cacert/cacert-webdb
9
0
Fork 0
Code Issues Pull requests 3 Projects Releases 4 Wiki Activity

Improved register_globals

Browse source 
Improved error handling
This commit is contained in:
root 2008-09-19 17:37:56 +00:00
parent 146d41696a
commit 919aa7df54
1 changed files with 14 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
www/verify.php
View file

@ -18,13 +18,13 @@
<? <?
loadem("account"); loadem("account");
if($_REQUEST['Notify'] != "") if(array_key_exists('Notify',$_REQUEST) && $_REQUEST['Notify'] != "")
{ {
echo "do something here"; echo "do something here";
exit; exit;
} }
$type = $_REQUEST['type']; $type = array_key_exists('type',$_REQUEST)?$_REQUEST['type']:"";
if($type == "email") if($type == "email")
{ {
@ -59,7 +59,7 @@
exit; exit;
} }
$row = mysql_fetch_assoc($res); $row = mysql_fetch_assoc($res);
if($_REQUEST['Yes'] != "") if(array_key_exists('Yes',$_REQUEST) && $_REQUEST['Yes'] != "")
{ {
$query = "update `email` set `hash`='',`modified`=NOW() where `id`='$emailid'"; $query = "update `email` set `hash`='',`modified`=NOW() where `id`='$emailid'";
mysql_query($query); mysql_query($query);
@ -67,7 +67,7 @@
mysql_query($query); mysql_query($query);
showheader(_("Updated"), _("Updated")); showheader(_("Updated"), _("Updated"));
echo _("Your account and/or email address has been verified. You can now start issuing certificates for this address."); echo _("Your account and/or email address has been verified. You can now start issuing certificates for this address.");
} else if($_REQUEST['No'] != "") { } else if(array_key_exists('No',$_REQUEST) && $_REQUEST['No'] != "") {
header("location: /index.php"); header("location: /index.php");
exit; exit;
} else { } else {
@ -84,8 +84,7 @@
showfooter(); showfooter();
exit; exit;
} }
elseif($type == "domain")
if($type == "domain")
{ {
$id = 7; $id = 7;
$domainid = intval($_REQUEST['domainid']); $domainid = intval($_REQUEST['domainid']);
@ -96,8 +95,8 @@
if(mysql_num_rows($res) > 0) if(mysql_num_rows($res) > 0)
{ {
$row = mysql_fetch_assoc($res); $row = mysql_fetch_assoc($res);
$row[attempts]++; $row['attempts']++;
if($row[attempts] >= 6) if($row['attempts'] >= 6)
{ {
$query = "update `domains` set `hash`='', `attempts`='$row[attempts]', `deleted`=NOW() where `id`='$domainid'"; $query = "update `domains` set `hash`='', `attempts`='$row[attempts]', `deleted`=NOW() where `id`='$domainid'";
showheader(_("Error!"), _("Error!")); showheader(_("Error!"), _("Error!"));
@ -142,4 +141,11 @@
showfooter(); showfooter();
exit; exit;
} }
else
{
showheader(_("Error!"), _("Error!"));
echo _("Parameters are missing. Please try the complete URL.");
showfooter();
exit;
}
?> ?>