From e3de9d7dd1331f9718e04cc98e9ca7cfa27cf4aa Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nicolas=20L=C3=A9cureuil?= <neoclust@mageia.org>
Date: Sun, 17 May 2020 14:46:00 +0200
Subject: Sync with master of moonmoon ( version 9.0.0-rc) Source from
 https://github.com/Emmafrs/moonmoon/

---
 common/postload.php | 40 +++++++++++++++++++++++++++-------------
 1 file changed, 27 insertions(+), 13 deletions(-)

(limited to 'common/postload.php')

diff --git a/common/postload.php b/common/postload.php
index 8f18678..7341b82 100644
--- a/common/postload.php
+++ b/common/postload.php
@@ -1,16 +1,30 @@
 <?php
-include_once(dirname(__FILE__).'/app/app.php');
 
-$Planet->addPerson(
-    new PlanetFeed(
-        '',
-        htmlspecialchars_decode($_GET['url'], ENT_QUOTES),
-        ''
-    )
-);
+require_once __DIR__.'/app/app.php';
 
-//Load feeds
-$Planet->download(1);
-header("Content-type: image/png");
-readfile(dirname(__FILE__)."/custom/img/feed.png");
-die();
+if (!is_installed()) {
+    die();
+}
+
+$xml = new SimpleXMLElement(file_get_contents(custom_path('people.opml')));
+
+foreach ($xml->xpath('/opml/body/outline[@xmlUrl]') as $element)
+{
+    if ($element->attributes()->xmlUrl == $_GET['url'])
+    {
+        $person = new PlanetFeed(
+            '',
+            $_GET['url'],
+            '',
+            false
+        );
+        $Planet->addPerson($person);
+
+        $Planet->download(1);
+        header('Content-type: image/png');
+        readfile(custom_path('img/feed.png'));
+        die();
+    }
+}
+
+echo 'Updating this URL is not allowed.';
\ No newline at end of file
-- 
cgit v1.2.1