"._("Email Address given was invalid, or a test connection couldn't be made to your server, or the server rejected the email address as invalid")."

$checkemail

"._("Email Address given was invalid, or a test connection couldn't be made to your server, or the server rejected the email address as invalid")."

"._("The mail server responsible for your domain indicated a temporary failure. This may be due to anti-SPAM measures, such as greylisting. Please try again in a few minutes.")."

"._("Email Address given was invalid, or a test connection couldn't be made to your server, or the server rejected the email address as invalid")."

$checkemail

\n$cert\n

', _("Failure: Pass Phrase not Changed"), '

', _("Failure: Pass Phrase not Changed"), '

', _("Failure: Pass Phrase not Changed"), '

', _("Failure: Pass Phrase not Changed"), '

', _("Pass Phrase Changed Successfully"), '

"; print_r($_SESSION['_config']); die;

		if($_SESSION['_config']['0.CN'] == "" && $_SESSION['_config']['0.subjectAltName'] == "")
		{
			$id = 20;
			showheader(_("My CAcert.org Account!"));
			echo _("CommonName field was blank. This is usually caused by entering your own name when openssl prompt's you for 'YOUR NAME', or if you try to issue certificates for domains you haven't already verified, as such this process can't continue.");
			showfooter();
			exit;
		}

		$_SESSION['_config']['rootcert'] = intval($_REQUEST['rootcert']);
		if($_SESSION['_config']['rootcert'] < 1 || $_SESSION['_config']['rootcert'] > 2)
			$_SESSION['_config']['rootcert'] = 1;

		$_SESSION['_config']['hash_alg'] = HashAlgorithms::clean($_REQUEST['hash_alg']);
	}

	if($process != "" && $oldid == 21)
	{
		$id = 21;

		if(!file_exists($_SESSION['_config']['tmpfname']))
		{
			showheader(_("My CAcert.org Account!"));
			printf(_("Your certificate request has failed to be processed correctly, see %sthe WIKI page%s for reasons and solutions."), "", "");
			showfooter();
			exit;
		}

		if (($weakKey = checkWeakKeyCSR(file_get_contents(
				$_SESSION['_config']['tmpfname']))) !== "")
		{
			showheader(_("My CAcert.org Account!"));
			echo $weakKey;
			showfooter();
			exit;
		}

		if($_SESSION['_config']['0.CN'] == "" && $_SESSION['_config']['0.subjectAltName'] == "")
		{
			showheader(_("My CAcert.org Account!"));
			echo _("CommonName field was blank. This is usually caused by entering your own name when openssl prompt's you for 'YOUR NAME', or if you try to issue certificates for domains you haven't already verified, as such this process can't continue.");
			showfooter();
			exit;
		}

		if($_SESSION['_config']['rowid']['0'] > 0)
		{
			$query = "select * from `org`,`orginfo` where
					`orginfo`.`id`='".intval($_SESSION['_config']['rowid']['0'])."' and
					`orginfo`.`id`=`org`.`orgid` and
					`org`.`memid`='".intval($_SESSION['profile']['id'])."'";
		} else {
			$query = "select * from `org`,`orginfo` where
					`orginfo`.`id`='".intval($_SESSION['_config']['altid']['0'])."' and
					`orginfo`.`id`=`org`.`orgid` and
					`org`.`memid`='".intval($_SESSION['profile']['id'])."'";
		}
		$org = mysql_fetch_assoc(mysql_query($query));
		$csrsubject = "";

		if($_SESSION['_config']['OU'])
			$csrsubject .= "/organizationalUnitName=".$_SESSION['_config']['OU'];
		if($org['O'])
			$csrsubject .= "/organizationName=".$org['O'];
		if($org['L'])
			$csrsubject .= "/localityName=".$org['L'];
		if($org['ST'])
			$csrsubject .= "/stateOrProvinceName=".$org['ST'];
		if($org['C'])
			$csrsubject .= "/countryName=".$org['C'];
		//if($org['contact'])
		//	$csrsubject .= "/emailAddress=".trim($org['contact']);

		$csrsubject .= buildSubjectFromSession();

		$type=0;
		if($_REQUEST["ocspcert"]!="" && $_SESSION['profile']['admin'] == 1) $type=8;
		if($_SESSION['_config']['rootcert'] < 1 || $_SESSION['_config']['rootcert'] > 2)
			$_SESSION['_config']['rootcert'] = 1;

		if($_SESSION['_config']['rowid']['0'] > 0)
		{
			$query = "insert into `orgdomaincerts` set
					`CN`='".mysql_real_escape_string($_SESSION['_config']['rows']['0'])."',
					`orgid`='".intval($org['id'])."',
					`created`=NOW(),
					`subject`='".mysql_real_escape_string($csrsubject)."',
					`rootcert`='".intval($_SESSION['_config']['rootcert'])."',
					`md`='".mysql_real_escape_string($_SESSION['_config']['hash_alg'])."',
					`type`=$type,
					`description`='".mysql_real_escape_string($_SESSION['_config']['description'])."'";
		} else {
			$query = "insert into `orgdomaincerts` set
					`CN`='".mysql_real_escape_string($_SESSION['_config']['altrows']['0'])."',
					`orgid`='".intval($org['id'])."',
					`created`=NOW(),
					`subject`='".mysql_real_escape_string($csrsubject)."',
					`rootcert`='".intval($_SESSION['_config']['rootcert'])."',
					`md`='".mysql_real_escape_string($_SESSION['_config']['hash_alg'])."',
					`type`=$type,
					`description`='".mysql_real_escape_string($_SESSION['_config']['description'])."'";
		}
		mysql_query($query);
		$CSRid = mysql_insert_id();

		$CSRname=generatecertpath("csr","orgserver",$CSRid);
		rename($_SESSION['_config']['tmpfname'], $CSRname);
		chmod($CSRname,0644);
		mysql_query("update `orgdomaincerts` set `CSR_name`='$CSRname' where `id`='$CSRid'");
		if(is_array($_SESSION['_config']['rowid']))
			foreach($_SESSION['_config']['rowid'] as $id)
				mysql_query("insert into `orgdomlink` set `orgdomid`='".intval($id)."', `orgcertid`='$CSRid'");
		if(is_array($_SESSION['_config']['altid']))
			foreach($_SESSION['_config']['altid'] as $id)
				mysql_query("insert into `orgdomlink` set `orgdomid`='".intval($id)."', `orgcertid`='$CSRid'");
		waitForResult("orgdomaincerts", $CSRid,$oldid);
		$query = "select * from `orgdomaincerts` where `id`='$CSRid' and `crt_name` != ''";
		$res = mysql_query($query);
		if(mysql_num_rows($res) <= 0)
		{
			showheader(_("My CAcert.org Account!"));
			printf(_("Your certificate request has failed to be processed correctly, see %sthe WIKI page%s for reasons and solutions.")." CSRid: $CSRid", "", "");
			showfooter();
			exit;
		} else {
			$id = 23;
			$cert = $CSRid;
			$_REQUEST['cert']=$CSRid;
		}
	}

	if($oldid == 22 && array_key_exists('renew',$_REQUEST) && $_REQUEST['renew'] != "")
	{
		csrf_check('orgsrvcerchange');
		showheader(_("My CAcert.org Account!"));
		if(is_array($_REQUEST['revokeid']))
		{
			echo _("Now renewing the following certificates:")."
\n";
			foreach($_REQUEST['revokeid'] as $id)
			{
				$id = intval($id);
				$query = "select *,UNIX_TIMESTAMP(`orgdomaincerts`.`revoked`) as `revoke` from
						`orgdomaincerts`,`org`
						where `orgdomaincerts`.`id`='$id' and
						`orgdomaincerts`.`orgid`=`org`.`orgid` and
						`org`.`memid`='".intval($_SESSION['profile']['id'])."'";
				$res = mysql_query($query);
				if(mysql_num_rows($res) <= 0)
				{
					printf(_("Invalid ID '%s' presented, can't do anything with it.")."
\n", $id);
					continue;
				}

