api/getArticle: validate id list

823da71a · Andrew Dolgov · edfab7bd · 823da71a
Commit 823da71a authored Nov 07, 2011 by Andrew Dolgov
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

api/index.php api/index.php +1 -1

No files found.
--- a/api/index.php
+++ b/api/index.php
@@ -274,7 +274,7 @@

 		case "getArticle":

-			$article_id = db_escape_string($_REQUEST["article_id"]);
+			$article_id = join(",", array_filter(explode(",", db_escape_string($_REQUEST["article_id"])), is_numeric));

 			$query = "SELECT id,title,link,content,feed_id,comments,int_id,
 				marked,unread,published,