_interval"]);
-                       $feed_id = db_escape_string($_POST["id"]); /* editSave */
+                       $upd_intl = (int) db_escape_string($_POST["update_interval"]);
+                       $purge_intl = (int) db_escape_string($_POST["purge_interval"]);
+                       $feed_id = (int) db_escape_string($_POST["id"]); /* editSave */
                        $feed_ids = db_escape_string($_POST["ids"]); /* batchEditSave */
-                       $cat_id = db_escape_string($_POST["cat_id"]);
+                       $cat_id = (int) db_escape_string($_POST["cat_id"]);
                        $auth_login = db_escape_string(trim($_POST["auth_login"]));
                        $auth_pass = db_escape_string(trim($_POST["auth_pass"]));
                        $private = checkbox_to_sql_bool(db_escape_string($_POST["private"]));
@@ -1430,8 +1430,6 @@
                        ".__('<b>Hint:</b> you can drag feeds and categories around.')."
                        </div>";
 
-               print "TEST";
-
                print '</div>';
                print '</div>';
 
@@ -1522,7 +1520,7 @@
                print "<p>".__('Published articles are exported as a public RSS feed and can be subscribed by anyone who knows the URL specified below.')."</p>";
 
                $rss_url = '-2::' . htmlspecialchars(get_self_url_prefix() .
-                               "/backend.php?op=rss&id=-2&view-mode=all_articles");;
+                               "/public.php?op=rss&id=-2&view-mode=all_articles");;
 
                print "<button dojoType=\"dijit.form.Button\" onclick=\"return displayDlg('generatedFeed', '$rss_url')\">".
                        __('Display URL')."</button> ";