X-Git-Url: https://git.nubati.net/cgi-bin/gitweb.cgi?p=e-DoKo.git;a=blobdiff_plain;f=rss.php;h=006daa22396c766a4f5cfff20411a4eab8089acb;hp=25695b810d9969c385bd05c24acaa7fafc9726be;hb=ecabf718a77ca979d16ef9d55f8db962fd3e814b;hpb=a38183cf36a31f4372a5e37d09c6312a9fa267f7

diff --git a/rss.php b/rss.php
index 25695b8..006daa2 100644
--- a/rss.php
+++ b/rss.php
@@ -1,5 +1,5 @@
 <?php
-/* Copyright 2006, 2007, 2008, 2009, 2010, 2011, 2012 Arun Persaud <arun@nubati.net>
+/* Copyright 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014 Arun Persaud <arun@nubati.net>
  *
  *   This file is part of e-DoKo.
  *
@@ -100,8 +100,8 @@ echo "</author>\n\n";
 
   $result = DB_query("SELECT Hand.hash,Hand.game_id,Game.player from Hand".
 		     " LEFT JOIN Game On Hand.game_id=Game.id".
-		     " WHERE Hand.user_id='$id'".
-		     " AND ( Game.player='$id' OR ISNULL(Game.player) )".
+		     " WHERE Hand.user_id=".DB_quote_smart($id).
+		     " AND ( Game.player=".DB_quote_smart($id)." OR ISNULL(Game.player) )".
 		     " AND ( Game.status='pre' OR Game.status='play' )".
 		     " ORDER BY Game.session" );