From a77a47332cd70059486e5888bc5987ce516dcf5b Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Sat, 2 Dec 2017 11:42:42 +0300 Subject: opml host, update: use PDO --- opml.php | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) (limited to 'opml.php') diff --git a/opml.php b/opml.php index af3694051..bdee88e08 100644 --- a/opml.php +++ b/opml.php @@ -15,14 +15,16 @@ $op = $_REQUEST['op']; if ($op == "publish"){ - $key = db_escape_string( $_REQUEST["key"]); + $key = $_REQUEST["key"]; + $pdo = Db::pdo(); - $result = db_query( "SELECT owner_uid + $sth = $pdo->prepare( "SELECT owner_uid FROM ttrss_access_keys WHERE - access_key = '$key' AND feed_id = 'OPML:Publish'"); + access_key = ? AND feed_id = 'OPML:Publish'"); + $sth->execute([$key]); - if (db_num_rows($result) == 1) { - $owner_uid = db_fetch_result($result, 0, "owner_uid"); + if ($row = $sth->fetch()) { + $owner_uid = $row['owner_uid']; $opml = new Opml($_REQUEST); $opml->opml_export("", $owner_uid, true, false); -- cgit v1.2.3-54-g00ecf