				$row = mysql_fetch_assoc($res);

				if (($weakKey = checkWeakKeyX509(file_get_contents(
						$row['crt_name']))) !== "")
				{
					echo $weakKey, "
\n";
					continue;
				}

				mysql_query("update `orgdomaincerts` set `renewed`='1' where `id`='$id'");
				if($row['revoke'] > 0)
				{
					printf(_("It would seem '%s' has already been revoked. I'll skip this for now.")."
\n", $row['CN']);
					continue;
				}
				$query = "insert into `orgdomaincerts` set
						`orgid`='".intval($row['orgid'])."',
						`CN`='".mysql_real_escape_string($row['CN'])."',
						`csr_name`='".mysql_real_escape_string($row['csr_name'])."',
						`created`='".mysql_real_escape_string($row['created'])."',
						`modified`=NOW(),
						`subject`='".mysql_real_escape_string($row['subject'])."',
						`type`='".intval($row['type'])."',
						`rootcert`='".intval($row['rootcert'])."',
						`description`='".mysql_real_escape_string($row['description'])."'";
				mysql_query($query);
				$newid = mysql_insert_id();
				//echo "NewID: $newid
\n";
				$newfile=generatecertpath("csr","orgserver",$newid);
				copy($row['csr_name'], $newfile);
				mysql_query("update `orgdomaincerts` set `csr_name`='$newfile' where `id`='$newid'");
				echo _("Renewing").": ".$row['CN']."
\n";
				$res = mysql_query("select * from `orgdomlink` where `orgcertid`='".$row['id']."'");
				while($r2 = mysql_fetch_assoc($res))
					mysql_query("insert into `orgdomlink` set `orgdomid`='".intval($r2['orgdomid'])."', `orgcertid`='$newid'");
				waitForResult("orgdomaincerts", $newid,$oldid,0);
				$query = "select * from `orgdomaincerts` where `id`='$newid' and `crt_name` != ''";
				$res = mysql_query($query);
				if(mysql_num_rows($res) <= 0)
				{
					printf(_("Your certificate request has failed to be processed correctly, see %sthe WIKI page%s for reasons and solutions.")." newid: $newid", "", "");
				} else {
					$drow = mysql_fetch_assoc($res);
					$crtname = escapeshellarg($drow['crt_name']);
					$cert = shell_exec("/usr/bin/openssl x509 -in $crtname");
					echo "
\n$cert\n
\n";
				}
			}
		}
		else
		{
			echo _("You did not select any certificates for renewal.");
		}
		showfooter();
		exit;
	}

	if($oldid == 22 && array_key_exists('revoke',$_REQUEST) && $_REQUEST['revoke'] != "")
	{
		csrf_check('orgsrvcerchange');
		showheader(_("My CAcert.org Account!"));
		if(is_array($_REQUEST['revokeid']))
		{
			echo _("Now revoking the following certificates:")."
\n";
			foreach($_REQUEST['revokeid'] as $id)
			{
				$id = intval($id);
				$query = "select *,UNIX_TIMESTAMP(`orgdomaincerts`.`revoked`) as `revoke` from
						`orgdomaincerts`,`org`
						where `orgdomaincerts`.`id`='$id' and
						`orgdomaincerts`.`orgid`=`org`.`orgid` and
						`org`.`memid`='".intval($_SESSION['profile']['id'])."'";
				$res = mysql_query($query);
				if(mysql_num_rows($res) <= 0)
				{
					printf(_("Invalid ID '%s' presented, can't do anything with it.")."
\n", $id);
					continue;
				}
				$row = mysql_fetch_assoc($res);
				if($row['revoke'] > 0)
				{
					printf(_("It would seem '%s' has already been revoked. I'll skip this for now.")."
\n", $row['CN']);
					continue;
				}
				mysql_query("update `orgdomaincerts` set `revoked`='1970-01-01 10:00:01' where `id`='$id'");
				printf(_("Certificate for '%s' with the serial no '%s' has been revoked.").'
', htmlspecialchars($row['CN']), htmlspecialchars($row['serial']));
			}

			// TRANSLATORS: Please don't translate "Certificate Revocation List (CRL)", it's a technical term
			echo '
'._('All listed certificates will be added to the Certificate Revocation List (CRL) soon.').'
';
		}
		else
		{
			echo _("You did not select any certificates for revocation.");
		}

		if(array_key_exists('delid',$_REQUEST) && is_array($_REQUEST['delid']))
		{
			echo _("Now deleting the following pending requests:")."
\n";
			foreach($_REQUEST['delid'] as $id)
			{
				$id = intval($id);
				$query = "select *,UNIX_TIMESTAMP(`orgdomaincerts`.`expire`) as `expired` from
						`orgdomaincerts`,`org`
						where `orgdomaincerts`.`id`='$id' and
						`orgdomaincerts`.`orgid`=`org`.`orgid` and
						`org`.`memid`='".intval($_SESSION['profile']['id'])."'";
				$res = mysql_query($query);
				if(mysql_num_rows($res) <= 0)
				{
					printf(_("Invalid ID '%s' presented, can't do anything with it.")."
\n", $id);
					continue;
				}
				$row = mysql_fetch_assoc($res);
				if($row['expired'] > 0)
				{
					printf(_("Couldn't remove the request for `%s`, request had already been processed.")."
\n", $row['CN']);
					continue;
				}
				mysql_query("delete from `orgdomaincerts` where `id`='$id'");
				@unlink($row['csr_name']);
				@unlink($row['crt_name']);
				printf(_("Removed a pending request for '%s'")."
\n", $row['CN']);
			}
		}
		showfooter();
		exit;
	}

	if($oldid == 22 && array_key_exists('change',$_REQUEST) && $_REQUEST['change'] != "")
	{
		showheader(_("My CAcert.org Account!"));
		foreach($_REQUEST as $id => $val)
		{
			if(substr($id,0,14)=="check_comment_")
			{
				$cid = intval(substr($id,14));
				$comment=trim(mysql_real_escape_string(stripslashes($_REQUEST['comment_'.$cid])));
				mysql_query("update `orgdomaincerts` set `description`='$comment' where `id`='$cid'");
			}
		}
		echo(_("Certificate settings have been changed.")."
\n");
		showfooter();
		exit;
	}

	if($oldid == 22 && array_key_exists('filter',$_REQUEST) && $_REQUEST['filter']!= "")
	{
		$id=22;
		$_SESSION['_config']['dorgfilterid']=$_REQUEST['dorgfilterid'];
		$_SESSION['_config']['dsorting']=$_REQUEST['dsorting'];
		$_SESSION['_config']['dstatus']=$_REQUEST['dstatus'];
	}

	if($oldid == 22 && array_key_exists('reset',$_REQUEST) && $_REQUEST['reset']!= "")
	{
		$id=22;
		$_SESSION['_config']['dorgfilterid']=0;
		$_SESSION['_config']['dsorting']=0;
		$_SESSION['_config']['dstatus']=0;
	}


	if(($id == 24 || $oldid == 24 || $id == 25 || $oldid == 25 || $id == 26 || $oldid == 26 ||
		$id == 27 || $oldid == 27 || $id == 28 || $oldid == 28 || $id == 29 || $oldid == 29 ||
		$id == 30 || $oldid == 30 || $id == 31 || $oldid == 31) &&
		$_SESSION['profile']['orgadmin'] != 1)
	{
		showheader(_("My CAcert.org Account!"));
		echo _("You don't have access to this area.");
		showfooter();
		exit;
	}

