Fix for https://bugs.cacert.org/view.php?id=959

www/wot.php

@@ -206,9 +206,15 @@
 	if($oldid == 6)
 	{
 		$max =  maxpoints();
-		$awarded = $newpoints = intval($_POST['points']);
+		
-		if($newpoints > $max)
+		if (intval($_POST['points']) > $max) {
-			$newpoints = $max;
+			$awarded = $newpoints = $max;
+		} elseif (intval($_POST['points']) < 0) {
+			$awarded = $newpoints = 0;
+		} else {
+			$awarded = $newpoints = intval($_POST['points']);
+		}
+		
 		$query = "select sum(`points`) as `total` from `notary` where `to`='".$_SESSION['_config']['notarise']['id']."' group by `to`";
 		$res = mysql_query($query);
 		$drow = mysql_fetch_assoc($res);