X-Git-Url: https://git.nubati.net/cgi-bin/gitweb.cgi?p=e-DoKo.git;a=blobdiff_plain;f=rss.php;h=e6db2875d531c3fbf08dab4485a6d608a4b7f9bc;hp=269b734b2fbbdf8eb73763f95a9d5570ce46f6ec;hb=ef0fd1178c4f9e5bea92dac7d02a12ce0d523547;hpb=47a0a9b5b1c8acb36aa0e93179ce5a661a69427a diff --git a/rss.php b/rss.php index 269b734..e6db287 100644 --- a/rss.php +++ b/rss.php @@ -1,5 +1,5 @@ +/* Copyright 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013 Arun Persaud * * This file is part of e-DoKo. * @@ -74,23 +74,8 @@ header("Content-Type: text/xml"); E-DoKo Feed '._('Know when it is your turn')."\n"; @@ -115,8 +100,8 @@ echo "\n\n"; $result = DB_query("SELECT Hand.hash,Hand.game_id,Game.player from Hand". " LEFT JOIN Game On Hand.game_id=Game.id". - " WHERE Hand.user_id='$id'". - " AND ( Game.player='$id' OR ISNULL(Game.player) )". + " WHERE Hand.user_id=".DB_quote_smart($id). + " AND ( Game.player=".DB_quote_smart($id)." OR ISNULL(Game.player) )". " AND ( Game.status='pre' OR Game.status='play' )". " ORDER BY Game.session" );