diff options
| author | INOPIAE <inopiae@cacert.org> | 2013-04-30 23:08:46 +0200 |
|---|---|---|
| committer | INOPIAE <inopiae@cacert.org> | 2013-04-30 23:08:46 +0200 |
| commit | e05ca1fd4ba7a1bc19f452ba668502ac086170c6 (patch) | |
| tree | 34afb22e97236b33011096141dd658a8e56f187b /includes | |
| parent | e8c6fa80af52e3036165e9916db81256b539d021 (diff) | |
| download | cacert-devel-e05ca1fd4ba7a1bc19f452ba668502ac086170c6.tar.gz cacert-devel-e05ca1fd4ba7a1bc19f452ba668502ac086170c6.tar.xz cacert-devel-e05ca1fd4ba7a1bc19f452ba668502ac086170c6.zip | |
bug 893: Added check for correct arbitrtation no + sequence no
Diffstat (limited to 'includes')
| -rw-r--r-- | includes/account.php | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/includes/account.php b/includes/account.php index 26b16ba..ee63c73 100644 --- a/includes/account.php +++ b/includes/account.php @@ -2843,7 +2843,13 @@ $_REQUEST['userid'] = intval($_REQUEST['userid']); if (trim($_REQUEST['arbitrationno'])==""){ showheader(_("My CAcert.org Account!")); - echo _("You did not enter an arbitration number."); + echo _("You did not enter an arbitration number entry."); + showfooter(); + exit; + } + if (preg_match('/^\w\d{8}\.\d+\.\d+$/',trim($_REQUEST['arbitrationno']))==false){ + showheader(_("My CAcert.org Account!")); + echo _("You did not enter an arbitration number entry."); showfooter(); exit; } |