diff options
| author | Michael Tänzer <neo@nhng.de> | 2011-08-21 02:07:40 +0200 |
|---|---|---|
| committer | Michael Tänzer <neo@nhng.de> | 2011-08-21 02:07:40 +0200 |
| commit | ce4bfbaf0c2babb5bba2568d3b8712e1615aa651 (patch) | |
| tree | bcdd82ada2066eff6fc21f6dfc2fe01844f1550f /www/cats | |
| parent | 983a7dced2bc15cfb5760b81659bc72fb39b2567 (diff) | |
| download | cacert-ce4bfbaf0c2babb5bba2568d3b8712e1615aa651.tar.gz cacert-ce4bfbaf0c2babb5bba2568d3b8712e1615aa651.tar.xz cacert-ce4bfbaf0c2babb5bba2568d3b8712e1615aa651.zip | |
Source code taken from cacert-20110820.tar.bz2
Diffstat (limited to 'www/cats')
| -rw-r--r-- | www/cats/cats_import.php | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/www/cats/cats_import.php b/www/cats/cats_import.php index 6d77a75..56dd0cf 100644 --- a/www/cats/cats_import.php +++ b/www/cats/cats_import.php @@ -24,6 +24,8 @@ API for CATS to import passed tests into main CAcert database. */ +require_once('../../includes/lib/account.php'); + function sanitize_string($buffer) { return htmlentities(utf8_decode($buffer), (int)ENQ_QUOTES); } @@ -154,8 +156,7 @@ if (!$query) { } // Update Assurer-Flag on users table if 100 points. Should the number of points be SUM(points) or SUM(awarded)? -$query = mysql_query('UPDATE `users` AS `u` SET `assurer` = 1 WHERE `u`.`id` = \''.(int)intval($userID).'\' AND EXISTS(SELECT 1 FROM `cats_passed` AS `tp` WHERE `tp`.`user_id` = `u`.`id`) AND (SELECT SUM(`points`) FROM `notary` AS `n` WHERE `n`.`to` = `u`.`id` AND `expire` < now()) >= 100;'); // Challenge has been passed and non-expired points >= 100 -if (!$query) { +if (!fix_assurer_flag($userID)) { echo 'Invalid query'."\r\n"; trigger_error('Invalid query', E_USER_ERROR); exit(); |