update_rss_feed: escape error string immediately

This commit is contained in:
Andrew Dolgov 2012-12-24 14:17:24 +04:00
parent 4412b877d0
commit 356a991a7b

View file

@ -1017,14 +1017,12 @@
} else {
$error_msg = mb_substr($rss->error(), 0, 250);
$error_msg = db_escape_string(mb_substr($rss->error(), 0, 250));
if ($debug_enabled) {
_debug("update_rss_feed: error fetching feed: $error_msg");
}
$error_msg = db_escape_string($error_msg);
db_query($link,
"UPDATE ttrss_feeds SET last_error = '$error_msg',
last_updated = NOW() WHERE id = '$feed'");