summaryrefslogtreecommitdiff
path: root/includes
diff options
context:
space:
mode:
authorINOPIAE <inopiae@cacert.org>2013-04-30 23:08:46 +0200
committerINOPIAE <inopiae@cacert.org>2013-04-30 23:08:46 +0200
commite05ca1fd4ba7a1bc19f452ba668502ac086170c6 (patch)
tree34afb22e97236b33011096141dd658a8e56f187b /includes
parente8c6fa80af52e3036165e9916db81256b539d021 (diff)
downloadcacert-devel-e05ca1fd4ba7a1bc19f452ba668502ac086170c6.tar.gz
cacert-devel-e05ca1fd4ba7a1bc19f452ba668502ac086170c6.tar.xz
cacert-devel-e05ca1fd4ba7a1bc19f452ba668502ac086170c6.zip
bug 893: Added check for correct arbitrtation no + sequence no
Diffstat (limited to 'includes')
-rw-r--r--includes/account.php8
1 files changed, 7 insertions, 1 deletions
diff --git a/includes/account.php b/includes/account.php
index 26b16ba..ee63c73 100644
--- a/includes/account.php
+++ b/includes/account.php
@@ -2843,7 +2843,13 @@
$_REQUEST['userid'] = intval($_REQUEST['userid']);
if (trim($_REQUEST['arbitrationno'])==""){
showheader(_("My CAcert.org Account!"));
- echo _("You did not enter an arbitration number.");
+ echo _("You did not enter an arbitration number entry.");
+ showfooter();
+ exit;
+ }
+ if (preg_match('/^\w\d{8}\.\d+\.\d+$/',trim($_REQUEST['arbitrationno']))==false){
+ showheader(_("My CAcert.org Account!"));
+ echo _("You did not enter an arbitration number entry.");
showfooter();
exit;
}