	if($oldid == 24 && $process != "")
	{
		$id = intval($oldid);
		$_SESSION['_config']['O'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['O'])));
		$_SESSION['_config']['contact'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['contact'])));
		$_SESSION['_config']['L'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['L'])));
		$_SESSION['_config']['ST'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['ST'])));
		$_SESSION['_config']['C'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['C'])));
		$_SESSION['_config']['comments'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['comments'])));

		if($_SESSION['_config']['O'] == "" || $_SESSION['_config']['contact'] == "")
		{
			$_SESSION['_config']['errmsg'] = _("Organisation Name and Contact Email are required fields.");
		} else {
			mysql_query("insert into `orginfo` set `O`='".$_SESSION['_config']['O']."',
						`contact`='".$_SESSION['_config']['contact']."',
						`L`='".$_SESSION['_config']['L']."',
						`ST`='".$_SESSION['_config']['ST']."',
						`C`='".$_SESSION['_config']['C']."',
						`comments`='".$_SESSION['_config']['comments']."'");
			showheader(_("My CAcert.org Account!"));
			printf(_("'%s' has just been successfully added as an organisation to the database."), sanitizeHTML($_SESSION['_config']['O']));
			showfooter();
			exit;
		}
	}

	if($oldid == 27 && $process != "")
	{
		csrf_check('orgdetchange');
		$id = intval($oldid);
		$_SESSION['_config']['O'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['O'])));
		$_SESSION['_config']['contact'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['contact'])));
		$_SESSION['_config']['L'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['L'])));
		$_SESSION['_config']['ST'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['ST'])));
		$_SESSION['_config']['C'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['C'])));
		$_SESSION['_config']['comments'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['comments'])));

		if($_SESSION['_config']['O'] == "" || $_SESSION['_config']['contact'] == "")
		{
			$_SESSION['_config']['errmsg'] = _("Organisation Name and Contact Email are required fields.");
		} else {
			mysql_query("update `orginfo` set `O`='".$_SESSION['_config']['O']."',
						`contact`='".$_SESSION['_config']['contact']."',
						`L`='".$_SESSION['_config']['L']."',
						`ST`='".$_SESSION['_config']['ST']."',
						`C`='".$_SESSION['_config']['C']."',
						`comments`='".$_SESSION['_config']['comments']."'
					where `id`='".intval($_SESSION['_config']['orgid'])."'");
			showheader(_("My CAcert.org Account!"));
			printf(_("'%s' has just been successfully updated in the database."), sanitizeHTML($_SESSION['_config']['O']));
			showfooter();
			exit;
		}
	}

	if($oldid == 28 && $process != "" && array_key_exists("domainname",$_REQUEST))
	{
		$domain = $_SESSION['_config']['domain'] = trim(mysql_real_escape_string(stripslashes($_REQUEST['domainname'])));
		$res1 = mysql_query("select * from `orgdomains` where `domain`='$domain'");
		if(mysql_num_rows($res1) > 0)
		{
			$_SESSION['_config']['errmsg'] = sprintf(_("The domain '%s' is already in a different account and is listed as valid. Can't continue."), sanitizeHTML($domain));
			$id = $oldid;
			$oldid=0;
		}
	}

	if($oldid == 28 && $_SESSION['_config']['orgid'] <= 0)
	{
		$oldid=0;
		$id = 25;
	}

	if($oldid == 28 && $process != "" && array_key_exists("orgid",$_SESSION["_config"]))
	{
		mysql_query("insert into `orgdomains` set `orgid`='".intval($_SESSION['_config']['orgid'])."', `domain`='$domain'");
		showheader(_("My CAcert.org Account!"));
		printf(_("'%s' has just been successfully added to the database."), sanitizeHTML($domain));
		echo "

"._("Click here")." "._("to continue.");
		showfooter();
		exit;
	}

	if($oldid == 29 && $process != "")
	{
		$domain = mysql_real_escape_string(stripslashes(trim($_REQUEST['domainname'])));

		$res1 = mysql_query("select * from `orgdomains` where `domain` like '$domain' and `id`!='".intval($domid)."'");
		$res2 = mysql_query("select * from `domains` where `domain` like '$domain' and `deleted`=0");
		if(mysql_num_rows($res1) > 0 || mysql_num_rows($res2) > 0)
		{
			$_SESSION['_config']['errmsg'] = sprintf(_("The domain '%s' is already in a different account and is listed as valid. Can't continue."), sanitizeHTML($domain));
			$id = $oldid;
			$oldid=0;
		}
	}

	if(($oldid == 29 || $oldid == 30) && $process != "")      // _("Cancel") is handled in front of account.php
	{
		$query = "select `orgdomaincerts`.`id` as `id` from `orgdomlink`, `orgdomaincerts`, `orgdomains` where
				`orgdomlink`.`orgdomid`=`orgdomains`.`id` and
				`orgdomaincerts`.`id`=`orgdomlink`.`orgcertid` and
				`orgdomains`.`id`='".intval($domid)."'";
		$res = mysql_query($query);
		while($row = mysql_fetch_assoc($res))
			mysql_query("update `orgdomaincerts` set `revoked`='1970-01-01 10:00:01' where `id`='".$row['id']."'");

		$query = "select `orgemailcerts`.`id` as `id` from `orgemailcerts`, `orgemaillink`, `orgdomains` where
				`orgemaillink`.`domid`=`orgdomains`.`id` and
				`orgemailcerts`.`id`=`orgemaillink`.`emailcertsid` and
				`orgdomains`.`id`='".intval($domid)."'";
		$res = mysql_query($query);
		while($row = mysql_fetch_assoc($res))
			mysql_query("update `orgemailcerts` set `revoked`='1970-01-01 10:00:01' where `id`='".intval($row['id'])."'");
	}

	if($oldid == 29 && $process != "")
	{
		$row = mysql_fetch_assoc(mysql_query("select * from `orgdomains` where `id`='".intval($domid)."'"));
		mysql_query("update `orgdomains` set `domain`='$domain' where `id`='".intval($domid)."'");
		showheader(_("My CAcert.org Account!"));
		printf(_("'%s' has just been successfully updated in the database."), sanitizeHTML($domain));
		echo "

"._("Click here")." "._("to continue.");
		showfooter();
		exit;
	}

	if($oldid == 30 && $process != "")
	{
		$row = mysql_fetch_assoc(mysql_query("select * from `orgdomains` where `id`='".intval($domid)."'"));
		$domain = $row['domain'];
		mysql_query("delete from `orgdomains` where `id`='".intval($domid)."'");
		showheader(_("My CAcert.org Account!"));
		printf(_("'%s' has just been successfully deleted from the database."), sanitizeHTML($domain));
		echo "

"._("Click here")." "._("to continue.");
		showfooter();
		exit;
	}

	if($oldid == 30)
	{
		$id = 26;
		$orgid = 0;
	}

	if($oldid == 31 && $process != "")
	{
		$query = "select * from `orgdomains` where `orgid`='".intval($_SESSION['_config']['orgid'])."'";
		$dres = mysql_query($query);
		while($drow = mysql_fetch_assoc($dres))
		{
			$query = "select `orgdomaincerts`.`id` as `id` from `orgdomlink`, `orgdomaincerts`, `orgdomains` where
					`orgdomlink`.`orgdomid`=`orgdomains`.`id` and
					`orgdomaincerts`.`id`=`orgdomlink`.`orgcertid` and
					`orgdomains`.`id`='".intval($drow['id'])."'";
			$res = mysql_query($query);
			while($row = mysql_fetch_assoc($res))
			{
				mysql_query("update `orgdomaincerts` set `revoked`='1970-01-01 10:00:01' where `id`='".intval($row['id'])."'");
				mysql_query("delete from `orgdomaincerts` where `orgid`='".intval($row['id'])."'");
				mysql_query("delete from `orgdomlink` where `domid`='".intval($row['id'])."'");
			}

