=========================================================== .___ __ __ _________________ __ __ __| _/|__|/ |_ / ___\_` __ \__ \ | | \/ __ | | \\_ __\ / /_/ > | \// __ \| | / /_/ | | || | \___ /|__| (____ /____/\____ | |__||__| /_____/ \/ \/ grep rough audit - static analysis tool v2.8 written by @Wireghoul =================================[justanotherhacker.com]=== postfixadmin-3.2.4/ADDITIONS/cleanupdirs.pl-84- push @dirs_to_delete, $full_domain_dir postfixadmin-3.2.4/ADDITIONS/cleanupdirs.pl:85: if &check_dir("SELECT domain FROM domain WHERE domain = ?", $domain_dir); postfixadmin-3.2.4/ADDITIONS/cleanupdirs.pl-86-} ############################################## postfixadmin-3.2.4/ADDITIONS/delete-mailq-by-domain.pl-32- #print "$id\n"; postfixadmin-3.2.4/ADDITIONS/delete-mailq-by-domain.pl:33: my $match = `postcat -q $id | grep '$domain'`; postfixadmin-3.2.4/ADDITIONS/delete-mailq-by-domain.pl-34- next unless $match; postfixadmin-3.2.4/ADDITIONS/delete-mailq-by-domain.pl-35- #print "Deleting ID: $id\n"; postfixadmin-3.2.4/ADDITIONS/delete-mailq-by-domain.pl:36: my $saida = `postsuper -d $id`; postfixadmin-3.2.4/ADDITIONS/delete-mailq-by-domain.pl-37- print $saida; ############################################## postfixadmin-3.2.4/ADDITIONS/fetchmail.pl-131- postfixadmin-3.2.4/ADDITIONS/fetchmail.pl:132: $ret=`/usr/bin/fetchmail -f $filename -i $run_dir/fetchmail.pid`; postfixadmin-3.2.4/ADDITIONS/fetchmail.pl-133- ############################################## postfixadmin-3.2.4/ADDITIONS/fetchmail.pl-135- postfixadmin-3.2.4/ADDITIONS/fetchmail.pl:136: $sql="UPDATE fetchmail SET returned_text=".$dbh->quote($ret).", date=now() WHERE id=".$id; postfixadmin-3.2.4/ADDITIONS/fetchmail.pl-137- $dbh->do($sql); ############################################## postfixadmin-3.2.4/ADDITIONS/mkeveryone.pl-119-# Delete the old message...prepare and execute query postfixadmin-3.2.4/ADDITIONS/mkeveryone.pl:120:$query = "SELECT username FROM mailbox WHERE domain='$domain';"; postfixadmin-3.2.4/ADDITIONS/mkeveryone.pl-121-$sth = $dbh->prepare($query); ############################################## postfixadmin-3.2.4/ADDITIONS/mkeveryone.pl-142-# Delete the old aliases...prepare and execute query postfixadmin-3.2.4/ADDITIONS/mkeveryone.pl:143:$query = "DELETE FROM alias WHERE address='$target';"; postfixadmin-3.2.4/ADDITIONS/mkeveryone.pl-144-$sth = $dbh->prepare($query); ############################################## postfixadmin-3.2.4/ADDITIONS/pfa_maildir_cleanup.pl-77- $dbh = DBI->connect($connectionInfo,$db_user,$db_password); postfixadmin-3.2.4/ADDITIONS/pfa_maildir_cleanup.pl:78: $user_query = "SELECT maildir FROM mailbox WHERE maildir = '$short_user_dir'"; postfixadmin-3.2.4/ADDITIONS/pfa_maildir_cleanup.pl-79- $sth = $dbh->prepare($user_query); ############################################## postfixadmin-3.2.4/ADDITIONS/pfa_maildir_cleanup.pl-97- $dbh2 = DBI->connect($connectionInfo,$db_user,$db_password); postfixadmin-3.2.4/ADDITIONS/pfa_maildir_cleanup.pl:98: $domain_query = "SELECT domain FROM domain WHERE domain = '$domain_dir'"; postfixadmin-3.2.4/ADDITIONS/pfa_maildir_cleanup.pl-99- $sth2 = $dbh2->prepare($domain_query); ############################################## postfixadmin-3.2.4/ADDITIONS/postfixadmin-domain-postdeletion.sh-32- postfixadmin-3.2.4/ADDITIONS/postfixadmin-domain-postdeletion.sh:33:if [ `echo $1 | fgrep '..'` ]; then postfixadmin-3.2.4/ADDITIONS/postfixadmin-domain-postdeletion.sh-34- echo "First argument contained a double-dot sequence; bailing out." ############################################## postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postcreation.sh-29- postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postcreation.sh:30:if [ `echo $3 | fgrep '..'` ]; then postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postcreation.sh-31- echo "$0: An argument contained a double-dot sequence; bailing out." ############################################## postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postcreation.sh-35-maildir="${basedir}/$3" postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postcreation.sh:36:parent=`dirname "$maildir"` postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postcreation.sh-37-if [ ! -d "$parent" ]; then ############################################## postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postdeletion.sh-36- postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postdeletion.sh:37:if [ `echo $1 | fgrep '..'