Fix for https://bugs.cacert.org/view.php?id=1133

"It should not be possible to assure a blocked account"

www/wot.php

@@ -165,6 +165,14 @@ function send_reminder()
 				exit;
 			}
 		}
+		$query = "select * from `users` where `email`='".mysql_escape_string(stripslashes($_POST['email']))."' and `locked`=1";
+		$res = mysql_query($query);
+		if(mysql_num_rows($res) >= 1)
+		{
+			$_SESSION['_config']['noemailfound'] = 0;
+			show_page("EnterEmail","",_("This account is locked and can not be assured. For more information ask support@cacert.org."));
+			exit;
+		}
 	}
 
 	if($oldid == 5 || $oldid == 6)