			$query = "select `orgemailcerts`.`id` as `id` from `orgemailcerts`, `orgemaillink`, `orgdomains` where
					`orgemaillink`.`domid`=`orgdomains`.`id` and
					`orgemailcerts`.`id`=`orgemaillink`.`emailcertsid` and
					`orgdomains`.`id`='".intval($drow['id'])."'";
			$res = mysql_query($query);
			while($row = mysql_fetch_assoc($res))
			{
				mysql_query("update `orgemailcerts` set `revoked`='1970-01-01 10:00:01' where `id`='".intval($row['id'])."'");
				mysql_query("delete from `orgemailcerts` where `id`='".intval($row['id'])."'");
				mysql_query("delete from `orgemaillink` where `domid`='".intval($row['id'])."'");
			}
		}
		mysql_query("delete from `org` where `orgid`='".intval($_SESSION['_config']['orgid'])."'");
		mysql_query("delete from `orgdomains` where `orgid`='".intval($_SESSION['_config']['orgid'])."'");
		mysql_query("delete from `orginfo` where `id`='".intval($_SESSION['_config']['orgid'])."'");
	}

	if($oldid == 31)
	{
		$id = 25;
		$orgid = 0;
	}

	if($id == 32 || $oldid == 32 || $id == 33 || $oldid == 33 || $id == 34 || $oldid == 34)
	{
		$query = "select * from `org` where `memid`='".intval($_SESSION['profile']['id'])."' and `masteracc`='1'";
		$_macc = mysql_num_rows(mysql_query($query));
		if($_SESSION['profile']['orgadmin'] != 1 && $_macc <= 0)
		{
			showheader(_("My CAcert.org Account!"));
			echo _("You don't have access to this area.");
			showfooter();
			exit;
		}
	}

	if($id == 35 || $oldid == 35)
	{
		$query = "select 1 from `org` where `memid`='".intval($_SESSION['profile']['id'])."'";
		$is_orguser = mysql_num_rows(mysql_query($query));
		if($_SESSION['profile']['orgadmin'] != 1 && $is_orguser <= 0)
		{
			showheader(_("My CAcert.org Account!"));
			echo _("You don't have access to this area.");
			showfooter();
			exit;
		}
	}

	if($id == 33 && $_SESSION['profile']['orgadmin'] != 1)
	{
		$orgid = intval($_SESSION['_config']['orgid']);
		$query = "select * from `org` where `orgid`='$orgid' and `memid`='".intval($_SESSION['profile']['id'])."' and `masteracc`='1'";
		$res = mysql_query($query);
		if(mysql_num_rows($res) <= 0)
		{
			$id = 35;
		}
	}

	if($oldid == 33 && $process != "")
	{
		csrf_check('orgadmadd');
		if($_SESSION['profile']['orgadmin'] == 1)
			$masteracc = $_SESSION['_config']['masteracc'] = intval($_REQUEST['masteracc']);
		else
			$masteracc = $_SESSION['_config']['masteracc'] = 0;
		$_REQUEST['email'] = $_SESSION['_config']['email'] = mysql_real_escape_string(stripslashes(trim($_REQUEST['email'])));
		$_SESSION['_config']['OU'] = stripslashes(trim($_REQUEST['OU']));
		$comments = $_SESSION['_config']['comments'] = mysql_real_escape_string(stripslashes(trim($_REQUEST['comments'])));
		$res = mysql_query("select * from `users` where `email`='".$_REQUEST['email']."' and `deleted`=0");
		if(mysql_num_rows($res) <= 0)
		{
			$id = $oldid;
			$oldid=0;
			$_SESSION['_config']['errmsg'] = sprintf(_("Wasn't able to match '%s' against any user in the system"), sanitizeHTML($_REQUEST['email']));
		} else {
			$row = mysql_fetch_assoc($res);
			if ( !is_assurer(intval($row['id'])) )
			{
				$id = $oldid;
				$oldid=0;
				$_SESSION['_config']['errmsg'] =
						_("The user is not an Assurer yet");
			} else {
				mysql_query(
					"insert into `org`
						set `memid`='".intval($row['id'])."',
							`orgid`='".intval($_SESSION['_config']['orgid'])."',
							`masteracc`='$masteracc',
							`OU`='".mysql_real_escape_string($_SESSION['_config']['OU'])."',
							`comments`='$comments'");
			}
		}
	}

	if(($oldid == 34 || $id == 34) && $_SESSION['profile']['orgadmin'] != 1)
	{
		$orgid = intval($_SESSION['_config']['orgid']);
		$res = mysql_query("select * from `org` where `orgid`='$orgid' and `memid`='".intval($_SESSION['profile']['id'])."' and `masteracc`='1'");
		if(mysql_num_rows($res) <= 0)
			$id = 32;
	}

	if($oldid == 34 && $process != "")
	{
		$orgid = intval($_SESSION['_config']['orgid']);
		$memid = intval($_REQUEST['memid']);
		$query = "delete from `org` where `orgid`='$orgid' and `memid`='$memid'";
		mysql_query($query);
	}

	if($oldid == 34 || $oldid == 33)
	{
		$oldid=0;
		$id = 32;
		$orgid = 0;
	}

	if($id == 36)
	{
		$row = mysql_fetch_assoc(mysql_query("select * from `alerts` where `memid`='".intval($_SESSION['profile']['id'])."'"));
		$_REQUEST['general'] = $row['general'];
		$_REQUEST['country'] = $row['country'];
		$_REQUEST['regional'] = $row['regional'];
		$_REQUEST['radius'] = $row['radius'];
	}

	if($oldid == 36)
	{
		$rc = mysql_num_rows(mysql_query("select * from `alerts` where `memid`='".intval($_SESSION['profile']['id'])."'"));
		if($rc > 0)
		{
			$query = "update `alerts` set `general`='".intval(array_key_exists('general',$_REQUEST)?$_REQUEST['general']:0)."',
							`country`='".intval(array_key_exists('country',$_REQUEST)?$_REQUEST['country']:0)."',
							`regional`='".intval(array_key_exists('regional',$_REQUEST)?$_REQUEST['regional']:0)."',
							`radius`='".intval(array_key_exists('radius',$_REQUEST)?$_REQUEST['radius']:0)."'
					where `memid`='".intval($_SESSION['profile']['id'])."'";
		} else {
			$query = "insert into `alerts` set `general`='".intval(array_key_exists('general',$_REQUEST)?$_REQUEST['general']:0)."',
							`country`='".intval(array_key_exists('country',$_REQUEST)?$_REQUEST['country']:0)."',
							`regional`='".intval(array_key_exists('regional',$_REQUEST)?$_REQUEST['regional']:0)."',
							`radius`='".intval(array_key_exists('radius',$_REQUEST)?$_REQUEST['radius']:0)."',
							`memid`='".intval($_SESSION['profile']['id'])."'";
		}
		mysql_query($query);
		$id = $oldid;
		$oldid=0;
	}

	if($oldid == 41 && $_REQUEST['action'] == 'default')
	{
		csrf_check("mainlang");
		$lang = mysql_real_escape_string($_REQUEST['lang']);
		foreach(L10n::$translations as $key => $val)
		{
			if($key == $lang)
			{
				mysql_query("update `users` set `language`='$lang' where `id`='".intval($_SESSION['profile']['id'])."'");
				$_SESSION['profile']['language'] = $lang;
				showheader(_("My CAcert.org Account!"));
				echo _("Your language setting has been updated.");
				showfooter();
				exit;
			}
		}

		showheader(_("My CAcert.org Account!"));
		echo _("You tried to use an invalid language.");
		showfooter();
		exit;
	}