` ]; then postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postdeletion.sh-38- echo "First argument contained a double-dot sequence; bailing out." ############################################## postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postdeletion.sh-40-fi postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postdeletion.sh:41:if [ `echo $2 | fgrep '..'` ]; then postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postdeletion.sh-42- echo "First argument contained a double-dot sequence; bailing out." ############################################## postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postdeletion.sh-45- postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postdeletion.sh:46:subdir=`echo "$1" | sed 's/@.*//'` postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postdeletion.sh-47- ############################################## postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postdeletion.sh-50- postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postdeletion.sh:51:parent=`dirname "$trashdir"` postfixadmin-3.2.4/ADDITIONS/postfixadmin-mailbox-postdeletion.sh-52-if [ ! -d "$parent" ]; then ############################################## postfixadmin-3.2.4/ADDITIONS/quota_usage.pl-77- postfixadmin-3.2.4/ADDITIONS/quota_usage.pl:78: my $i = `du -0 --summarize $full_domain_dir/$user_dir`; postfixadmin-3.2.4/ADDITIONS/quota_usage.pl-79- ($usage) = split(" ", $i); ############################################## postfixadmin-3.2.4/ADDITIONS/quota_usage.pl-88- } postfixadmin-3.2.4/ADDITIONS/quota_usage.pl:89: if($insert_db == 1){execSql("UPDATE mailbox set quota_usage = $usage, quota_usage_date = CAST(NOW() AS DATE) WHERE username = '$email'");} postfixadmin-3.2.4/ADDITIONS/quota_usage.pl-90- print_list() if ($list == 1); ############################################## postfixadmin-3.2.4/ADDITIONS/squirrelmail-plugin/functions.inc.php-24- echo _('Password for'); postfixadmin-3.2.4/ADDITIONS/squirrelmail-plugin/functions.inc.php:25: echo " " . $_SESSION['username'] . " :"; postfixadmin-3.2.4/ADDITIONS/squirrelmail-plugin/functions.inc.php-26- echo "<input type='password' name='password' value=''>"; ############################################## postfixadmin-3.2.4/ADDITIONS/squirrelmail-plugin/functions.inc.php-77- if (file_exists($filename)) { postfixadmin-3.2.4/ADDITIONS/squirrelmail-plugin/functions.inc.php:78: include_once($filename); postfixadmin-3.2.4/ADDITIONS/squirrelmail-plugin/functions.inc.php-79- } ############################################## postfixadmin-3.2.4/DOCUMENTS/POSTFIX_CONF.txt-139- postfixadmin-3.2.4/DOCUMENTS/POSTFIX_CONF.txt:140:map_files="`sed -n '/^mysql.*cf:/ s/://p' < \"$0\"`" postfixadmin-3.2.4/DOCUMENTS/POSTFIX_CONF.txt-141- ############################################## postfixadmin-3.2.4/VIRTUAL_VACATION/vacation.pl-323- my ($email_to_check) =@_; postfixadmin-3.2.4/VIRTUAL_VACATION/vacation.pl:324: my $query = qq{SELECT email FROM vacation WHERE email=? and active=$db_true and activefrom <= NOW() and activeuntil >= NOW()}; postfixadmin-3.2.4/VIRTUAL_VACATION/vacation.pl-325- my $stm = $dbh->prepare($query) or panic_prepare($query); ############################################## postfixadmin-3.2.4/common.php-49- if (is_file($PATH)) { postfixadmin-3.2.4/common.php:50: require_once($PATH); postfixadmin-3.2.4/common.php-51- return true; ############################################## postfixadmin-3.2.4/common.php-59-} postfixadmin-3.2.4/common.php:60:require_once("$incpath/config.inc.php"); postfixadmin-3.2.4/common.php-61- ############################################## postfixadmin-3.2.4/common.php-69- postfixadmin-3.2.4/common.php:70:require_once("$incpath/languages/language.php"); postfixadmin-3.2.4/common.php:71:require_once("$incpath/functions.inc.php"); postfixadmin-3.2.4/common.php-72-if(extension_loaded('Phar')) { postfixadmin-3.2.4/common.php:73: