cacert
/
cacert-webdb
8
0
Fork 0
Code Issues Pull Requests 7 Projects Releases 2 Wiki Activity

bug #146

Browse Source
pull/1/head
root 18 years ago
parent cc90dd70e8
commit 464ab12861
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File

5
www/disputes.php
Unescape Escape View File

@ -311,6 +311,7 @@
} }
unset($oldid); unset($oldid);
$query = "select * from `domains` where `domain`='$domain' and `deleted`=0"; $query = "select * from `domains` where `domain`='$domain' and `deleted`=0";
$email = trim(mysql_real_escape_string($_REQUEST['email']));
$res = mysql_query($query); $res = mysql_query($query);
if(mysql_num_rows($res) <= 0) if(mysql_num_rows($res) <= 0)
{ {
@ -331,7 +332,7 @@
$domainid = $row['id']; $domainid = $row['id'];
$_SESSION['_config']['domainid'] = $domainid; $_SESSION['_config']['domainid'] = $domainid;
$_SESSION['_config']['memid'] = $memid; $_SESSION['_config']['memid'] = intval($_REQUEST['memid']);
$_SESSION['_config']['domain'] = $domain; $_SESSION['_config']['domain'] = $domain;
$_SESSION['_config']['oldmemid'] = $oldmemid; $_SESSION['_config']['oldmemid'] = $oldmemid;
@ -381,7 +382,7 @@
if($oldid == "5") if($oldid == "5")
{ {
$authaddy = trim(mysql_escape_string(stripslashes($_POST['authaddy']))); $authaddy = trim(mysql_escape_string(stripslashes($_REQUEST['authaddy'])));
if(!in_array($authaddy, $_SESSION['_config']['addy']) || $authaddy == "") if(!in_array($authaddy, $_SESSION['_config']['addy']) || $authaddy == "")
{ {

Write Preview
Loading…
Cancel
Save