update_rss_feed: escape error string immediately

13 years ago · 356a991a7b
parent 4412b877d0
commit 356a991a7b
1 changed files with 1 additions and 3 deletions
--- a/include/rssfuncs.php
+++ b/include/rssfuncs.php
@ -1017,14 +1017,12 @@

 		} else {

-			$error_msg = mb_substr($rss->error(), 0, 250);
+			$error_msg = db_escape_string(mb_substr($rss->error(), 0, 250));

 			if ($debug_enabled) {
 				_debug("update_rss_feed: error fetching feed: $error_msg");
 			}

-			$error_msg = db_escape_string($error_msg);
-
 			db_query($link,
 				"UPDATE ttrss_feeds SET last_error = '$error_msg',
 					last_updated = NOW() WHERE id = '$feed'");