View Issue Details

IDProjectCategoryView StatusLast Update
0000159Main CAcert Websitesource codepublic2013-01-14 01:24
Reporteraanriot Assigned To 
PrioritylowSeveritytweakReproducibilityalways
Status closedResolutionfixed 
Fixed in Version2006 
Summary0000159: $_SESSION['profile']['email'] in index/4.php
DescriptionWhy is the email input field in index/4.php set to $_SESSION['profile']['email']? The variable is only set in case the user has already logged on and doesn't do anything useful otherwise.

   <input type="text" name="email"
        value="<?=strip_tags($_SESSION['profile']['email'])?>"></td>

Maybe the idea was to keep the user input in case of wrong passphrase ..?
TagsNo tags attached.
Reviewed by
Test Instructions

Activities

duane

2006-08-16 12:06

developer   ~0000521

changed to $_REQUEST['email']...

Issue History

Date Modified Username Field Change
2006-03-05 22:54 bluec New Issue
2006-03-05 23:27 bluec Category GPG/PGP => source code
2006-08-16 12:05 duane Status new => needs work
2006-08-16 12:05 duane Assigned To => bluec
2006-08-16 12:06 duane Status needs work => solved?
2006-08-16 12:06 duane Fixed in Version => production
2006-08-16 12:06 duane Resolution open => fixed
2006-08-16 12:06 duane Note Added: 0000521
2007-10-24 06:08 evaldo Reporter bluec => aanriot
2007-10-24 06:08 evaldo Assigned To bluec =>
2007-10-24 06:08 evaldo Status solved? => closed
2013-01-14 01:24 Werner Dworak Fixed in Version => 2006