Update soft_copy.php

[clinton/MarylandElectronicPetitionSignature.git] / soft_copy.php

diff --git a/soft_copy.php b/soft_copy.php
index 5c209fa..0422463 100644 (file)
--- a/soft_copy.php
+++ b/soft_copy.php
@@ -2,7 +2,7 @@
 include_once('/var/www/secure.php'); 
 
 $id = $_GET['id'];
-$q = "select * from signatures where id = 'id' ";
+$q = "select * from signatures where id = '$id' ";
 $r = $petition->query($q);
 $d = mysqli_fetch_array($r);
 
@@ -10,7 +10,9 @@ $DOB    = $d['date_of_birth'];
 $SIGNED = $d['date_time_signed'];
 $PETITION_ID = $d['petition_id'];
 
-die($d['VTRID']);
+if ($_COOKIE['pVTRID'] != $d['VTRID']){
+ die('Error #294');
+}
 
 $q2 = "select * from VoterList where VTRID = '$d[VTRID]' ";
 $r2 = $petition->query($q2);