require_once("$incpath/lib/random_compat.phar"); postfixadmin-3.2.4/common.php-74-} ############################################## postfixadmin-3.2.4/common.php-82- postfixadmin-3.2.4/common.php:83:require_once("$incpath/languages/" . $language . ".lang"); postfixadmin-3.2.4/common.php-84- ############################################## postfixadmin-3.2.4/functions.inc.php-540- SELECT $idxfield AS label, @r := @r + 1 AS 'r' $querypart postfixadmin-3.2.4/functions.inc.php:541: ) idx WHERE MOD(idx.r, $page_size) IN (0,$page_size_zerobase) OR idx.r = $count_results postfixadmin-3.2.4/functions.inc.php-542- "; ############################################## postfixadmin-3.2.4/functions.inc.php-547- SELECT $idxfield AS label, nextval('rowcount') AS r $querypart postfixadmin-3.2.4/functions.inc.php:548: ) idx WHERE MOD(idx.r, $page_size) IN (0,$page_size_zerobase) OR idx.r = $count_results postfixadmin-3.2.4/functions.inc.php-549- "; ############################################## postfixadmin-3.2.4/functions.inc.php-556- WITH idx AS (SELECT * $querypart) postfixadmin-3.2.4/functions.inc.php:557: SELECT $end AS label, (SELECT (COUNT(*) - 1) FROM idx t1 WHERE t1.$end <= t2.$end ) AS r postfixadmin-3.2.4/functions.inc.php-558- FROM idx t2 postfixadmin-3.2.4/functions.inc.php:559: WHERE (r % $page_size) IN (0,$page_size_zerobase) OR r = $count_results"; postfixadmin-3.2.4/functions.inc.php-560- } ############################################## postfixadmin-3.2.4/functions.inc.php-619- $E_domain = escape_string($domain); postfixadmin-3.2.4/functions.inc.php:620: $result = db_query("SELECT 1 FROM $table_domain_admins WHERE username='$E_username' AND (domain='$E_domain' OR domain='ALL') AND active='1'"); postfixadmin-3.2.4/functions.inc.php-621- ############################################## postfixadmin-3.2.4/functions.inc.php-649- postfixadmin-3.2.4/functions.inc.php:650: $result = db_query("SELECT username FROM $table_domain_admins WHERE username='$E_username' AND domain='ALL'"); postfixadmin-3.2.4/functions.inc.php-651- if ($result['rows'] < 1) { # not a superadmin ############################################## postfixadmin-3.2.4/functions.inc.php-1457- if ($link) { postfixadmin-3.2.4/functions.inc.php:1458: @mysql_query("SET CHARACTER SET utf8", $link); postfixadmin-3.2.4/functions.inc.php:1459: @mysql_query("SET COLLATION_CONNECTION='utf8_general_ci'", $link); postfixadmin-3.2.4/functions.inc.php-1460- @mysql_select_db($CONF['database_name'], $link) or $error_text .= ("<p />DEBUG INFORMATION:<br />MySQL Select Database: " . mysql_error() . "$DEBUG_TEXT"); ############################################## postfixadmin-3.2.4/functions.inc.php-1648- if ($CONF['database_type'] == "mysql") { postfixadmin-3.2.4/functions.inc.php:1649: $result = @mysql_query($query, $link) postfixadmin-3.2.4/functions.inc.php-1650- or $error_text = "Invalid query: " . mysql_error($link); ############################################## postfixadmin-3.2.4/functions.inc.php-1794- * postfixadmin-3.2.4/functions.inc.php:1795: * DELETE FROM $table WHERE $where = $delete $aditionalWhere postfixadmin-3.2.4/functions.inc.php-1796- * ############################################## postfixadmin-3.2.4/functions.inc.php-1805- postfixadmin-3.2.4/functions.inc.php:1806: $query = "DELETE FROM $table WHERE $where ='" . escape_string($delete) . "' " . $additionalwhere; postfixadmin-3.2.4/functions.inc.php-1807- $result = db_query($query); ############################################## postfixadmin-3.2.4/functions.inc.php-1860-function db_update($table, $where_col, $where_value, $values, $timestamp = array('modified')) { postfixadmin-3.2.4/functions.inc.php:1861: $where = $where_col . " = '" . escape_string($where_value) . "'"; postfixadmin-3.2.4/functions.inc.php-1862- return db_update_q($table, $where, $values, $timestamp); ############################################## postfixadmin-3.2.4/functions.inc.php-1907- postfixadmin-3.2.4/functions.inc.php:1908: $REMOTE_ADDR = getRemoteAddr(); postfixadmin-3.2.4/functions.inc.php-1909- ############################################## postfixadmin-3.2.4/functions.inc.php-1955- */ postfixadmin-3.2.4/functions.inc.php:1956:function