From 7a13338b4c9ee0f421a9e182e83cb2d8f458774e Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <fox@bah.org.ru>
Date: Mon, 19 Oct 2009 23:29:45 +0400
Subject: fix proper escaping of label titles (closes #255)

---
 modules/pref-labels.php | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'modules/pref-labels.php')

diff --git a/modules/pref-labels.php b/modules/pref-labels.php
index 336228801..02e5a2be9 100644
--- a/modules/pref-labels.php
+++ b/modules/pref-labels.php
@@ -61,6 +61,8 @@
 
 						/* Update filters that reference label being renamed */
 
+						$old_caption = db_escape_string($old_caption);
+
 						db_query($link, "UPDATE ttrss_filters SET
 							action_param = '$caption' WHERE action_param = '$old_caption'
 							AND action_id = 7
-- 
cgit v1.2.3