X-Git-Url: https://git.nubati.net/cgi-bin/gitweb.cgi?p=e-DoKo.git;a=blobdiff_plain;f=rss.php;h=006daa22396c766a4f5cfff20411a4eab8089acb;hp=c089fb5ebe0423de14888cf49d8570097e93e535;hb=HEAD;hpb=aeb9ef98850e762291bc6a1d39b31d1ac4db4817 diff --git a/rss.php b/rss.php index c089fb5..006daa2 100644 --- a/rss.php +++ b/rss.php @@ -1,5 +1,5 @@ +/* Copyright 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014 Arun Persaud * * This file is part of e-DoKo. * @@ -75,8 +75,7 @@ header("Content-Type: text/xml"); '._('Know when it is your turn')."\n"; @@ -101,8 +100,8 @@ echo "\n\n"; $result = DB_query("SELECT Hand.hash,Hand.game_id,Game.player from Hand". " LEFT JOIN Game On Hand.game_id=Game.id". - " WHERE Hand.user_id='$id'". - " AND ( Game.player='$id' OR ISNULL(Game.player) )". + " WHERE Hand.user_id=".DB_quote_smart($id). + " AND ( Game.player=".DB_quote_smart($id)." OR ISNULL(Game.player) )". " AND ( Game.status='pre' OR Game.status='play' )". " ORDER BY Game.session" );