X-Git-Url: https://git.nubati.net/cgi-bin/gitweb.cgi?p=e-DoKo.git;a=blobdiff_plain;f=rss.php;h=006daa22396c766a4f5cfff20411a4eab8089acb;hp=269b734b2fbbdf8eb73763f95a9d5570ce46f6ec;hb=e2db7fab7569c20afa4f7915edb70842ae1aed8e;hpb=47a0a9b5b1c8acb36aa0e93179ce5a661a69427a;ds=sidebyside diff --git a/rss.php b/rss.php index 269b734..006daa2 100644 --- a/rss.php +++ b/rss.php @@ -1,5 +1,5 @@ +/* Copyright 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014 Arun Persaud * * This file is part of e-DoKo. * @@ -74,23 +74,8 @@ header("Content-Type: text/xml"); E-DoKo Feed '._('Know when it is your turn')."\n"; @@ -115,8 +100,8 @@ echo "\n\n"; $result = DB_query("SELECT Hand.hash,Hand.game_id,Game.player from Hand". " LEFT JOIN Game On Hand.game_id=Game.id". - " WHERE Hand.user_id='$id'". - " AND ( Game.player='$id' OR ISNULL(Game.player) )". + " WHERE Hand.user_id=".DB_quote_smart($id). + " AND ( Game.player=".DB_quote_smart($id)." OR ISNULL(Game.player) )". " AND ( Game.status='pre' OR Game.status='play' )". " ORDER BY Game.session" );