From e1305a97d0d99aaa3def982011cfae73701aa3b1 Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Thu, 29 Sep 2005 02:05:34 +0100 Subject: escape title when auto-updated from channel --- functions.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/functions.php b/functions.php index 378e123f2..962b03e8f 100644 --- a/functions.php +++ b/functions.php @@ -91,7 +91,7 @@ $orig_icon_url = db_fetch_result($result, 0, "icon_url"); if (!$registered_title) { - $feed_title = $rss->channel["title"]; + $feed_title = db_escape_string($rss->channel["title"]); db_query($link, "UPDATE ttrss_feeds SET title = '$feed_title' WHERE id = '$feed'"); } -- cgit v1.2.3