"Wrong information shown when disputing a domain that is part of a organisation account."
This commit is contained in:
Wytze van der Raay 2013-05-14 09:05:11 +00:00
parent a72124049e
commit b07a80b336

View file

@ -319,12 +319,20 @@
} }
unset($oldid); unset($oldid);
$query = "select * from `domains` where `domain`='$domain' and `deleted`=0"; $query = "select * from `domains` where `domain`='$domain' and `deleted`=0";
$email = ""; if(array_key_exists('email',$_REQUEST)) $email=trim(mysql_real_escape_string($_REQUEST['email']));
$res = mysql_query($query); $res = mysql_query($query);
if(mysql_num_rows($res) <= 0) if(mysql_num_rows($res) <= 0)
{ {
$query = "select 1 from `orgdomains` where `domain`='$domain'";
$res = mysql_query($query);
if(mysql_num_rows($res) > 0)
{
showheader(_("Domain Dispute"));
printf(_("The domain '%s' is included in an organisation account. Please send a mail to %s to dispute this domain."), sanitizeHTML($domain),'<a href="mailto:support@cacert.org">support@cacert.org</a>');
showfooter();
exit;
}
showheader(_("Domain Dispute")); showheader(_("Domain Dispute"));
printf(_("The domain '%s' doesn't exist in the system. Can't continue."), sanitizeHTML($email)); printf(_("The domain '%s' doesn't exist in the system. Can't continue."), sanitizeHTML($domain));
showfooter(); showfooter();
exit; exit;
} }