@ -7,6 +7,18 @@
$arr = explode("/", $arr['1'], 2);
$ref = $arr['0'];
$arr = explode("//", mysql_real_escape_string(trim($_SERVER['HTTP_REFERER'])), 2);
$arr = explode("/", $arr['1'], 2);
$siteref = $arr['0'];
if($ref == "" || ($ref != $siteref & & $siteref != ""))
{
if($siteref != "")
$siterefer = $_SERVER['HTTP_REFERER'];
else
$siterefer = $_REQUEST['refer'];
$invalid = 2;
} else {
$query = "select *,`domaincerts`.`created` as `issued` from `domlink`,`domains`,`domaincerts`
where `domlink`.`domid`=`domains`.`id` and `domlink`.`certid`=`domaincerts`.`id` and `domaincerts`.`revoked`=0 and
`domaincerts`.`subject` like '%subjectAltName=DNS:$ref/%' order by `domaincerts`.`id`";
@ -40,7 +52,10 @@
}
}
}
}
if($invalid == 0)
{
$cert = mysql_fetch_assoc($res);
if($org == 0)
{
@ -51,6 +66,7 @@
$query = "select * from `orginfo` where `id`='$cert[orgid]'";
$orgi = mysql_fetch_assoc(mysql_query($query));
}
}
?><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
< html >
< head >
@ -90,7 +106,7 @@ google_ad_channel = "";
<? } else { ?>
< p style = "color:red" > This site has potentially abused CAcert logos and Copyrights, please report it so we may further investigate.< / p >
<? } ?>
< p >< a href = "report.php?refer= <? = $ _REQUEST[ 'refer' ] ?> " > Problem with this site? Please report it</ a ></ p >
< p >< a href = "report.php?refer= <? = $ siterefer ?> " > Problem with this site? Please report it</ a ></ p >
< / div >
< / div >
< / body >