From e1305a97d0d99aaa3def982011cfae73701aa3b1 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <fox@bah.spb.su>
Date: Thu, 29 Sep 2005 02:05:34 +0100
Subject: [PATCH] escape title when auto-updated from channel

---
 functions.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/functions.php b/functions.php
index 378e123f2..962b03e8f 100644
--- a/functions.php
+++ b/functions.php
@@ -91,7 +91,7 @@
 			$orig_icon_url = db_fetch_result($result, 0, "icon_url");
 
 			if (!$registered_title) {
-				$feed_title = $rss->channel["title"];
+				$feed_title = db_escape_string($rss->channel["title"]);
 				db_query($link, "UPDATE ttrss_feeds SET title = '$feed_title' WHERE id = '$feed'");
 			}