cacert
/
cacert-webdb
8
0
Fork 0
Code Issues Pull Requests 7 Projects Releases 2 Wiki Activity

bug #163

Browse Source
pull/1/head
root 18 years ago
parent 2b2f1bd1d9
commit 030797c081
2 changed files with 73 additions and 0 deletions
Show Stats Download Patch File Download Diff File

37
includes/account.php
Unescape Escape View File

@ -928,6 +928,43 @@
$_SESSION['_config']['user']['A4'] = trim(mysql_real_escape_string(stripslashes(strip_tags($_REQUEST['A4']))));
$_SESSION['_config']['user']['A5'] = trim(mysql_real_escape_string(stripslashes(strip_tags($_REQUEST['A5']))));
if($_SESSION['_config']['user']['Q1'] == $_SESSION['_config']['user']['Q2'] ||
$_SESSION['_config']['user']['Q1'] == $_SESSION['_config']['user']['Q3'] ||
$_SESSION['_config']['user']['Q1'] == $_SESSION['_config']['user']['Q4'] ||
$_SESSION['_config']['user']['Q1'] == $_SESSION['_config']['user']['Q5'] ||
$_SESSION['_config']['user']['Q2'] == $_SESSION['_config']['user']['Q3'] ||
$_SESSION['_config']['user']['Q2'] == $_SESSION['_config']['user']['Q4'] ||
$_SESSION['_config']['user']['Q2'] == $_SESSION['_config']['user']['Q5'] ||
$_SESSION['_config']['user']['Q3'] == $_SESSION['_config']['user']['Q4'] ||
$_SESSION['_config']['user']['Q3'] == $_SESSION['_config']['user']['Q5'] ||
$_SESSION['_config']['user']['Q4'] == $_SESSION['_config']['user']['Q5'] ||
$_SESSION['_config']['user']['A1'] == $_SESSION['_config']['user']['Q1'] ||
$_SESSION['_config']['user']['A1'] == $_SESSION['_config']['user']['Q2'] ||
$_SESSION['_config']['user']['A1'] == $_SESSION['_config']['user']['Q3'] ||
$_SESSION['_config']['user']['A1'] == $_SESSION['_config']['user']['Q4'] ||
$_SESSION['_config']['user']['A1'] == $_SESSION['_config']['user']['Q5'] ||
$_SESSION['_config']['user']['A2'] == $_SESSION['_config']['user']['Q3'] ||
$_SESSION['_config']['user']['A2'] == $_SESSION['_config']['user']['Q4'] ||
$_SESSION['_config']['user']['A2'] == $_SESSION['_config']['user']['Q5'] ||
$_SESSION['_config']['user']['A3'] == $_SESSION['_config']['user']['Q4'] ||
$_SESSION['_config']['user']['A3'] == $_SESSION['_config']['user']['Q5'] ||
$_SESSION['_config']['user']['A4'] == $_SESSION['_config']['user']['Q5'] ||
$_SESSION['_config']['user']['A1'] == $_SESSION['_config']['user']['A2'] ||
$_SESSION['_config']['user']['A1'] == $_SESSION['_config']['user']['A3'] ||
$_SESSION['_config']['user']['A1'] == $_SESSION['_config']['user']['A4'] ||
$_SESSION['_config']['user']['A1'] == $_SESSION['_config']['user']['A5'] ||
$_SESSION['_config']['user']['A2'] == $_SESSION['_config']['user']['A3'] ||
$_SESSION['_config']['user']['A2'] == $_SESSION['_config']['user']['A4'] ||
$_SESSION['_config']['user']['A2'] == $_SESSION['_config']['user']['A5'] ||
$_SESSION['_config']['user']['A3'] == $_SESSION['_config']['user']['A4'] ||
$_SESSION['_config']['user']['A3'] == $_SESSION['_config']['user']['A5'] ||
$_SESSION['_config']['user']['A4'] == $_SESSION['_config']['user']['A5'])
{
$_SESSION['_config']['errmsg'] .= _("For your own security you must enter 5 different password questions and answers. You aren't allowed to duplicate questions, set questions as answers or use the question as the answer.")."<br>\n";
$id = $oldid;
unset($oldid);
}
if($_SESSION['_config']['user']['Q1'] == "" || $_SESSION['_config']['user']['Q2'] == "" ||
$_SESSION['_config']['user']['Q3'] == "" || $_SESSION['_config']['user']['Q4'] == "" ||
$_SESSION['_config']['user']['Q5'] == "")