	if($oldid == 41 && $_REQUEST['action'] == 'addsec')
	{
		csrf_check("seclang");
		$addlang = mysql_real_escape_string($_REQUEST['addlang']);
		// Does the language exist?
		mysql_query("insert into `addlang` set `userid`='".intval($_SESSION['profile']['id'])."', `lang`='$addlang'");
		showheader(_("My CAcert.org Account!"));
		echo _("Your language setting has been updated.");
		showfooter();
		exit;
	}

	if($oldid == 41 && $_REQUEST['action'] == 'dellang')
	{
		csrf_check("seclang");
		$remove = mysql_real_escape_string($_REQUEST['remove']);
		mysql_query("delete from `addlang` where `userid`='".intval($_SESSION['profile']['id'])."' and `lang`='$remove'");
		showheader(_("My CAcert.org Account!"));
		echo _("Your language setting has been updated.");
		showfooter();
		exit;
	}

	if(($id == 42 || $id == 43 || $id == 44 || $id == 48 || $id == 49 || $id == 50 ||
		$oldid == 42 || $oldid == 43 || $oldid == 44 || $oldid == 48 || $oldid == 49 || $oldid == 50) &&
		$_SESSION['profile']['admin'] != 1)
	{
		showheader(_("My CAcert.org Account!"));
		echo _("You don't have access to this area.");
		showfooter();
		exit;
	}

	if(($id == 53 || $id == 54 || $oldid == 53 || $oldid == 54) &&
		$_SESSION['profile']['locadmin'] != 1)
	{
		showheader(_("My CAcert.org Account!"));
		echo _("You don't have access to this area.");
		showfooter();
		exit;
	}

	if($oldid == 54 || ($id == 53 && array_key_exists('action',$_REQUEST) && $_REQUEST['action'] != "") ||
			($id == 54 && array_key_exists('action',$_REQUEST) && $_REQUEST['action'] != "" &&
			$_REQUEST['action'] != "aliases" && $_REQUEST['action'] != "edit" && $_REQUEST['action'] != "add"))
	{
		$id = 53;
		$ccid = intval(array_key_exists('ccid',$_REQUEST)?$_REQUEST['ccid']:0);
		$regid = intval(array_key_exists('regid',$_REQUEST)?$_REQUEST['regid']:0);
		$newreg = intval(array_key_exists('newreg',$_REQUEST)?$_REQUEST['newreg']:0);
		$locid = intval(array_key_exists('locid',$_REQUEST)?$_REQUEST['locid']:0);
		$name = array_key_exists('name',$_REQUEST)?mysql_real_escape_string(strip_tags($_REQUEST['name'])):"";
		$long = array_key_exists('longitude',$_REQUEST)?ereg_replace("[^-0-9\.]","",$_REQUEST['longitude']):"";
		$lat = array_key_exists('latitude', $_REQUEST)?ereg_replace("[^-0-9\.]","",$_REQUEST['latitude']):"";
		$action = array_key_exists('action',$_REQUEST)?$_REQUEST['action']:"";

		if($locid > 0 && $action == "edit")
		{
			$query = "update `locations` set `name`='$name', `lat`='$lat', `long`='$long' where `id`='$locid'";
			mysql_query($query);
			$row = mysql_fetch_assoc(mysql_query("select * from `locations` where `id`='$locid'"));
			$_REQUEST['regid'] = $row['regid'];
			unset($_REQUEST['ccid']);
			unset($_REQUEST['locid']);
			unset($_REQUEST['action']);
		} else if($regid > 0 && $action == "edit") {
			$query = "update `regions` set `name`='$name' where `id`='$regid'";
			mysql_query($query);
			$row = mysql_fetch_assoc(mysql_query("select * from `regions` where `id`='$regid'"));
			$_REQUEST['ccid'] = $row['ccid'];
			unset($_REQUEST['regid']);
			unset($_REQUEST['locid']);
			unset($_REQUEST['action']);
		} else if($regid > 0 && $action == "add") {
			$row = mysql_fetch_assoc(mysql_query("select `ccid` from `regions` where `id`='$regid'"));
			$ccid = $row['ccid'];
			$query = "insert into `locations` set `ccid`='$ccid', `regid`='$regid', `name`='$name', `lat`='$lat', `long`='$long'";
			mysql_query($query);
			unset($_REQUEST['ccid']);
			unset($_REQUEST['locid']);
			unset($_REQUEST['action']);
		} else if($ccid > 0 && $action == "add" && $name != "") {
			$query = "insert into `regions` set `ccid`='$ccid', `name`='$name'";
			mysql_query($query);
			$row = mysql_fetch_assoc(mysql_query("select * from `locations` where `id`='$locid'"));
			unset($_REQUEST['regid']);
			unset($_REQUEST['locid']);
			unset($_REQUEST['action']);
		} else if($locid > 0 && $action == "delete") {
			$row = mysql_fetch_assoc(mysql_query("select * from `locations` where `id`='$locid'"));
			$_REQUEST['regid'] = $row['regid'];
			mysql_query("delete from `localias` where `locid`='$locid'");
			mysql_query("delete from `locations` where `id`='$locid'");
			unset($_REQUEST['ccid']);
			unset($_REQUEST['locid']);
			unset($_REQUEST['action']);
		} else if($locid > 0 && $action == "move") {
			$row = mysql_fetch_assoc(mysql_query("select * from `locations` where `id`='$locid'"));
			$oldregid = $row['regid'];
			mysql_query("update `locations` set `regid`='$newreg' where `id`='$locid'");
			mysql_query("update `users` set `regid`='$newreg' where `regid`='$oldregid'");
			$row = mysql_fetch_assoc(mysql_query("select * from `locations` where `id`='$locid'"));
			$_REQUEST['regid'] = $row['regid'];
			unset($_REQUEST['ccid']);
			unset($_REQUEST['locid']);
			unset($_REQUEST['action']);
		} else if($regid > 0 && $action == "delete") {
			$row = mysql_fetch_assoc(mysql_query("select * from `regions` where `id`='$regid'"));
			$_REQUEST['ccid'] = $row['ccid'];
			mysql_query("delete from `locations` where `regid`='$regid'");
			mysql_query("delete from `regions` where `id`='$regid'");
			unset($_REQUEST['regid']);
			unset($_REQUEST['locid']);
			unset($_REQUEST['action']);
		} else if($locid > 0 && $action == "alias") {
			$id = 54;
			$_REQUEST['action'] = "aliases";
			$_REQUEST['locid'] = $locid;
			$name = htmlentities($name);
			$row = mysql_query("insert into `localias` set `locid`='$locid',`name`='$name'");
		} else if($locid > 0 && $action == "delalias") {
			$id = 54;
			$_REQUEST['action'] = "aliases";
			$_REQUEST['locid'] = $locid;
			$row = mysql_query("delete from `localias` where `locid`='$locid' and `name`='$name'");
		}
	}

	if($oldid == 42 && $_REQUEST['email'] == "")
	{
		$id = $oldid;
		$oldid=0;
	}

	if($oldid == 42)
	{
		$id = 43;
		$oldid=0;
	}

	//check if ticket number was entered
	if ( $id == 43 || $oldid == 43 || $id == 44 || $oldid == 44 ) {
		if ($ticketno != "" ) {
			$ticketno = trim($_REQUEST['ticketno']);
			$ticketvalidation = valid_ticket_number($ticketno);
		}

