plugins/embed_original: use PDO

This commit is contained in:
Andrew Dolgov 2017-12-03 10:58:13 +03:00
parent 11d1a8a693
commit fad986ff5d

View file

@ -1,5 +1,7 @@
<?php
class Embed_Original extends Plugin {
/* @var PluginHost $host */
private $host;
function init($host) {
@ -34,17 +36,17 @@ class Embed_Original extends Plugin {
}
function getUrl() {
$id = db_escape_string($_REQUEST['id']);
$id = $_REQUEST['id'];
$result = db_query("SELECT link
$sth = $this->pdo->prepare("SELECT link
FROM ttrss_entries, ttrss_user_entries
WHERE id = '$id' AND ref_id = id AND owner_uid = " .$_SESSION['uid']);
WHERE id = ? AND ref_id = id AND owner_uid = ?");
$sth->execute([$id, $_SESSION['uid']]);
if ($row = $sth->fetch()) {
$url = $row['link'];
} else {
$url = "";
if (db_num_rows($result) != 0) {
$url = db_fetch_result($result, 0, "link");
}
print json_encode(array("url" => $url, "id" => $id));