diff options
Diffstat (limited to 'classes/api.php')
| -rw-r--r-- | classes/api.php | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/classes/api.php b/classes/api.php index f0f943698..902cb0853 100644 --- a/classes/api.php +++ b/classes/api.php @@ -198,6 +198,7 @@ class API extends Handler { $since_id = (int)db_escape_string($this->link, $_REQUEST["since_id"]); $include_nested = sql_bool_to_bool($_REQUEST["include_nested"]); $sanitize_content = true; + $override_order = false; switch ($_REQUEST["order_by"]) { case "date_reverse": @@ -207,6 +208,7 @@ class API extends Handler { $override_order = "updated DESC"; break; } + /* do not rely on params below */ $search = db_escape_string($this->link, $_REQUEST["search"]); |