cacert-webdb/www/account.php

<? /*
    LibreSSL - CAcert web application
    Copyright (C) 2004-2008  CAcert Inc.

    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; version 2 of the License.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program; if not, write to the Free Software
    Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
*/ ?>
<?
	include("../includes/account.php");
        $id = 0; if(array_key_exists("id",$_REQUEST)) $id=intval($_REQUEST['id']);
        $oldid = 0; if(array_key_exists("oldid",$_REQUEST)) $oldid=intval($_REQUEST['oldid']);

	if($id == 6)
	{
		include_once("../pages/account/6.php");
		exit;
	} else if($id == 19) {
		include_once("../pages/account/19.php");
		exit;
	} else if($oldid == 40 && $_REQUEST['process'] != "" && $_POST['support'] != "yes") {
		$who = stripslashes($_REQUEST['who']);
		$email = stripslashes($_REQUEST['email']);
		$subject = stripslashes($_REQUEST['subject']);
		$message = stripslashes($_REQUEST['message']);

                $message = "From: $who\nEmail: $email\nSubject: $subject\n\nMessage:\n".$message;

		sendmail("support@cacert.org", "[CAcert.org] ".$subject, $message, $email, $email, "", "CAcert Website");
                showheader(_("Welcome to CAcert.org"));
                echo _("Your message has been sent.");
                showfooter();
                exit;
	} else if($oldid == 40 && $_REQUEST['process'] != "" && $_POST['support'] == "yes") {
		$who = stripslashes($_REQUEST['who']);
		$email = stripslashes($_REQUEST['email']);
		$subject = stripslashes($_REQUEST['subject']);
		$message = stripslashes($_REQUEST['message']);


                $message = "From: $who\nEmail: $email\nSubject: $subject\n\nMessage:\n".$message;

                sendmail("cacert-support@lists.cacert.org, $email", "[website form email]: ".$subject, $message, "website-form@cacert.org", "cacert-support@lists.cacert.org, $email", "", "CAcert Website");
		
                showheader(_("Welcome to CAcert.org"));
                echo _("Your message has been sent to the general support list.");
                showfooter();
                exit;
	} else if($id == 51 && $_GET['img'] == "show") {
		$query = "select * from `tverify` where `id`='".intval($_GET['photoid'])."' and `modified`=0";
		$res = mysql_query($query);
		if(mysql_num_rows($res))
		{
			$row = mysql_fetch_assoc($res);
			readfile($row['photoid']);
		} else {
			die("No such file.");
		}
		exit;
	} else {
		showheader(_("My CAcert.org Account!"));
		includeit($id, "account");
		showfooter();
		exit;
	}
?>