Improved register_globals

includes/account.php

@@ -540,12 +540,12 @@
 	{
 		$id = 9;
 		showheader(_("My CAcert.org Account!"));
-		if(is_array($delid))
+		if(is_array($_REQUEST['delid']))
 		{
 			echo _("The following domains have been removed:")."<br>
 				("._("Any valid certificates will be revoked as well").")<br>\n";
 
-			foreach($delid as $id)
+			foreach($_REQUEST['delid'] as $id)
 			{
 				$id = intval($id);
 				$query = "select * from `domains` where `id`='$id' and `memid`='".$_SESSION['profile']['id']."'";
@@ -844,10 +844,10 @@
 			echo _("You did not select any certificates for revocation.");
 		}
 
-		if(is_array($delid))
+		if(is_array($_REQUEST['delid']))
 		{
 			echo _("Now deleting the following pending requests:")."<br>\n";
-			foreach($delid as $id)
+			foreach($_REQUEST['delid'] as $id)
 			{
 				$id = intval($id);
 				$query = "select *,UNIX_TIMESTAMP(`domaincerts`.`expire`) as `expired` from `domaincerts`,`domains` 
@@ -972,10 +972,10 @@
 			echo _("You did not select any certificates for revocation.");
 		}
 
-		if(is_array($delid))
+		if(is_array($_REQUEST['delid']))
 		{
 			echo _("Now deleting the following pending requests:")."<br>\n";
-			foreach($delid as $id)
+			foreach($_REQUEST['delid'] as $id)
 			{
 				$id = intval($id);
 				$query = "select *,UNIX_TIMESTAMP(`expire`) as `expired` from `emailcerts` 
@@ -1517,10 +1517,10 @@
 			echo _("You did not select any certificates for revocation.");
 		}
 
-		if(is_array($delid))
+		if(is_array($_REQUEST['delid']))
 		{
 			echo _("Now deleting the following pending requests:")."<br>\n";
-			foreach($delid as $id)
+			foreach($_REQUEST['delid'] as $id)
 			{
 				$id = intval($id);
 				$query = "select *,UNIX_TIMESTAMP(`expire`) as `expired` from `orgemailcerts`, `org`
@@ -1803,10 +1803,10 @@
 			echo _("You did not select any certificates for revocation.");
 		}
 
-		if(is_array($delid))
+		if(is_array($_REQUEST['delid']))
 		{
 			echo _("Now deleting the following pending requests:")."<br>\n";
-			foreach($delid as $id)
+			foreach($_REQUEST['delid'] as $id)
 			{
 				$id = intval($id);
 				$query = "select *,UNIX_TIMESTAMP(`orgdomaincerts`.`expire`) as `expired` from