cacert-webdb/www/account.php

<? /*
    Copyright (C) 2004-2005 by Duane Groth <duane_at_CAcert_dot_org>

    This file is part of CAcert.

    CAcert has been released under the CAcert Source License
    which can be found included with these source files or can
    be downloaded from the internet from the following address:
    http://www.cacert.org/src-lic.php

    CAcert is distributed WITHOUT ANY WARRANTY; without even
    the implied warranty of MERCHANTABILITY or FITNESS FOR A
    PARTICULAR PURPOSE.  See the License for more details.
*/ ?>
<?
	include("../includes/account.php");

	if($id == 6)
	{
		include_once("../pages/account/6.php");
		exit;
	} else if($id == 19) {
		include_once("../pages/account/19.php");
		exit;
	} else if($oldid == 40 && $process != "" && $_POST['support'] != "yes") {
		$who = stripslashes($who);
		$email = stripslashes($email);
		$subject = stripslashes($subject);
		$message = stripslashes($message);

                $message = "From: $who\nEmail: $email\nSubject: $subject\n\nMessage:\n".$message;

		sendmail("support@cacert.org", "[CAcert.org] ".$subject, $message, $email, $email, "", "CAcert Website");
                showheader(_("Welcome to CAcert.org"));
                echo _("Your message has been sent.");
                showfooter();
                exit;
	} else if($oldid == 40 && $process != "" && $_POST['support'] == "yes") {
		$who = stripslashes($who);
		$email = stripslashes($email);
		$subject = stripslashes($subject);
		$message = stripslashes($message);

                $message = "From: $who\nEmail: $email\nSubject: $subject\n\nMessage:\n".$message;

                sendmail("cacert-support@lists.cacert.org, $email", "[website form email]: ".$subject, $message, "website-form@cacert.org", "cacert-support@lists.cacert.org, $email", "", "CAcert Website");
		
                showheader(_("Welcome to CAcert.org"));
                echo _("Your message has been sent to the general support list.");
                showfooter();
                exit;
	} else if($id == 51 && $_GET['img'] == "show") {
		$query = "select * from `tverify` where `id`='".$_GET['photoid']."' and `modified`=0";
		$res = mysql_query($query);
		if(mysql_num_rows($res))
		{
			$row = mysql_fetch_assoc($res);
			readfile($row['photoid']);
		} else {
			die("No such file.");
		}
		exit;
	} else {
		showheader(_("My CAcert.org Account!"));
		includeit($id, "account");
		showfooter();
		exit;
	}
?>