mirrors/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/fox/tt-rss.git synced 2025-12-16 10:21:00 +01:00
Code Issues Projects Releases Wiki Activity

prevent frontend updating of feeds on view if open_basedir is set to prevent plugins potentially not working correctly (i.e. if backend system has open_basedir disabled)

Browse Source
This commit is contained in:
Andrew Dolgov 2016-01-23 12:13:03 +03:00
parent 8f2268dd5e
commit 29c92d7b08
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
classes/api.php
View File

@ -416,7 +416,9 @@ class API extends Handler {
$feed_id = (int) $this->dbh->escape_string($_REQUEST["feed_id"]); $feed_id = (int) $this->dbh->escape_string($_REQUEST["feed_id"]);
update_rss_feed($feed_id, true); if (!ini_get("open_basedir")) {
update_rss_feed($feed_id, true);
}
$this->wrap(self::STATUS_OK, array("status" => "OK")); $this->wrap(self::STATUS_OK, array("status" => "OK"));
} }

2
classes/feeds.php
View File

@ -166,7 +166,7 @@ class Feeds extends Handler_Protected {
$method_split = explode(":", $method); $method_split = explode(":", $method);
if ($method == "ForceUpdate" && $feed > 0 && is_numeric($feed)) { if ($method == "ForceUpdate" && $feed > 0 && is_numeric($feed) && !ini_get("open_basedir")) {
// Update the feed if required with some basic flood control // Update the feed if required with some basic flood control
$result = $this->dbh->query( $result = $this->dbh->query(