		$_SESSION['ticketno'] = $ticketno;
	}

	if($oldid == 43 && $actionrequest == "updatedob" && $ticketvalidation == TRUE)
	{
		$id = 43;
		$oldid=0;
		$userid = intval($_REQUEST['userid']);
		if (!write_se_log($userid, $_SESSION['profile']['id'],'SE Name/DOB Change',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$fname = mysql_real_escape_string($_REQUEST['fname']);
		$mname = mysql_real_escape_string($_REQUEST['mname']);
		$lname = mysql_real_escape_string($_REQUEST['lname']);
		$suffix = mysql_real_escape_string($_REQUEST['suffix']);
		$day = intval($_REQUEST['day']);
		$month = intval($_REQUEST['month']);
		$year = intval($_REQUEST['year']);
		$query = "update `users` set `fname`='$fname',`mname`='$mname',`lname`='$lname',`suffix`='$suffix',`dob`='$year-$month-$day' where `id`='$userid'";
		mysql_query($query);
	}elseif($oldid == 43 && $actionrequest == "updatedob" && $ticketvalidation == FALSE){
		$id = 43;
		$oldid=0;
		$_SESSION['ticketmsg']='No action (name/dob change) taken. Ticket number is missing!';
	}

	if($oldid == 43 && $actionrequest == 'revokecert' && $ticketvalidation == TRUE)
	{
		$userid = intval($_REQUEST['userid']);
		if (!write_se_log($userid, $_SESSION['profile']['id'], 'SE Revoke all certificates',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		revoke_all_private_cert($userid);
		$id=43;
	}elseif($oldid == 43 && $actionrequest == "revokecert" && $ticketvalidation == FALSE){
		$id = 43;
		$oldid=0;
		$_SESSION['ticketmsg']='No certificates revokes. Ticket number is missing!';
	}

	if($oldid == 48 && $_REQUEST['domain'] == "")
	{
		$id = $oldid;
		$oldid=0;
	}

	if($oldid == 48)
	{
		$id = 49;
		$oldid=0;
	}

	if($id == 44)
	{
		$_REQUEST['userid'] = intval($_REQUEST['userid']);
		$row = mysql_fetch_assoc(mysql_query("select * from `users` where `id`='".intval($_REQUEST['userid'])."'"));
		if($row['email'] == "")
			$id = 42;
		else
			$_REQUEST['email'] = $row['email'];
	}

	if($oldid == 44 && $ticketvalidation == TRUE)
	{
		showheader(_("My CAcert.org Account!"));
		if(intval($_REQUEST['userid']) <= 0)
		{
			echo _("No such user found.");
		} else {
			if (!write_se_log(intval($_REQUEST['userid']), $_SESSION['profile']['id'],'SE reset password',$ticketno)) {
				showheader(_("Something went wrong"));
				echo _("Writing to the admin log failed. Can't continue.");
				showfooter();
				exit;
			}
			mysql_query("update `users` set `password`=sha1('".mysql_real_escape_string(stripslashes($_REQUEST['newpass']))."') where `id`='".intval($_REQUEST['userid'])."'");
			$row = mysql_fetch_assoc(mysql_query("select * from `users` where `id`='".intval($_REQUEST['userid'])."'"));
			printf(_("The password for %s has been updated successfully in the system."), sanitizeHTML($row['email']));

		$my_translation = L10n::get_translation();
		L10n::set_recipient_language(intval($_REQUEST['userid']));
			$body  = sprintf(_("Hi %s,"),$row['fname'])."\n\n";
			$body .= _("You are receiving this email because a CAcert administrator ".
					"has changed the password on your account.")."\n\n";

			$body .= _("Best regards")."\n"._("CAcert.org Support!");

			sendmail($row['email'], "[CAcert.org] "._("Password Update Notification"), $body,
						"support@cacert.org", "", "", "CAcert Support");
		L10n::set_translation($my_translation);
		}

		showfooter();
		exit;
	}elseif($oldid == 44 && $ticketvalidation == FALSE){
		$_SESSION['ticketmsg']='No password reset taken. Ticket number is missing!';
	}


	if($process != "" && $oldid == 45)
	{
		$CSR = clean_csr($CSR);
		$_SESSION['_config']['CSR'] = $CSR;
		runCommand("/usr/bin/openssl req -text -noout|tr -d \"\\0\"|grep \"Subject:\"", $CSR, $CSRSubjects);
		runCommand("/usr/bin/openssl req -text -noout|tr -d \"\\0\"|grep -A1 'X509v3 Subject Alternative Name:'|grep DNS:", $CSR, $CSRAlts);
		$_SESSION['_config']['subject'] = trim($CSRSubjects);
		$bits = explode(",", trim($CSRAlts));
		foreach($bits as $val)
		{
			$_SESSION['_config']['subject'] .= "/subjectAltName=".trim($val);
		}
		$id = 46;

		$_SESSION['_config']['0.CN'] = $_SESSION['_config']['0.subjectAltName'] = "";
		extractit();
		getcn();
		getalt();

		if($_SESSION['_config']['0.CN'] == "" && $_SESSION['_config']['0.subjectAltName'] == "")
		{
			showheader(_("My CAcert.org Account!"));
			echo _("CommonName field was blank. This is usually caused by entering your own name when openssl prompt's you for 'YOUR NAME', or if you try to issue certificates for domains you haven't already verified, as such this process can't continue.");
			showfooter();
			exit;
		}
	}

	if($process != "" && $oldid == 46)
	{
		$CSR = clean_csr($_SESSION['_config']['CSR']);
		runCommand("/usr/bin/openssl req -text -noout|tr -d \"\\0\"|grep \"Subject:\"", $CSR, $CSRSubjects);
		runCommand("/usr/bin/openssl req -text -noout|tr -d \"\\0\"|grep -A1 'X509v3 Subject Alternative Name:'|grep DNS:", $CSR, $CSRAlts);

		$_SESSION['_config']['subject'] = trim($CSRSubjects);
		$bits = explode(",", trim($CSRAlts));
		foreach($bits as $val)
		{
			$_SESSION['_config']['subject'] .= "/subjectAltName=".trim($val);
		}
		$id = 11;

		$_SESSION['_config']['0.CN'] = $_SESSION['_config']['0.subjectAltName'] = "";
		extractit();
		getcn();
		getalt();

		if($_SESSION['_config']['0.CN'] == "" && $_SESSION['_config']['0.subjectAltName'] == "")
		{
			showheader(_("My CAcert.org Account!"));
			echo _("CommonName field was blank. This is usually caused by entering your own name when openssl prompt's you for 'YOUR NAME', or if you try to issue certificates for domains you haven't already verified, as such this process can't continue.");
			showfooter();
			exit;
		}

		if (($weakKey = checkWeakKeyCSR($CSR)) !== "")
		{
			showheader(_("My CAcert.org Account!"));
			echo $weakKey;
			showfooter();
			exit;
		}

		$query = "insert into `domaincerts` set
						`CN`='".$_SESSION['_config']['0.CN']."',
						`domid`='".$_SESSION['_config']['row']['id']."',
						`created`=NOW()";
		mysql_query($query);
		$CSRid = mysql_insert_id();

		foreach($_SESSION['_config']['rowid'] as $dom)
			mysql_query("insert into `domlink` set `certid`='$CSRid', `domid`='".intval($dom)."'");
		if(is_array($_SESSION['_config']['altid']))
		foreach($_SESSION['_config']['altid'] as $dom)
			mysql_query("insert into `domlink` set `certid`='$CSRid', `domid`='".intval($dom)."'");

		$CSRname=generatecertpath("csr","server",$CSRid);
		$fp = fopen($CSRname, "w");
		fputs($fp, $_SESSION['_config']['CSR']);
		fclose($fp);
		mysql_query("update `domaincerts` set `CSR_name`='$CSRname' where `id`='$CSRid'");
		waitForResult("domaincerts", $CSRid,$oldid);
		$query = "select * from `domaincerts` where `id`='$CSRid' and `crt_name` != ''";
		$res = mysql_query($query);
		if(mysql_num_rows($res) <= 0)
		{
			showheader(_("My CAcert.org Account!"));
			printf(_("Your certificate request has failed to be processed correctly, see %sthe WIKI page%s for reasons and solutions."), "", "");
			showfooter();
			exit;
		} else {
			$id = 47;
			$cert = $CSRid;
			$_REQUEST['cert']=$CSRid;
		}
	}