36
www/index.php
Unescape Escape View File

@ -263,6 +263,42 @@
$_SESSION['signup']['regional'] = intval($_REQUEST['regional']);
$_SESSION['signup']['radius'] = intval($_REQUEST['radius']);
if($_SESSION['signup']['Q1'] == $_SESSION['signup']['Q2'] ||
$_SESSION['signup']['Q1'] == $_SESSION['signup']['Q3'] ||
$_SESSION['signup']['Q1'] == $_SESSION['signup']['Q4'] ||
$_SESSION['signup']['Q1'] == $_SESSION['signup']['Q5'] ||
$_SESSION['signup']['Q2'] == $_SESSION['signup']['Q3'] ||
$_SESSION['signup']['Q2'] == $_SESSION['signup']['Q4'] ||
$_SESSION['signup']['Q2'] == $_SESSION['signup']['Q5'] ||
$_SESSION['signup']['Q3'] == $_SESSION['signup']['Q4'] ||
$_SESSION['signup']['Q3'] == $_SESSION['signup']['Q5'] ||
$_SESSION['signup']['Q4'] == $_SESSION['signup']['Q5'] ||
$_SESSION['signup']['A1'] == $_SESSION['signup']['Q1'] ||
$_SESSION['signup']['A1'] == $_SESSION['signup']['Q2'] ||
$_SESSION['signup']['A1'] == $_SESSION['signup']['Q3'] ||
$_SESSION['signup']['A1'] == $_SESSION['signup']['Q4'] ||
$_SESSION['signup']['A1'] == $_SESSION['signup']['Q5'] ||
$_SESSION['signup']['A2'] == $_SESSION['signup']['Q3'] ||
$_SESSION['signup']['A2'] == $_SESSION['signup']['Q4'] ||
$_SESSION['signup']['A2'] == $_SESSION['signup']['Q5'] ||
$_SESSION['signup']['A3'] == $_SESSION['signup']['Q4'] ||
$_SESSION['signup']['A3'] == $_SESSION['signup']['Q5'] ||
$_SESSION['signup']['A4'] == $_SESSION['signup']['Q5'] ||
$_SESSION['signup']['A1'] == $_SESSION['signup']['A2'] ||
$_SESSION['signup']['A1'] == $_SESSION['signup']['A3'] ||
$_SESSION['signup']['A1'] == $_SESSION['signup']['A4'] ||
$_SESSION['signup']['A1'] == $_SESSION['signup']['A5'] ||
$_SESSION['signup']['A2'] == $_SESSION['signup']['A3'] ||
$_SESSION['signup']['A2'] == $_SESSION['signup']['A4'] ||
$_SESSION['signup']['A2'] == $_SESSION['signup']['A5'] ||
$_SESSION['signup']['A3'] == $_SESSION['signup']['A4'] ||
$_SESSION['signup']['A3'] == $_SESSION['signup']['A5'] ||
$_SESSION['signup']['A4'] == $_SESSION['signup']['A5'])
{
$id = 1;
$_SESSION['_config']['errmsg'] .= _("For your own security you must enter 5 different password questions and answers. You aren't allowed to duplicate questions, set questions as answers or use the question as the answer.")."<br>\n";
}
if($_SESSION['signup']['Q1'] == "" || $_SESSION['signup']['Q2'] == "" ||
$_SESSION['signup']['Q3'] == "" || $_SESSION['signup']['Q4'] == "" ||
$_SESSION['signup']['Q5'] == "")

Write Preview
Loading…
Cancel
Save