Changeset 1470 for release-branches/0.5.4/gregarius/author.php

Timestamp:

05/15/06 16:53:07 (3 years ago)

Author:

sdcosta

Message:

0.5.3.9999999999999999999999999999999999999999999999999999999999

Files:

• release-branches/0.5.4/gregarius/author.php (modified) (2 diffs)

release-branches/0.5.4/gregarius/author.php

@@ -28 +28 @@
 require_once ('init.php');
 
-$a =  preg_replace("/[^A-Za-z0-9\.]/","%",rss_real_escape_string($_REQUEST['author']));
-
+$a =trim(sanitize($_REQUEST['author'], RSS_SANITIZER_WORDS));
 list ($ra) = rss_fetch_row(rss_query(
     "select distinct(author) from " .getTable('item') 
-    ." where author like '%$a%'"
+    ." where author like '$a'"
 ));
 
 if (!$ra) {
-    rss_redirect();
+    rss_404();
+    exit;
 }
 
@@ -43 +43 @@
 $GLOBALS['rss']->feedList = new FeedList(false);
 $authorItems = new ItemList();
-$sqlWhere = " i.author like '%$a%' ";
-$authorItems->populate($sqlWhere);
+$sqlWhere = " i.author like '$a' ";
+$numItems = getConfig('rss.output.frontpage.numitems');
+$authorItems->populate($sqlWhere, "",  0, $numItems);
 $authorItems->setTitle($t);
 $authorItems->setRenderOptions(IL_NO_COLLAPSE|IL_TITLE_NO_ESCAPE);