api/getArticle: validate id list

13 years ago · 823da71a10
parent edfab7bd7f
commit 823da71a10
1 changed files with 1 additions and 1 deletions
--- a/api/index.php
+++ b/api/index.php
@ -274,7 +274,7 @@

 		case "getArticle":

-			$article_id = db_escape_string($_REQUEST["article_id"]);
+			$article_id = join(",", array_filter(explode(",", db_escape_string($_REQUEST["article_id"])), is_numeric));

 			$query = "SELECT id,title,link,content,feed_id,comments,int_id,
 				marked,unread,published,