From 88afbe8b1dae9026544e65da9e0e8eddffb90561 Mon Sep 17 00:00:00 2001
From: root <root@www.cacert.org>
Date: Wed, 3 Sep 2008 16:12:30 +0000
Subject: [PATCH] Improved parameter checking

---
 pages/gpg/3.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pages/gpg/3.php b/pages/gpg/3.php
index 4800078..d9f54fb 100644
--- a/pages/gpg/3.php
+++ b/pages/gpg/3.php
@@ -16,8 +16,8 @@
     Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
 */ ?>
 <?
-	$certid = intval($_SESSION['_config']['cert']);
-	$query = "select * from `gpg` where `id`='$certid' and `memid`='".$_SESSION[profile][id]."'";
+	$certid = intval($_REQUEST['cert']);
+	$query = "select * from `gpg` where `id`='$certid' and `memid`='".intval($_SESSION['profile']['id'])."'";
 	$res = mysql_query($query);
 	if(mysql_num_rows($res) <= 0)
 	{
@@ -29,5 +29,5 @@
 ?>
 <h3><?=_("Below is your OpenPGP key")?></h3>
 <pre>
-<? readfile($row[crt]); ?>
+<? readfile($row['crt']); ?>
 </pre>