diff options
| author | Andrew Dolgov <[email protected]> | 2009-12-29 16:19:53 +0300 |
|---|---|---|
| committer | Andrew Dolgov <[email protected]> | 2009-12-29 16:19:53 +0300 |
| commit | a545dc31a403ef6130f78f089441bc06f33d2ed3 (patch) | |
| tree | 2df56401ea3487acd9b36acaaf9ac1af85e26153 | |
| parent | ab197ae1de3b8691595582e091593c7294b6872f (diff) | |
properly check for article ownership in getArticleFeed()
| -rw-r--r-- | functions.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/functions.php b/functions.php index 464a2cbdd..6621b361e 100644 --- a/functions.php +++ b/functions.php @@ -6475,7 +6475,7 @@ function getArticleFeed($link, $id) { $result = db_query($link, "SELECT feed_id FROM ttrss_user_entries - WHERE ref_id = '$id'"); + WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]); if (db_num_rows($result) != 0) { return db_fetch_result($result, 0, "feed_id"); |