diff options
| author | Andrew Dolgov <[email protected]> | 2005-11-20 08:18:56 +0100 |
|---|---|---|
| committer | Andrew Dolgov <[email protected]> | 2005-11-20 08:18:56 +0100 |
| commit | b6b535ca74da3729b4bc4c3c95cee309ff624f39 (patch) | |
| tree | 2458cd5b49d86a1c82e7dd12ff9ac2340fb2ed18 /backend.php | |
| parent | 93cb444211832747aaed885cda775c6c71b28737 (diff) | |
trim feed,label,filter,login input on add
Diffstat (limited to 'backend.php')
| -rw-r--r-- | backend.php | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/backend.php b/backend.php index 4320f5133..a3b4f6993 100644 --- a/backend.php +++ b/backend.php @@ -948,7 +948,7 @@ if (!WEB_DEMO_MODE) { - $feed_link = db_escape_string($_GET["link"]); + $feed_link = db_escape_string(trim($_GET["link"])); $result = db_query($link, "SELECT id FROM ttrss_feeds @@ -1200,8 +1200,8 @@ if (!WEB_DEMO_MODE) { - $regexp = db_escape_string($_GET["regexp"]); - $match = db_escape_string($_GET["match"]); + $regexp = db_escape_string(trim($_GET["regexp"])); + $match = db_escape_string(trim($_GET["match"])); $result = db_query($link, "INSERT INTO ttrss_filters (reg_exp,filter_type,owner_uid) VALUES @@ -1373,7 +1373,7 @@ if (!WEB_DEMO_MODE) { - $exp = $_GET["exp"]; + $exp = db_escape_string(trim($_GET["exp"])); $result = db_query($link, "INSERT INTO ttrss_labels (sql_exp,description,owner_uid) @@ -1916,7 +1916,7 @@ if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { - $login = db_escape_string($_GET["login"]); + $login = db_escape_string(trim($_GET["login"])); $tmp_user_pwd = make_password(8); $pwd_hash = 'SHA1:' . sha1($tmp_user_pwd); |