diff options
| author | Adam Mathes <adam@adammathes.com> | 2026-02-17 20:55:12 -0800 |
|---|---|---|
| committer | Adam Mathes <adam@adammathes.com> | 2026-02-17 20:55:12 -0800 |
| commit | 8eb86cdc49c3c2f69d8a64f855220ebd68be336c (patch) | |
| tree | b2a3a82f3d31cb78221ef12a9d75f9b094dbc580 /models/feed/feed.go | |
| parent | b0358b6777450ccd4e9fe704d76aeffe7b5a5d6e (diff) | |
| download | neko-8eb86cdc49c3c2f69d8a64f855220ebd68be336c.tar.gz neko-8eb86cdc49c3c2f69d8a64f855220ebd68be336c.tar.bz2 neko-8eb86cdc49c3c2f69d8a64f855220ebd68be336c.zip | |
Apply SQL injection fix and repair CI config from fix-sql-injection branch
Diffstat (limited to 'models/feed/feed.go')
| -rw-r--r-- | models/feed/feed.go | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/models/feed/feed.go b/models/feed/feed.go index 4f39335..93c62d2 100644 --- a/models/feed/feed.go +++ b/models/feed/feed.go @@ -45,11 +45,11 @@ func All() ([]*Feed, error) { return filter(" ORDER BY lower(TITLE) asc") } -func filter(where string) ([]*Feed, error) { +func filter(where string, args ...interface{}) ([]*Feed, error) { // todo: add back in title rows, err := models.DB.Query(`SELECT id, url, web_url, title, category - FROM feed ` + where) + FROM feed `+where, args...) if err != nil { return nil, err } |