Merge branch 'xchan-fetch-escape-args' into 'dev'

Escape args in xchan_fetch

See merge request hubzilla/core!2252
This commit is contained in:
Mario
2026-01-04 19:53:51 +00:00
2 changed files with 35 additions and 1 deletions

View File

@@ -166,7 +166,7 @@ function xchan_fetch($arr) {
if(! $key)
return false;
$r = q("select * from xchan where $key = '$v' limit 1");
$r = q("select * from xchan where $key = '%s' limit 1", dbesc($v));
if(! $r)
return false;