Fix for https://bugs.cacert.org/view.php?id=959

13 years ago · f27e77391e
parent f0c474f5d6
commit f27e77391e
1 changed files with 9 additions and 3 deletions
--- a/www/wot.php
+++ b/www/wot.php
@ -206,9 +206,15 @@
 	if($oldid == 6)
 	{
 		$max =  maxpoints();
-		$awarded = $newpoints = intval($_POST['points']);
-		if($newpoints > $max)
-			$newpoints = $max;
+		
+		if (intval($_POST['points']) > $max) {
+			$awarded = $newpoints = $max;
+		} elseif (intval($_POST['points']) < 0) {
+			$awarded = $newpoints = 0;
+		} else {
+			$awarded = $newpoints = intval($_POST['points']);
+		}
+		
 		$query = "select sum(`points`) as `total` from `notary` where `to`='".$_SESSION['_config']['notarise']['id']."' group by `to`";
 		$res = mysql_query($query);
 		$drow = mysql_fetch_assoc($res);