diff --git a/api/index.php b/api/index.php index 633b11a75..f6e1cb79f 100644 --- a/api/index.php +++ b/api/index.php @@ -274,7 +274,7 @@ case "getArticle": - $article_id = db_escape_string($_REQUEST["article_id"]); + $article_id = join(",", array_filter(explode(",", db_escape_string($_REQUEST["article_id"])), is_numeric)); $query = "SELECT id,title,link,content,feed_id,comments,int_id, marked,unread,published,