From e1e3f972b6aa47a888e487c7f4ecc2a5533e4539 Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Mon, 29 Oct 2012 10:13:14 +0400 Subject: update_rss_feed: fix broken title/content escaping --- include/rssfuncs.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'include') diff --git a/include/rssfuncs.php b/include/rssfuncs.php index af62a5041..e413743b6 100644 --- a/include/rssfuncs.php +++ b/include/rssfuncs.php @@ -770,8 +770,8 @@ } # sanitize content - $entry_content = sanitize($link, $entry_content, $owner_uid, $site_url); - $entry_title = strip_tags($entry_title); + $entry_content = db_escape_string(sanitize($link, $entry_content, $owner_uid, $site_url)); + $entry_title = db_escape_string(strip_tags($entry_title)); if ($debug_enabled) { _debug("update_rss_feed: done collecting data [TITLE:$entry_title]"); -- cgit v1.2.3