From 8eb2a6102d0ac29a0fbe220a7e5eef8f4c535ac7 Mon Sep 17 00:00:00 2001
From: root <root@www.cacert.org>
Date: Tue, 3 Jul 2007 19:52:43 +0000
Subject: [PATCH] Fixed XSS

---
 pages/account/51.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pages/account/51.php b/pages/account/51.php
index e9532cc..243c1e0 100644
--- a/pages/account/51.php
+++ b/pages/account/51.php
@@ -18,7 +18,7 @@
 	$query = "select * from `tverify` where `id`='$uid' and `modified`=0";
 	$res = mysql_query($query);
 	if(mysql_num_rows($res) > 0) { ?>
-<img src="account.php?id=51&photoid=<?=$_GET['photoid']?>&img=show" border="0" width="800">
+<img src="account.php?id=51&photoid=<?=$uid ?>&img=show" border="0" width="800">
 <? } else {
         $query = "select * from `tverify` where `id`='$uid' and `modified`=1";
         $res = mysql_query($query);