From 4f5164c980f0ca5ca68ac861a313f6d1eb53cf71 Mon Sep 17 00:00:00 2001
From: Dries Buytaert <dries@buytaert.net>
Date: Tue, 21 Sep 2004 18:43:54 +0000
Subject: - Patch #10977 by Gerhard: added missing node access controls for RSS
 feeds.

---
 modules/node.module | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'modules/node.module')

diff --git a/modules/node.module b/modules/node.module
index dd226fd21..6e3c4f905 100644
--- a/modules/node.module
+++ b/modules/node.module
@@ -1002,7 +1002,7 @@ function node_feed($nodes = 0, $channel = array()) {
   global $base_url, $locale;
 
   if (!$nodes) {
-    $nodes = db_query_range('SELECT nid FROM {node} WHERE promote = 1 AND status = 1 ORDER BY created DESC', 0, 15);
+    $nodes = db_query_range('SELECT n.nid FROM {node} n '. node_access_join_sql() .' WHERE '. node_access_where_sql() .' AND n.promote = 1 AND n.status = 1 ORDER BY n.created DESC', 0, 15);
   }
 
   while ($node = db_fetch_object($nodes)) {
-- 
cgit v1.2.3