escape fetch error message before saving in the db (closes #550)

11 years ago · 96f98cb091
parent 41acdf4c11
commit 96f98cb091
1 changed files with 3 additions and 1 deletions
--- a/include/rssfuncs.php
+++ b/include/rssfuncs.php
@ -238,8 +238,10 @@
 				_debug("update_rss_feed: unable to fetch: $fetch_last_error");
 			}

+			$error_escaped = db_escape_string($fetch_last_error);
+
 			db_query($link,
-				"UPDATE ttrss_feeds SET last_error = '$fetch_last_error',
+				"UPDATE ttrss_feeds SET last_error = '$error_escaped',
 					last_updated = NOW() WHERE id = '$feed'");

 			return;