X-Git-Url: https://dev.renevier.net/gitweb.cgi?p=syp.git;a=blobdiff_plain;f=news.php;h=886b00e5ff2f6cbb2dea20191cf1b7f56bf90b8e;hp=6eb78e63efe9e10ff3258fb9c7f3407d4b8b59bb;hb=4414f33ecd172ea188660a45c8d8fb3469416d4f;hpb=41c341624c16607ac710aac446cc0ead3c53671b

diff --git a/news.php b/news.php
index 6eb78e6..886b00e 100644
--- a/news.php
+++ b/news.php
@@ -2,10 +2,6 @@
 /* Copyright (c) 2009 Arnaud Renevier, Inc, published under the modified BSD
    license. */
 
-require_once ("./inc/settings.php");
-require_once ("./inc/db/mysql.php");
-require_once ("./inc/utils.php");
-
 function headers_callback ($output) {
     $etag = md5 ($output);
     if ((isset ($_SERVER ["HTTP_IF_NONE_MATCH"])) && 
@@ -63,7 +59,7 @@ function main ($features) {
     }
 
     if (SITETITLE) {
-        printf ("  <title>%s</title>\n", SITETITLE);
+        printf ("  <title>%s</title>\n", htmlspecialchars (SITETITLE));
     }
 
     if (WEBMASTERMAIL) {
@@ -124,6 +120,12 @@ function main ($features) {
     printf ("</feed>");
 }
 
+if (!@include_once ("./inc/settings.php")) {
+    exit ("server error");
+}
+require_once ("./inc/db/" . (defined ("DBTYPE")? DBTYPE: "mysql") . ".php");
+require_once ("./inc/utils.php");
+
 try {
     $connection->connect (DBHOST, DBUSER, DBPWD, DBNAME, DBPREFIX);
     $features = $connection->mostrecentfeatures (10);