I've found that if a user has no subscriptions and clicks on the feed link on the subscriptions page their feed contains all nodes. This appears to be due to the sql generation in subscriptions_feed(), which doesn't account for a possible lack of conditions. I also found that the function was expecting to be passed a user object, but was getting passed a uid instead. I've attached a patch which fixes both of these issues.

Comments

salvis’s picture

Thank you for the patch.

Please see http://drupal.org/node/187186.

salvis’s picture

Status: Active » Closed (fixed)

Subscriptions 2.0 has been rewritten from the ground up — I'm closing this issue because it refers to obsolete code that was removed.

If you'd like to take a first look and help with testing, then get it from the link on http://drupal.org/project/subscriptions, but do heed the warnings!

Please open new issues for feedback about the new version 2.0!