bug 959: Limit the awarded points to the maximum number of points the

user may issue

Signed-off-by: Michael Tänzer <neo@nhng.de>

1 files changed, 7 insertions, 3 deletions

diff --git a/www/wot.php b/www/wot.php
index 2bd4622..1941861 100644
--- a/www/wot.php
+++ b/www/wot.php
@@ -206,9 +206,13 @@
 	if($oldid == 6)
 	{
 		$max =  maxpoints();
-		$awarded = $newpoints = intval($_POST['points']);
-		if($newpoints > $max)
-			$newpoints = $max;
+		
+		if (intval($_POST['points']) > $max) {
+			$awarded = $newpoints = $max;
+		} else {
+			$awarded = $newpoints = intval($_POST['points']);
+		}
+		
 		$query = "select sum(`points`) as `total` from `notary` where `to`='".$_SESSION['_config']['notarise']['id']."' group by `to`";
 		$res = mysql_query($query);
 		$drow = mysql_fetch_assoc($res);