diff options
Diffstat (limited to 'plugins/note/init.php')
-rw-r--r-- | plugins/note/init.php | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/plugins/note/init.php b/plugins/note/init.php index a5396e5a4..f5816bc27 100644 --- a/plugins/note/init.php +++ b/plugins/note/init.php @@ -27,9 +27,9 @@ class Note extends Plugin { } function edit() { - $param = db_escape_string( $_REQUEST['param']); + $param = db_escape_string($_REQUEST['param']); - $result = db_query( "SELECT note FROM ttrss_user_entries WHERE + $result = db_query("SELECT note FROM ttrss_user_entries WHERE ref_id = '$param' AND owner_uid = " . $_SESSION['uid']); $note = db_fetch_result($result, 0, "note"); @@ -56,10 +56,10 @@ class Note extends Plugin { } function setNote() { - $id = db_escape_string( $_REQUEST["id"]); - $note = trim(strip_tags(db_escape_string( $_REQUEST["note"]))); + $id = db_escape_string($_REQUEST["id"]); + $note = trim(strip_tags(db_escape_string($_REQUEST["note"]))); - db_query( "UPDATE ttrss_user_entries SET note = '$note' + db_query("UPDATE ttrss_user_entries SET note = '$note' WHERE ref_id = '$id' AND owner_uid = " . $_SESSION["uid"]); $formatted_note = format_article_note($id, $note); |