diff options
Diffstat (limited to 'classes/rpc.php')
| -rw-r--r-- | classes/rpc.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/classes/rpc.php b/classes/rpc.php index 88c6f1ddc..984187915 100644 --- a/classes/rpc.php +++ b/classes/rpc.php @@ -764,11 +764,11 @@ class RPC extends Handler_Protected { } function setScore() { - $id = db_escape_string($_REQUEST['id']); + $ids = db_escape_string($_REQUEST['id']); $score = (int)db_escape_string($_REQUEST['score']); db_query($this->link, "UPDATE ttrss_user_entries SET - score = '$score' WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]); + score = '$score' WHERE ref_id IN ($ids) AND owner_uid = " . $_SESSION["uid"]); print json_encode(array("id" => $id, "score_pic" => theme_image($link, get_score_pic($score)))); |