bug 893: Added check for correct arbitrtation no + sequence no
authorINOPIAE <inopiae@cacert.org>
Tue, 30 Apr 2013 21:08:46 +0000 (23:08 +0200)
committerINOPIAE <inopiae@cacert.org>
Tue, 30 Apr 2013 21:08:46 +0000 (23:08 +0200)
includes/account.php
pages/account/50.php

index 26b16ba..ee63c73 100644 (file)
                $_REQUEST['userid'] = intval($_REQUEST['userid']);
                if (trim($_REQUEST['arbitrationno'])==""){
                        showheader(_("My CAcert.org Account!"));
-                       echo _("You did not enter an arbitration number.");
+                       echo _("You did not enter an arbitration number entry.");
+                       showfooter();
+                       exit;
+               }
+               if (preg_match('/^\w\d{8}\.\d+\.\d+$/',trim($_REQUEST['arbitrationno']))==false){
+                       showheader(_("My CAcert.org Account!"));
+                       echo _("You did not enter an arbitration number entry.");
                        showfooter();
                        exit;
                }
index 48c8896..a4c2413 100644 (file)
@@ -26,7 +26,7 @@
     <td class="DataTD"><b><?=sanitizeHTML($_REQUEST['email'])?></b></td>
   </tr>
   <tr>
-    <td class="DataTD"><?=_("Username from arbitration number.")?>:</td>
+    <td class="DataTD"><?=_("New Username from arbitration number + sequence number a20xxyyzz.a.b")?>:</td>
     <td class="DataTD"><input type="text" name="arbitrationno"></td>
   </tr>
   <tr>