diff options
| author | Dries Buytaert <dries@buytaert.net> | 2004-09-21 18:43:54 +0000 |
|---|---|---|
| committer | Dries Buytaert <dries@buytaert.net> | 2004-09-21 18:43:54 +0000 |
| commit | 4f5164c980f0ca5ca68ac861a313f6d1eb53cf71 (patch) | |
| tree | 78a399d8bd84c306b562ad68814939b2313e744c /modules/node.module | |
| parent | fbc6f161329af72bd0ebaf0fef617d3dc5257494 (diff) | |
| download | brdo-4f5164c980f0ca5ca68ac861a313f6d1eb53cf71.tar.gz brdo-4f5164c980f0ca5ca68ac861a313f6d1eb53cf71.tar.bz2 | |
- Patch #10977 by Gerhard: added missing node access controls for RSS feeds.
Diffstat (limited to 'modules/node.module')
| -rw-r--r-- | modules/node.module | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/modules/node.module b/modules/node.module index dd226fd21..6e3c4f905 100644 --- a/modules/node.module +++ b/modules/node.module @@ -1002,7 +1002,7 @@ function node_feed($nodes = 0, $channel = array()) { global $base_url, $locale; if (!$nodes) { - $nodes = db_query_range('SELECT nid FROM {node} WHERE promote = 1 AND status = 1 ORDER BY created DESC', 0, 15); + $nodes = db_query_range('SELECT n.nid FROM {node} n '. node_access_join_sql() .' WHERE '. node_access_where_sql() .' AND n.promote = 1 AND n.status = 1 ORDER BY n.created DESC', 0, 15); } while ($node = db_fetch_object($nodes)) { |