=========================================================== .___ __ __ _________________ __ __ __| _/|__|/ |_ / ___\_` __ \__ \ | | \/ __ | | \\_ __\ / /_/ > | \// __ \| | / /_/ | | || | \___ /|__| (____ /____/\____ | |__||__| /_____/ \/ \/ grep rough audit - static analysis tool v2.8 written by @Wireghoul =================================[justanotherhacker.com]=== php-horde-turba-4.2.25/turba-4.2.25/bin/turba-convert-datatree-shares-to-sql-32-try { php-horde-turba-4.2.25/turba-4.2.25/bin/turba-convert-datatree-shares-to-sql:33: $shares_result = $db->selectAssoc('SELECT datatree_id, datatree_name FROM horde_datatree WHERE group_uid = ' . $db->quoteString('horde.shares.turba')); php-horde-turba-4.2.25/turba-4.2.25/bin/turba-convert-datatree-shares-to-sql-34-} catch (Horde_Db_Exception $e) { ############################################## php-horde-turba-4.2.25/turba-4.2.25/bin/turba-convert-datatree-shares-to-sql-128- try { php-horde-turba-4.2.25/turba-4.2.25/bin/turba-convert-datatree-shares-to-sql:129: $db->delete('DELETE FROM horde_datatree_attributes WHERE datatree_id = ?', array($share_id)); php-horde-turba-4.2.25/turba-4.2.25/bin/turba-convert-datatree-shares-to-sql:130: $db->delete('DELETE FROM horde_datatree WHERE datatree_id = ?', array($share_id)); php-horde-turba-4.2.25/turba-4.2.25/bin/turba-convert-datatree-shares-to-sql-131- } catch (Horde_Db_Exception $e) { ############################################## php-horde-turba-4.2.25/turba-4.2.25/bin/turba-public-to-horde-share-103- $newValue = $row[1] . "\n$sourceKey:$owner_uid"; php-horde-turba-4.2.25/turba-4.2.25/bin/turba-public-to-horde-share:104: $SQL = 'UPDATE horde_prefs SET pref_value=\'' . $newValue . '\' WHERE pref_uid=\'' . $row[0] . '\' AND pref_scope=\'turba\' AND pref_name=\'addressbooks\';'; php-horde-turba-4.2.25/turba-4.2.25/bin/turba-public-to-horde-share-105- $result = $db->query($SQL); ############################################## php-horde-turba-4.2.25/turba-4.2.25/docs/UPGRADING-199-To run the script you have to open it in any text editor and change the three php-horde-turba-4.2.25/turba-4.2.25/docs/UPGRADING:200:variables at the top of the script ``$db_user``, ``$db_pass`` and php-horde-turba-4.2.25/turba-4.2.25/docs/UPGRADING:201:``$db_table`` to fit your current Turba installation. You can then run the php-horde-turba-4.2.25/turba-4.2.25/docs/UPGRADING-202-script to see how the data //would// be changed:: ############################################## php-horde-turba-4.2.25/turba-4.2.25/docs/UPGRADING-206-If you are happy with the results, you can edit the script again and change php-horde-turba-4.2.25/turba-4.2.25/docs/UPGRADING:207:the ``$for_real`` variable:: php-horde-turba-4.2.25/turba-4.2.25/docs/UPGRADING-208- ############################################## php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Facebook.php-208- $fql = 'SELECT ' . $cleanfields . ' FROM user WHERE uid IN (' php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Facebook.php:209: . 'SELECT uid2 FROM friend WHERE uid1=' . $this->_facebook->auth->getLoggedInUser() . ')'; php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Facebook.php-210- $results = $this->_facebook->fql->run($fql); ############################################## php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-124- */ php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:125: protected function _internalSearch(array $criteria, array $fields, $blobFields = array(), $appendWhere = array(), $count_only = false) php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-126- { ############################################## php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-134- if (!empty($where)) { php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:135: $where .= ' ' . $key . ' '; php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-136- } php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-137- $binds = $this->_buildSearchQuery($key, $vals); php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:138: $where .= '(' . $binds[0] . ')'; php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-139- $values += $binds[1]; ############################################## php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-141- } php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:142: $where = ' WHERE ' . $where; php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-143- if (count($criteria) && !empty($this->_params['filter'])) { ############################################## php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-146- if (!empty($this->_params['filter'])) { php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:147: $where .= $this->_params['filter']; php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-148- } php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-149- if (count($appendWhere)) { php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:150: $where .= ' AND ' . $appendWhere['sql']; php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-151- $values = array_merge($values, $appendWhere['params']); ############################################## php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-153- } elseif (count($appendWhere)) { php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:154: $where = ' WHERE ' . $appendWhere['sql']; php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-155- $values = array_merge($values, $appendWhere['params']); ############################################## php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-301- $joins = $this->_buildJoin($fields); php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:302: $where = $this->_buildWhere($fields); php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-303- ############################################## php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-389- } php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:390: $where = $key . ' IN (' . $in . ')'; php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-391- } else { php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:392: $where = $key . ' = ?'; php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-393- $values[] = $this->_convertToDriver($ids); ############################################## php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-395- if (isset($this->map['__owner'])) { php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:396: $where .= ' AND ' . $this->map['__owner'] . ' = ?'; php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-397- $values[] = $this->_convertToDriver($owner); ############################################## php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-399- if (!empty($this->_params['filter'])) { php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:400: $where .= ' AND ' . $this->_params['filter']; php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-401- } ############################################## php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-521- /* Do the deletion */ php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:522: $query = sprintf('DELETE FROM %s WHERE %s = ?', $this->_params['table'], $owner_field); php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-523- try { ############################################## php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-750- $end = sprintf('%02d-%02d', $end->month, $end->mday); php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:751: $where = array('sql' => $t_object . ' IS NOT NULL AND SUBSTR(' php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-752- . $t_object . ', 6, 5) BETWEEN ? AND ?', ############################################## php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-764- } php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php:765: $where = array('sql' => $t_object . ' IS NOT NULL AND SUBSTR(' php-horde-turba-4.2.25/turba-4.2.25/lib/Driver/Sql.php-766- . $t_object . ', 6, 2) IN ('