bug #181

www/wot.php

@@ -251,6 +251,22 @@
 		if(mysql_escape_string(stripslashes($_POST['date'])) == "")
 			$_POST['date'] = date("Y-m-d H:i:s");
 
+		$query = "select * from `notary` where from`='".$_SESSION['profile']['id']."' AND
+						`to`='".$_SESSION['_config']['notarise']['id']."' AND
+						`awardeded`='$awarded' AND 
+						`location`='".mysql_escape_string(stripslashes($_POST['location']))."' AND
+						`date`='".mysql_escape_string(stripslashes($_POST['date']))."'";
+		$res = mysql_query($query);
+		if(mysql_num_rows($res) >= 0)
+		{
+                        $id = $oldid;
+                        unset($oldid);
+                        $_SESSION['_config']['error'] = _("Identical Assurance attempted, will not continue.");
+		}
+	}
+
+	if($oldid == 6)
+	{
 		$query = "insert into `notary` set `from`='".$_SESSION['profile']['id']."',
 						`to`='".$_SESSION['_config']['notarise']['id']."',
 						`points`='$newpoints', `awardeded`='$awarded',