fix security issue in view

This commit is contained in:
Andrew Dolgov 2006-05-16 12:48:07 +01:00
parent 7fb323413a
commit 12fb24b921

View file

@ -520,7 +520,7 @@
num_comments,
author
FROM ttrss_entries,ttrss_user_entries
WHERE id = '$id' AND ref_id = id");
WHERE id = '$id' AND ref_id = id AND owner_uid = " . $_SESSION["uid"]);
print "<html><head>
<title>Tiny Tiny RSS : Article $id</title>