From fbaac7eee588c268cdd1fcafae041edda3d05897 Mon Sep 17 00:00:00 2001
From: root <root@www.cacert.org>
Date: Tue, 7 Oct 2008 16:47:01 +0000
Subject: [PATCH] Removed leaking of personal details

---
 pages/index/5.php | 11 +++--------
 pages/index/6.php |  2 +-
 2 files changed, 4 insertions(+), 9 deletions(-)

diff --git a/pages/index/5.php b/pages/index/5.php
index 0413a0c..b8234d8 100644
--- a/pages/index/5.php
+++ b/pages/index/5.php
@@ -22,7 +22,7 @@
   </tr>
   <tr>
     <td class="DataTD" width="125"><?=_("Email Address")?>: </td>
-    <td class="DataTD" width="125"><input type="text" name="email" value="<?=array_key_exists('lostpw',$_SESSION)?sanitizeHTML($_SESSION['lostpw']['email']):""?>" autocomplete="off"></td>
+    <td class="DataTD" width="125"><input type="text" name="email" autocomplete="off"></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Date of Birth")?><br>
@@ -31,10 +31,7 @@
 <?
         for($i = 1; $i <= 31; $i++)
         {
-                echo "<option";
-                if(array_key_exists('lostpw',$_SESSION) && $_SESSION['lostpw']['day'] == $i)
-                        echo " selected=\"selected\"";
-                echo ">$i</option>";
+                echo "<option>$i</option>";
         }
 ?>
     </select>
@@ -43,13 +40,11 @@
         for($i = 1; $i <= 12; $i++)
         {
                 echo "<option value='$i'";
-                if(array_key_exists('lostpw',$_SESSION) && $_SESSION['lostpw']['month'] == $i)
-                        echo " selected";
                 echo ">".ucwords(strftime("%B", mktime(0,0,0,$i,1,date("Y"))))."</option>";
         }
 ?>    
     </select>
-    <input type="text" name="year" value="<?=array_key_exists('lostpw',$_SESSION)?sanitizeHTML($_SESSION['lostpw']['year']):""?>" size="4" autocomplete="off"></nobr>
+    <input type="text" name="year" size="4" autocomplete="off"></nobr>
     </td>
   </tr>
   <tr>
diff --git a/pages/index/6.php b/pages/index/6.php
index acf21ab..8eefa44 100644
--- a/pages/index/6.php
+++ b/pages/index/6.php
@@ -76,7 +76,7 @@
 ?>
   <tr>
     <td class="DataTD"><?=$_SESSION['lostpw']['user'][$q]?></td>
-    <td class="DataTD"><input type="text" name="<?=$a?>" value="<?=sanitizeHTML(array_key_exists($a,$_SESSION['lostpw'])?$_SESSION['lostpw'][$a]:"")?>" autocomplete="off">
+    <td class="DataTD"><input type="text" name="<?=$a?>" autocomplete="off">
 	<input type="hidden" name="<?=$q?>" value="<?=sanitizeHTML($_SESSION['lostpw']['user'][$q])?>"></td>
   </tr>
 <? } ?>