Sync with master of moonmoon ( version 9.0.0-rc)HEADuser/wally/upstream-10-devmaster

Source from https://github.com/Emmafrs/moonmoon/

1 files changed, 27 insertions, 13 deletions

diff --git a/common/postload.php b/common/postload.php
index 8f18678..7341b82 100644
--- a/common/postload.php
+++ b/common/postload.php
@@ -1,16 +1,30 @@
 <?php
-include_once(dirname(__FILE__).'/app/app.php');
 
-$Planet->addPerson(
-    new PlanetFeed(
-        '',
-        htmlspecialchars_decode($_GET['url'], ENT_QUOTES),
-        ''
-    )
-);
+require_once __DIR__.'/app/app.php';
 
-//Load feeds
-$Planet->download(1);
-header("Content-type: image/png");
-readfile(dirname(__FILE__)."/custom/img/feed.png");
-die();
+if (!is_installed()) {
+    die();
+}
+
+$xml = new SimpleXMLElement(file_get_contents(custom_path('people.opml')));
+
+foreach ($xml->xpath('/opml/body/outline[@xmlUrl]') as $element)
+{
+    if ($element->attributes()->xmlUrl == $_GET['url'])
+    {
+        $person = new PlanetFeed(
+            '',
+            $_GET['url'],
+            '',
+            false
+        );
+        $Planet->addPerson($person);
+
+        $Planet->download(1);
+        header('Content-type: image/png');
+        readfile(custom_path('img/feed.png'));
+        die();
+    }
+}
+
+echo 'Updating this URL is not allowed.';
\ No newline at end of file