From b6b535ca74da3729b4bc4c3c95cee309ff624f39 Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Sun, 20 Nov 2005 08:18:56 +0100 Subject: [PATCH] trim feed,label,filter,login input on add --- backend.php | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/backend.php b/backend.php index 4320f513..a3b4f699 100644 --- a/backend.php +++ b/backend.php @@ -948,7 +948,7 @@ if (!WEB_DEMO_MODE) { - $feed_link = db_escape_string($_GET["link"]); + $feed_link = db_escape_string(trim($_GET["link"])); $result = db_query($link, "SELECT id FROM ttrss_feeds @@ -1200,8 +1200,8 @@ if (!WEB_DEMO_MODE) { - $regexp = db_escape_string($_GET["regexp"]); - $match = db_escape_string($_GET["match"]); + $regexp = db_escape_string(trim($_GET["regexp"])); + $match = db_escape_string(trim($_GET["match"])); $result = db_query($link, "INSERT INTO ttrss_filters (reg_exp,filter_type,owner_uid) VALUES @@ -1373,7 +1373,7 @@ if (!WEB_DEMO_MODE) { - $exp = $_GET["exp"]; + $exp = db_escape_string(trim($_GET["exp"])); $result = db_query($link, "INSERT INTO ttrss_labels (sql_exp,description,owner_uid) @@ -1916,7 +1916,7 @@ if (!WEB_DEMO_MODE && $_SESSION["access_level"] >= 10) { - $login = db_escape_string($_GET["login"]); + $login = db_escape_string(trim($_GET["login"])); $tmp_user_pwd = make_password(8); $pwd_hash = 'SHA1:' . sha1($tmp_user_pwd);