From 6b19264ae0a537167aa3fc3e3b9cb91293c24ff4 Mon Sep 17 00:00:00 2001
From: Philipp Dunkel <philipp@cacert.org>
Date: Mon, 29 Mar 2010 19:40:15 +0000
Subject: [PATCH] http://bugs.cacert.org/view.php?id=778

---
 www/gpg.php | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/www/gpg.php b/www/gpg.php
index 894f298..345b559 100644
--- a/www/gpg.php
+++ b/www/gpg.php
@@ -83,7 +83,14 @@ function verifyEmail($email)
 	if($oldid == "0" && $CSR != "")
 	{
 		$debugkey = $gpgkey = clean_gpgcsr($CSR);
-		$debugpg = $gpg = trim(`echo "$gpgkey"|gpg --with-colons --homedir /tmp 2>&1`);
+
+		$tnam = tempnam('/tmp/', '__gpg');
+		$fp = fopen($tnam, 'w');
+		fwrite($fp, $gpgkey);
+		fclose($fp);
+		$debugpg = $gpg = trim(`gpg --with-colons --homedir /tmp 2>&1 < $tnam`);
+		unlink($tnam);
+
 		$lines = "";
 		$gpgarr = explode("\n", $gpg);
 		foreach($gpgarr as $line)