cacert/cacert-webdb
9
0
Fork 0
Code Issues Pull requests 3 Projects Releases 4 Wiki Activity

Fix for https://bugs.cacert.org/view.php?id=1133

Browse source 
"It should not be possible to assure a blocked account"
This commit is contained in:
Wytze van der Raay 2013-01-17 15:06:35 +00:00
parent 6e05704ded
commit aff3516579
1 changed files with 31 additions and 23 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
www/wot.php
View file

@ -165,6 +165,14 @@ function send_reminder()
exit; exit;
} }
} }
$query = "select * from `users` where `email`='".mysql_escape_string(stripslashes($_POST['email']))."' and `locked`=1";
$res = mysql_query($query);
if(mysql_num_rows($res) >= 1)
{
$_SESSION['_config']['noemailfound'] = 0;
show_page("EnterEmail","",_("This account is locked and can not be assured. For more information ask support@cacert.org."));
exit;
}
} }
if($oldid == 5 || $oldid == 6) if($oldid == 5 || $oldid == 6)