db_where_clause($condition, $struct, $additional_raw_where = '', $searchmode = array()) { postfixadmin-3.2.4/functions.inc.php-1957- if (!is_array($condition)) { ############################################## postfixadmin-3.2.4/functions.inc.php-2044- if (db_mysql()) { postfixadmin-3.2.4/functions.inc.php:2045: return "`" . $table . "`"; postfixadmin-3.2.4/functions.inc.php-2046- } ############################################## postfixadmin-3.2.4/functions.inc.php-2095- $stat_goto = ""; postfixadmin-3.2.4/functions.inc.php:2096: $stat_result = db_query("SELECT goto FROM $table_alias WHERE address='$show_alias'"); postfixadmin-3.2.4/functions.inc.php-2097- if ($stat_result['rows'] > 0) { ############################################## postfixadmin-3.2.4/functions.inc.php-2128- } postfixadmin-3.2.4/functions.inc.php:2129: $stat_result = db_query("SELECT address FROM $table_alias WHERE address = '" . escape_string($g) . "' OR address = '@" . escape_string($stat_domain) . "' $stat_delimiter"); postfixadmin-3.2.4/functions.inc.php-2130- if ($stat_result['rows'] == 0) { ############################################## postfixadmin-3.2.4/functions.inc.php-2147- if ( isset($CONF['show_vacation']) && $CONF['show_vacation'] == 'YES' ) { postfixadmin-3.2.4/functions.inc.php:2148: $stat_result = db_query("SELECT * FROM ". $CONF['database_tables']['vacation'] ." WHERE email = '" . $show_alias . "' AND active = '" . db_get_boolean(true) . "'") ; postfixadmin-3.2.4/functions.inc.php-2149- if ($stat_result['rows'] == 1) { ############################################## postfixadmin-3.2.4/functions.inc.php-2157- if ( isset($CONF['show_disabled']) && $CONF['show_disabled'] == 'YES' ) { postfixadmin-3.2.4/functions.inc.php:2158: $stat_result = db_query("SELECT * FROM ". $CONF['database_tables']['mailbox'] ." WHERE username = '" . $show_alias . "' AND active = '" . db_get_boolean(false) . "'"); postfixadmin-3.2.4/functions.inc.php-2159- if ($stat_result['rows'] == 1) { ############################################## postfixadmin-3.2.4/functions.inc.php-2204- */ postfixadmin-3.2.4/functions.inc.php:2205:function getRemoteAddr() { postfixadmin-3.2.4/functions.inc.php-2206- $REMOTE_ADDR = 'localhost'; ############################################## postfixadmin-3.2.4/languages/language-update.sh-23- for file in en.lang $filelist ; do postfixadmin-3.2.4/languages/language-update.sh:24: echo "<?php include('$file'); print join(\"\\n\", array_keys(\$PALANG)) . \"\\n\"; ?>" | php > $file.strings postfixadmin-3.2.4/languages/language-update.sh-25- done ############################################## postfixadmin-3.2.4/languages/language-update.sh-183- echo "<?php postfixadmin-3.2.4/languages/language-update.sh:184: include('$file'); postfixadmin-3.2.4/languages/language-update.sh-185- if (\$PALANG['$text1'] != \$PALANG['$text2']) { ############################################## postfixadmin-3.2.4/lib/smarty/libs/plugins/function.mailto.php-103- } postfixadmin-3.2.4/lib/smarty/libs/plugins/function.mailto.php:104: return '<script type="text/javascript">eval(unescape(\'' . $js_encode . '\'))</script>'; postfixadmin-3.2.4/lib/smarty/libs/plugins/function.mailto.php-105- } elseif ($encode === 'javascript_charcode') { ############################################## postfixadmin-3.2.4/lib/smarty/libs/plugins/function.math.php-97- $smarty_math_result = null; postfixadmin-3.2.4/lib/smarty/libs/plugins/function.math.php:98: eval("\$smarty_math_result = " . $equation . ";"); postfixadmin-3.2.4/lib/smarty/libs/plugins/function.math.php-99- if (empty($params[ 'format' ])) { ############################################## postfixadmin-3.2.4/lib/smarty/libs/plugins/shared.literal_compiler_param.php-32- $t = null; postfixadmin-3.2.4/lib/smarty/libs/plugins/shared.literal_compiler_param.php:33: eval("\$t = " . $params[ $index ] . ";"); postfixadmin-3.2.4/lib/smarty/libs/plugins/shared.literal_compiler_param.php-34- return $t; ############################################## postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_cacheresource_custom.php-153- if (isset($content)) { postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_cacheresource_custom.php:154: eval('?