summaryrefslogtreecommitdiff
path: root/classes/api.php
diff options
context:
space:
mode:
authorAndrew Dolgov <[email protected]>2018-08-29 12:53:30 +0300
committerAndrew Dolgov <[email protected]>2018-08-29 12:53:33 +0300
commit70e180e88765fa48f2374ef533edae405d341f41 (patch)
tree20106c0d0002ceea97dcab0ff46b18066ba8488c /classes/api.php
parent803b8ead1e40d917424c01f5cf0f7a2dda237ed2 (diff)
API: getHeadlines: check for feed_id correctly
Diffstat (limited to 'classes/api.php')
-rwxr-xr-xclasses/api.php10
1 files changed, 5 insertions, 5 deletions
diff --git a/classes/api.php b/classes/api.php
index 5dbf8dc1f..607a25e66 100755
--- a/classes/api.php
+++ b/classes/api.php
@@ -11,7 +11,7 @@ class API extends Handler {
static function param_to_bool($p) {
return $p && ($p !== "f" && $p !== "false");
}
-
+
function before($method) {
if (parent::before($method)) {
header("Content-Type: text/json");
@@ -186,7 +186,7 @@ class API extends Handler {
function getHeadlines() {
$feed_id = clean($_REQUEST["feed_id"]);
- if ($feed_id != "") {
+ if (is_int($feed_id)) {
if (is_numeric($feed_id)) $feed_id = (int) $feed_id;
@@ -293,8 +293,8 @@ class API extends Handler {
$article_qmarks = arr_qmarks($article_ids);
- $sth = $this->pdo->prepare("UPDATE ttrss_user_entries SET
- $field = $set_to $additional_fields
+ $sth = $this->pdo->prepare("UPDATE ttrss_user_entries SET
+ $field = $set_to $additional_fields
WHERE ref_id IN ($article_qmarks) AND owner_uid = ?");
$sth->execute(array_merge($article_ids, [$_SESSION['uid']]));
@@ -625,7 +625,7 @@ class API extends Handler {
id, feed_url, cat_id, title, order_id, ".
SUBSTRING_FOR_DATE."(last_updated,1,19) AS last_updated
FROM ttrss_feeds WHERE
- (cat_id = :cat OR (:cat = 0 AND cat_id IS NULL))
+ (cat_id = :cat OR (:cat = 0 AND cat_id IS NULL))
AND owner_uid = :uid
ORDER BY cat_id, title " . $limit_qpart);
$sth->execute([":uid" => $_SESSION['uid'], ":cat" => $cat_id]);