Merge pull request radicand#3 from lgnap/master

Merged

Author: Nick Pappas

Makefile

@@ -22,7 +22,7 @@ distclean: clean
 	echo -e '<?php\nheader("Location: ./../index.php");\n?>' > ca/index.php
 
 	echo '<?php' > config.php
-	echo 'define(PHPKI_VERSION, "$(VERSION)");' >> config.php
+	echo 'define("PHPKI_VERSION", "$(VERSION)");' >> config.php
 	echo '?>' >> config.php
 
 	rm -f index.php setup.php

config.php

@@ -1,3 +1,3 @@
 <?php
-define(PHPKI_VERSION, "0.83");
+define("PHPKI_VERSION", "0.83");
 ?>

include/common.php

@@ -2,7 +2,7 @@
 
 umask(0007);
 
-if ($_SERVER['PHP_AUTH_USER'])
+if (isset($_SERVER['PHP_AUTH_USER']))
 	$PHPki_user = md5($_SERVER['PHP_AUTH_USER']);
 else
 	$PHPki_user = md5('default');

include/my_functions.php

@@ -64,8 +64,8 @@ function upload($source, $destination, $content_type="application/octet-stream")
 function gpvar($v) {
 	global $_GET, $_POST;
     $x = "";
-	if ($_GET[$v])  $x = $_GET[$v];
-	if ($_POST[$v]) $x = $_POST[$v];
+	if (isset($_GET[$v]))  $x = $_GET[$v];
+	if (isset($_POST[$v])) $x = $_POST[$v];
 	if (get_magic_quotes_gpc()) $x = stripslashes($x);
 	return $x;
 }

setup.php-presetup

@@ -109,7 +109,7 @@ case 'validate':
 	if ( $passwd and $passwd != $passwdv )
 		$er .= 'Password and password verification do not match.<br>';
 
-        if ( $email && ! is_email($contact) )
+        if ( $contact && ! is_email($contact) )
                 $er .= 'E-mail address ('. htvar($contact) . ') may be invalid.<br>';
 
 	if (strpos($store_dir,$_SERVER['DOCUMENT_ROOT']) === 0)
@@ -739,7 +739,7 @@ E-mail: <a href=mailto:someone@somewhere.com>someone@somewhere.com</a>&nbsp;&nbs
 	<td>
 	<strong>Password</strong> <font color=red>*</font><br>
 	This password will be used to protect your root certificate private
-	key.  <strong><font color=red>Do not lose or forget this password.</font></strong>
+	key.<br/>Can't contain single quote ! <strong><font color=red>Do not lose or forget this password.</font></strong>
 	</td>
 	<td><input type=password name=passwd value="<?=htvar($passwd)?>" size=30>&nbsp;&nbsp; Again <input type=password name=passwdv value="<?=htvar($passwdv)?>" size=30></td>
 	</tr>