	/* presently not needed
	if($id == 43 && array_key_exists('tverify',$_REQUEST) && $_REQUEST['tverify'] > 0 && $ticketvalidation==TRUE)
	{
		$memid = $_REQUEST['userid'] = intval($_REQUEST['tverify']);
		if (!write_se_log($memid, $_SESSION['profile']['id'],'SE Change tverify status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `users` where `id`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = !$row['tverify'];
		mysql_query("update `users` set `tverify`='$ver' where `id`='$memid'");
	}elseif($id == 43 && array_key_exists('tverify',$_REQUEST) && $_REQUEST['tverify'] > 0 && $ticketvalidation==FALSE){
		$_SESSION['ticketmsg']='No action taken. Ticket number is missing!';
	}
	*/

	if($id == 43 && array_key_exists('assurer',$_REQUEST) && $_REQUEST['assurer'] > 0 && $ticketvalidation == TRUE)
	{
		csrf_check('admsetassuret');
		$memid = $_REQUEST['userid'] = intval($_REQUEST['assurer']);
		if (!write_se_log($memid, $_SESSION['profile']['id'],'SE Change assurer status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `users` where `id`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = !$row['assurer'];
		mysql_query("update `users` set `assurer`='$ver' where `id`='$memid'");
	}elseif($id == 43 && array_key_exists('assurer',$_REQUEST) && $_REQUEST['assurer'] > 0 && $ticketvalidation == FALSE){
		$_REQUEST['userid'] = intval($_REQUEST['assurer']);
		$_SESSION['ticketmsg']='No action (Change assurer status) taken. Ticket number is missing!';
	}

	if($id == 43 && array_key_exists('assurer_blocked',$_REQUEST) && $_REQUEST['assurer_blocked'] > 0 && $ticketvalidation == TRUE)
	{
		$memid = $_REQUEST['userid'] = intval($_REQUEST['assurer_blocked']);
		if (!write_se_log($memid, $_SESSION['profile']['id'],'SE Change assurer blocked status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `users` where `id`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = !$row['assurer_blocked'];
		mysql_query("update `users` set `assurer_blocked`='$ver' where `id`='$memid'");
	}elseif($id == 43 && array_key_exists('assurer_blocked',$_REQUEST) && $_REQUEST['assurer_blocked'] > 0 && $ticketvalidation == FALSE){
		$_REQUEST['userid'] = intval($_REQUEST['assurer_blocked']);
		$_SESSION['ticketmsg']='No action taken. Ticket number is missing!';
	}

	if($id == 43 && array_key_exists('locked',$_REQUEST) && $_REQUEST['locked'] > 0 && $ticketvalidation == TRUE)
	{
		csrf_check('admactlock');
		$memid = $_REQUEST['userid'] = intval($_REQUEST['locked']);
		if (!write_se_log($memid, $_SESSION['profile']['id'],'SE Change locked status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `users` where `id`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = !$row['locked'];
		mysql_query("update `users` set `locked`='$ver' where `id`='$memid'");
	}elseif($id == 43 && array_key_exists('locked',$_REQUEST) && $_REQUEST['locked'] > 0 && $ticketvalidation == FALSE){
		$_REQUEST['userid'] = intval($_REQUEST['locked']);
		$_SESSION['ticketmsg']='No action taken. Ticket number is missing!';
	}

	if($id == 43 && array_key_exists('codesign',$_REQUEST) && $_REQUEST['codesign'] > 0 && $ticketvalidation == TRUE)
	{
		csrf_check('admcodesign');
		$memid = $_REQUEST['userid'] = intval($_REQUEST['codesign']);
		if (!write_se_log($memid, $_SESSION['profile']['id'],'SE Change codesign status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `users` where `id`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = !$row['codesign'];
		mysql_query("update `users` set `codesign`='$ver' where `id`='$memid'");
	}elseif($id == 43 && array_key_exists('codesign',$_REQUEST) && $_REQUEST['codesign'] > 0 && $ticketvalidation == FALSE){
		$_REQUEST['userid'] = intval($_REQUEST['codesign']);
		$_SESSION['ticketmsg']='No action taken. Ticket number is missing!';
	}

	if($id == 43 && array_key_exists('orgadmin',$_REQUEST) && $_REQUEST['orgadmin'] > 0 && $ticketvalidation == TRUE)
	{
		csrf_check('admorgadmin');
		$memid = $_REQUEST['userid'] = intval($_REQUEST['orgadmin']);
		if (!write_se_log($memid, $_SESSION['profile']['id'],'SE Change org assuer status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `users` where `id`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = !$row['orgadmin'];
		mysql_query("update `users` set `orgadmin`='$ver' where `id`='$memid'");
	}elseif($id == 43 && array_key_exists('orgadmin',$_REQUEST) && $_REQUEST['orgadmin'] > 0 && $ticketvalidation == FALSE){
		$_REQUEST['userid'] = intval($_REQUEST['orgadmin']);
		$_SESSION['ticketmsg']='No action taken. Ticket number is missing!';
	}

	if($id == 43 && array_key_exists('ttpadmin',$_REQUEST) && $_REQUEST['ttpadmin'] > 0 && $ticketvalidation == TRUE)
	{
		csrf_check('admttpadmin');
		$memid = $_REQUEST['userid'] = intval($_REQUEST['ttpadmin']);
		if(!write_se_log($memid, $_SESSION['profile']['id'],'SE Change ttp admin status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `users` where `id`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = !$row['ttpadmin'];
		mysql_query("update `users` set `ttpadmin`='$ver' where `id`='$memid'");
	}elseif($id == 43 && array_key_exists('ttpadmin',$_REQUEST) && $_REQUEST['ttpadmin'] > 0 && $ticketvalidation == FALSE){
		$_REQUEST['userid'] = intval($_REQUEST['ttpadmin']);
		$_SESSION['ticketmsg']='No action taken. Ticket number is missing!';
	}

	if($id == 43 && array_key_exists('adadmin',$_REQUEST) && $_REQUEST['adadmin'] > 0 && $ticketvalidation == TRUE)
	{
		$memid = $_REQUEST['userid'] = intval($_REQUEST['adadmin']);
		if (!write_se_log($memid, $_SESSION['profile']['id'],'SE Change advertising admin status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `users` where `id`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = $row['adadmin'] + 1;
		if($ver > 2)
			$ver = 0;
		mysql_query("update `users` set `adadmin`='$ver' where `id`='$memid'");
	}elseif($id == 43 && array_key_exists('adadmin',$_REQUEST) && $_REQUEST['adadmin'] > 0 && $ticketvalidation == FALSE){
		$_REQUEST['userid'] = intval($_REQUEST['adadmin']);
		$_SESSION['ticketmsg']='No action taken. Ticket number is missing!';
	}

	if($id == 43 && array_key_exists('locadmin',$_REQUEST) && $_REQUEST['locadmin'] > 0 && $ticketvalidation == TRUE)
	{
		$memid = $_REQUEST['userid'] = intval($_REQUEST['locadmin']);
		if (!write_se_log($memid, $_SESSION['profile']['id'],'SE Change location admin status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `users` where `id`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = !$row['locadmin'];
		mysql_query("update `users` set `locadmin`='$ver' where `id`='$memid'");
	}elseif($id == 43 && array_key_exists('locadmin',$_REQUEST) && $_REQUEST['locadmin'] > 0 && $ticketvalidation == FALSE){
		$_REQUEST['userid'] = intval($_REQUEST['locadmin']);
		$_SESSION['ticketmsg']='No action taken. Ticket number is missing!';
	}

