fixed security flaw in get-feed.php