=========================================================== .___ __ __ _________________ __ __ __| _/|__|/ |_ / ___\_` __ \__ \ | | \/ __ | | \\_ __\ / /_/ > | \// __ \| | / /_/ | | || | \___ /|__| (____ /____/\____ | |__||__| /_____/ \/ \/ grep rough audit - static analysis tool v2.8 written by @Wireghoul =================================[justanotherhacker.com]=== php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Object/Sql.php-323- // Update the share's user permissions php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Object/Sql.php:324: $db->delete('DELETE FROM ' . $table . '_users WHERE share_id = ?', array($this->data['share_id'])); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Object/Sql.php-325- if (!empty($this->data['perm']['users'])) { ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Object/Sql.php-332- // Update the share's group permissions php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Object/Sql.php:333: $db->delete('DELETE FROM ' . $table . '_groups WHERE share_id = ?', array($this->data['share_id'])); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Object/Sql.php-334- if (!empty($this->data['perm']['groups'])) { ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Object/Sqlng.php-138- // Update the share's user permissions php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Object/Sqlng.php:139: $db->delete('DELETE FROM ' . $table . '_users WHERE share_id = ?', array($this->data['share_id'])); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Object/Sqlng.php-140- if (!empty($this->data['perm']['users'])) { ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Object/Sqlng.php-157- // Update the share's group permissions php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Object/Sqlng.php:158: $db->delete('DELETE FROM ' . $table . '_groups WHERE share_id = ?', array($this->data['share_id'])); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Object/Sqlng.php-159- if (!empty($this->data['perm']['groups'])) { ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-192- try { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:193: $rows = $this->_db->select('SELECT * FROM ' . $this->_table . '_users WHERE share_id = ?', array($share['share_id'])); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-194- } catch (Horde_Db_Exception $e) { ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-216- try { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:217: $rows = $this->_db->select('SELECT * FROM ' . $this->_table . '_groups WHERE share_id = ?', array($share['share_id'])); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-218- } catch (Horde_Db_Exception $e) { ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-239- try { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:240: $results = $this->_db->selectOne('SELECT * FROM ' . $this->_table . ' WHERE share_name = ?', array($name)); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-241- } catch (Horde_Db_Exception $e) { ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-309- try { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:310: $results = $this->_db->selectOne('SELECT * FROM ' . $this->_table . ' WHERE share_id = ?', array($id)); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-311- } catch (Horde_Db_Exception $e) { ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-798- try { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:799: $this->_db->delete('DELETE FROM ' . $table . ' WHERE share_id = ?', $params); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-800- } catch (Horde_Db_Exception $e) { ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-835- try { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:836: return (boolean)$this->_db->selectOne('SELECT 1 FROM ' . $this->_table . ' WHERE share_name = ?', array($share)); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-837- } catch (Horde_Db_Exception $e) { ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-851- try { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:852: return (boolean)$this->_db->selectOne('SELECT 1 FROM ' . $this->_table . ' WHERE share_id = ?', array($id)); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-853- } catch (Horde_Db_Exception $e) { ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-894- if (!empty($where)) { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:895: $where = ' (' . $where . ') '; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-896- } ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-899- $value = array_map(array($this->_db, 'quote'), $value); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:900: $where .= ' AND ' . $key . ' IN (' . implode(', ', $value) . ')'; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-901- } else { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:902: $where .= ' AND ' . $key . ' = ' . $this->_db->quote($value); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-903- } ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-906- // Restrict to shares owned by the user specified php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:907: $where = (!empty($where) ? ' (' . $where . ') AND ' : ' ') . 's.share_owner = ' . $this->_db->quote($attributes); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-908- } ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-931- if (empty($where)) { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:932: $where = $where_parent; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-933- } else { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:934: $where = '(' . $where . ') AND ' . $where_parent; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-935- } ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-954- if (empty($userid)) { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:955: $where = '(' . $this->_db->buildClause('s.perm_guest', '&', $perm) . ' > 0)'; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-956- } else { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-957- // (owner == $userid) php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:958: $where .= 's.share_owner = ' . $this->_db->quote($userid); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-959- php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-960- // (name == perm_creator and val & $perm) php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:961: $where .= ' OR (' . $this->_db->buildClause('s.perm_creator', '&', $perm) . ' > 0)'; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-962- php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-963- // (name == perm_creator and val & $perm) php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:964: $where .= ' OR (' . $this->_db->buildClause('s.perm_default', '&', $perm) . ' > 0)'; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-965- ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-967- $query .= ' LEFT JOIN ' . $this->_table . '_users u ON u.share_id = s.share_id'; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:968: $where .= ' OR ( u.user_uid = ' . $this->_db->quote($userid) php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-969- . ' AND (' . $this->_db->buildClause('u.perm', '&', $perm) . ' > 0))'; ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-981- $query .= ' LEFT JOIN ' . $this->_table . '_groups g ON g.share_id = s.share_id'; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php:982: $where .= ' OR (g.group_uid IN (' . implode(',', $group_ids) php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sql.php-983- . ') AND (' . $this->_db->buildClause('g.perm', '&', $perm) . ' > 0))'; ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-111- } php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php:112: $where = $this->_getShareCriteria($userid, $perms, $params['attributes'], $shareids, $params['parent'], $params['all_levels']); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-113- $query = 'SELECT ' . $this->_getDistinctClause() . ' FROM ' . $this->_table . ' s ' . ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-359- $query = 'SELECT * FROM ' . $this->_table php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php:360: . '_users WHERE user_uid = ' . $this->_db->quote($userid) php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-361- . ' AND (' . $this->_getPermsCriteria('perm', $perms) . ')'; ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-423- if (empty($userid)) { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php:424: $where = $this->_getPermsCriteria('perm_guest', $perms); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-425- } else { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-426- // (owner == $userid) php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php:427: $where .= 'share_owner = ' . $this->_db->quote($userid); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-428- php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-429- // (name == perm_creator and val & $perm) php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php:430: $where .= ' OR ' . $this->_getPermsCriteria('perm_creator', $perms); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-431- php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-432- // (name == perm_default and val & $perm) php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php:433: $where .= ' OR ' . $this->_getPermsCriteria('perm_default', $perms); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-434- php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-435- if ($shareids) { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php:436: $where .= ' OR share_id IN (' . implode(',', $shareids) . ')'; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-437- } ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-441- // Build attribute/key filter. php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php:442: $where = '(' . $where . ') '; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-443- foreach ($attributes as $key => $value) { ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-445- $value = array_map(array($this->_db, 'quote'), $value); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php:446: $where .= ' AND ' . $key . ' IN (' . implode(', ', $value) . ')'; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-447- } else { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php:448: $where .= ' AND ' . $key . ' = ' . $this->_db->quote($value); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-449- } ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-453- // $attributes string. php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php:454: $where = '(' . $where . ') AND share_owner = ' . $this->_db->quote($attributes); php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-455- } ############################################## php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-477- if (empty($where)) { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php:478: $where = $where_parent; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-479- } else { php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php:480: $where = '(' . $where . ') AND ' . $where_parent; php-horde-share-2.2.0/Horde_Share-2.2.0/lib/Horde/Share/Sqlng.php-481- }