diff options
author | Andrew Dolgov <[email protected]> | 2006-08-21 05:03:26 +0100 |
---|---|---|
committer | Andrew Dolgov <[email protected]> | 2006-08-21 05:03:26 +0100 |
commit | 448b0abdd5b3292a411958576b3d27d329e085ac (patch) | |
tree | ff339e1c6ba5ba7059231c8b22454a99770ae3ca | |
parent | 8a797376557016ce3413ac05f593e38af181a69c (diff) |
security fix for op=digestTest
-rw-r--r-- | backend.php | 1 | ||||
-rw-r--r-- | functions.php | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/backend.php b/backend.php index 74cc97303..430086bf3 100644 --- a/backend.php +++ b/backend.php @@ -3946,6 +3946,7 @@ if ($op == "digestTest") { header("Content-Type: text/plain"); + echo prepare_headlines_digest($link, $_SESSION["uid"]); $print_exec_time = false; diff --git a/functions.php b/functions.php index 7ec46f097..3dbe0f84b 100644 --- a/functions.php +++ b/functions.php @@ -2398,6 +2398,7 @@ WHERE ref_id = ttrss_entries.id AND feed_id = ttrss_feeds.id AND $interval_query + AND ttrss_user_entries.owner_uid = $user_id AND unread = true ORDER BY ttrss_feeds.title, date_entered DESC LIMIT $limit"); |