update_rss_feed: fix broken title/content escaping

12 years ago · e1e3f972b6
parent 8b299a163e
commit e1e3f972b6
1 changed files with 2 additions and 2 deletions
--- a/include/rssfuncs.php
+++ b/include/rssfuncs.php
@ -770,8 +770,8 @@
 				}

 				# sanitize content
-				$entry_content = sanitize($link, $entry_content, $owner_uid, $site_url);
-				$entry_title = strip_tags($entry_title);
+				$entry_content = db_escape_string(sanitize($link, $entry_content, $owner_uid, $site_url));
+				$entry_title = db_escape_string(strip_tags($entry_title));

 				if ($debug_enabled) {
 					_debug("update_rss_feed: done collecting data [TITLE:$entry_title]");