X-Git-Url: https://git.wh0rd.org/?p=tt-rss.git;a=blobdiff_plain;f=opml.php;h=bdee88e081694a516cc711290023b3a7d0e09854;hp=b932216148bf39b922e7fc9585528c97876baa4e;hb=e52034b4bcce994312ce2af31be0a46a70172691;hpb=57bac1bea99cdac24305c53272a48821e52a7c2e

diff --git a/opml.php b/opml.php
index b9322161..bdee88e0 100644
--- a/opml.php
+++ b/opml.php
@@ -15,16 +15,18 @@
 	$op = $_REQUEST['op'];
 
 	if ($op == "publish"){
-		$key = db_escape_string( $_REQUEST["key"]);
+		$key = $_REQUEST["key"];
+		$pdo = Db::pdo();
 
-		$result = db_query( "SELECT owner_uid
+		$sth = $pdo->prepare( "SELECT owner_uid
 				FROM ttrss_access_keys WHERE
-				access_key = '$key' AND feed_id = 'OPML:Publish'");
+				access_key = ? AND feed_id = 'OPML:Publish'");
+		$sth->execute([$key]);
 
-		if (db_num_rows($result) == 1) {
-			$owner_uid = db_fetch_result($result, 0, "owner_uid");
+		if ($row = $sth->fetch()) {
+			$owner_uid = $row['owner_uid'];
 
-			$opml = new Opml( $_REQUEST);
+			$opml = new Opml($_REQUEST);
 			$opml->opml_export("", $owner_uid, true, false);
 
 		} else {