	if($id == 43 && array_key_exists('admin',$_REQUEST) && $_REQUEST['admin'] > 0 && $ticketvalidation == TRUE)
	{
		csrf_check('admsetadmin');
		$memid = $_REQUEST['userid'] = intval($_REQUEST['admin']);
		if (!write_se_log($memid, $_SESSION['profile']['id'],'SE Change SE status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `users` where `id`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = !$row['admin'];
		mysql_query("update `users` set `admin`='$ver' where `id`='$memid'");
	}elseif($id == 43 && array_key_exists('admin',$_REQUEST) && $_REQUEST['admin'] > 0 && $ticketvalidation == FALSE){
		$_REQUEST['userid'] = intval($_REQUEST['admin']);
		$_SESSION['ticketmsg']='No action taken. Ticket number is missing!';
	}

	if($id == 43 && array_key_exists('general',$_REQUEST) && $_REQUEST['general'] > 0 && $ticketvalidation == TRUE)
	{
		$memid = $_REQUEST['userid'] = intval($_REQUEST['general']);
		if (!write_se_log($memid, $_SESSION['profile']['id'],'SE Change general status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `alerts` where `memid`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = !$row['general'];
		mysql_query("update `alerts` set `general`='$ver' where `memid`='$memid'");
	}elseif($id == 43 && array_key_exists('general',$_REQUEST) && $_REQUEST['general'] > 0 && $ticketvalidation == FALSE){
		$_REQUEST['userid'] = intval($_REQUEST['general']);
		$_SESSION['ticketmsg']='No action taken. Ticket number is missing!';
	}

	if($id == 43 && array_key_exists('country',$_REQUEST) && $_REQUEST['country'] > 0 && $ticketvalidation == TRUE)
	{
		$memid = $_REQUEST['userid'] = intval($_REQUEST['country']);
		if (!write_se_log($memid, $_SESSION['profile']['id'],'SE Change country status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `alerts` where `memid`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = !$row['country'];
		mysql_query("update `alerts` set `country`='$ver' where `memid`='$memid'");
	}elseif($id == 43 && array_key_exists('country',$_REQUEST) && $_REQUEST['country'] > 0 && $ticketvalidation == FALSE){
		$_REQUEST['userid'] = intval($_REQUEST['country']);
		$_SESSION['ticketmsg']='No action taken. Ticket number is missing!';
	}

	if($id == 43 && array_key_exists('regional',$_REQUEST) && $_REQUEST['regional'] > 0 && $ticketvalidation == TRUE)
	{
		$memid = $_REQUEST['userid'] = intval($_REQUEST['regional']);
		if (!write_se_log($memid, $_SESSION['profile']['id'],'SE Change regional status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `alerts` where `memid`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = !$row['regional'];
		mysql_query("update `alerts` set `regional`='$ver' where `memid`='$memid'");
	}elseif($id == 43 && array_key_exists('regional',$_REQUEST) && $_REQUEST['regional'] > 0 && $ticketvalidation == FALSE){
		$_REQUEST['userid'] = intval($_REQUEST['regional']);
		$_SESSION['ticketmsg']='No action taken. Ticket number is missing!';
	}

	if($id == 43 && array_key_exists('radius',$_REQUEST) && $_REQUEST['radius'] > 0 && $ticketvalidation == TRUE)
	{
		$memid = $_REQUEST['userid'] = intval($_REQUEST['radius']);
		if (!write_se_log($memid, $_SESSION['profile']['id'],'SE Change radius status',$ticketno)) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			showfooter();
			exit;
		}
		$query = "select * from `alerts` where `memid`='$memid'";
		$row = mysql_fetch_assoc(mysql_query($query));
		$ver = !$row['radius'];
		mysql_query("update `alerts` set `radius`='$ver' where `memid`='$memid'");
	}elseif($id == 43 && array_key_exists('radius',$_REQUEST) && $_REQUEST['radius'] > 0 && $ticketvalidation == false){
		$_REQUEST['userid'] = intval($_REQUEST['radius']);
		$_SESSION['ticketmsg']='No action taken. Ticket number is missing!';
	}

	if($id == 50)
	{
		if(array_key_exists('userid',$_REQUEST) && $_REQUEST['userid'] !== "") {
			$_REQUEST['userid'] = intval($_REQUEST['userid']);
		}

		$row = mysql_fetch_assoc(mysql_query("select * from `users` where `id`='".intval($_REQUEST['userid'])."'"));
		if($row['email'] == "") {
			$id = 42;
		} else {
			$_REQUEST['email'] = $row['email'];
		}
	}

	if($oldid == 50)
	{
		$id = 43;
		$_REQUEST['userid'] = intval($_REQUEST['userid']);
	}

	if($oldid == 50 && $process != "")
	{
		$_REQUEST['userid'] = intval($_REQUEST['userid']);
		if (trim($_REQUEST['arbitrationno'])==""){
			showheader(_("My CAcert.org Account!"));
			echo _("You did not enter an arbitration number entry.");
			printf('
' . _('Back to previous page.') .'');
			showfooter();
			exit;
		}
		if ( 1 !== preg_match('/^[a-z]\d{8}\.\d+\.\d+$/i',trim($_REQUEST['arbitrationno'])) ) {
			showheader(_("My CAcert.org Account!"));
			printf(_("'%s' is not a valid arbitration number entry."), sanitizeHTML(trim($_REQUEST['arbitrationno'])));
			printf('
' . _('Back to previous page.') .'');
			showfooter();
			exit;
		}
		if (check_email_exists(trim($_REQUEST['arbitrationno']).'@cacert.org')) {
			showheader(_("My CAcert.org Account!"));
			printf(_("The email address '%s' is already in a different account. Can't continue."), sanitizeHTML($_REQUEST['arbitrationno'].'@cacert.org'));
			printf('
' . _('Back to previous page.') .'');
			showfooter();
			exit;
		}
		if (check_client_cert_running(intval($_REQUEST['userid']),1) ||
			check_server_cert_running(intval($_REQUEST['userid']),1) ||
			check_gpg_cert_running(intval($_REQUEST['userid']),1)) {
			showheader(_("My CAcert.org Account!"));
			printf(_("The CCA retention time for at least one certificate is not over. Can't continue."));
			printf('
' . _('Back to previous page.') .'');
			showfooter();
			exit;
		}
		if (check_is_orgadmin(intval($_REQUEST['userid']),1)) {
			showheader(_("My CAcert.org Account!"));
			printf(_("The user is listed as Organisation Administrator. Can't continue."));
			printf('
' . _('Back to previous page.') .'');
			showfooter();
			exit;
		}
		if (!write_se_log(intval($_REQUEST['userid']), $_SESSION['profile']['id'], 'SE Account delete', trim($_REQUEST['arbitrationno']))) {
			showheader(_("Something went wrong"));
			echo _("Writing to the admin log failed. Can't continue.");
			printf('
' . _('Back to previous page.') .'');
			showfooter();
			exit;
		}
		account_delete(intval($_REQUEST['userid']), trim($_REQUEST['arbitrationno']), $_SESSION['profile']['id']);
	}

	if(($id == 51 || $id == 52 || $oldid == 52))
	{
		showheader(_("My CAcert.org Account!"));
		echo _("You don't have access to this area.\nThe Tverify programme is terminated as of 16th November 2010" );
		showfooter();
		exit;
	}

	if($id == 59){
		if (!($oldid == 43 && $_SESSION['profile']['admin'] == 1) &&
		    !($oldid == 13 && intval($_REQUEST['userid']) == $_SESSION['profile']['id']))
		{
			showheader(_("My CAcert.org Account!"));
			echo _("You do not have access to this page.");
			showfooter();
			exit;
		}
	}


	if(intval($cert) > 0)
		$_SESSION['_config']['cert'] = intval($cert);
	if(intval($orgid) > 0)
		$_SESSION['_config']['orgid'] = intval($orgid);
	if(intval($memid) > 0)
		$_SESSION['_config']['memid'] = intval($memid);
?>