>' . $content); postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_cacheresource_custom.php-155- $cached->content = null; ############################################## postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_cacheresource_keyvaluestore.php-121- if (isset($content)) { postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_cacheresource_keyvaluestore.php:122: eval('?>' . $content); postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_cacheresource_keyvaluestore.php-123- return true; ############################################## postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_cacheresource_file.php-103- if ($update && defined('HHVM_VERSION')) { postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_cacheresource_file.php:104: eval('?>' . file_get_contents($_smarty_tpl->cached->filepath)); postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_cacheresource_file.php-105- return true; ############################################## postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_extends.php-79- } postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_extends.php:80: $this->compileInclude($compiler, $file); postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_extends.php-81- } ############################################## postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_extends.php-127- */ postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_extends.php:128: private function compileInclude(Smarty_Internal_TemplateCompilerBase $compiler, $template) postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_extends.php-129- { ############################################## postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_include_php.php-68- $_file = null; postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_include_php.php:69: eval('$_file = @' . $_attr[ 'file' ] . ';'); postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_include_php.php-70- if (!isset($compiler->smarty->security_policy) && file_exists($_file)) { ############################################## postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_insert.php-67- // save possible attributes postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_insert.php:68: eval('$_name = @' . $_attr[ 'name' ] . ';'); postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_insert.php-69- if (isset($_attr[ 'assign' ])) { ############################################## postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_insert.php-84- $_filepath = false; postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_insert.php:85: eval('$_script = @' . $_attr[ 'script' ] . ';'); postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_compile_insert.php-86- if (!isset($compiler->smarty->security_policy) && file_exists($_script)) { ############################################## postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_runtime_tplfunction.php-114- // make PHP function known postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_runtime_tplfunction.php:115: eval($match[ 0 ]); postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_runtime_tplfunction.php-116- if (function_exists($_function)) { ############################################## postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_templatelexer.php-973- $this->yy_global_pattern5 = postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_templatelexer.php:974: $this->replace("/\G((SMARTYldel)SMARTYautoliteral\\s+SMARTYliteral)|\G((SMARTYldel)SMARTYalliteral\\s*SMARTYrdel)|\G((SMARTYldel)SMARTYal[\/]literal\\s*SMARTYrdel)|\G((SMARTYldel)SMARTYal[\/])|\G((SMARTYldel)SMARTYal[0-9]*[a-zA-Z_]\\w*)|\G((SMARTYldel)SMARTYal)|\G([\"])|\G([`][$])|\G([$][0-9]*[a-zA-Z_]\\w*)|\G([$])|\G(([^\"\\\\]*?)((?:\\\\.[^\"\\\\]*?)*?)(?=((SMARTYldel)SMARTYal|\\$|`\\$|\"SMARTYliteral)))|\G([\S\s])/isS"); postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_internal_templatelexer.php-975- } ############################################## postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_resource_recompiled.php-51- try { postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_resource_recompiled.php:52: eval('?>' . $_smarty_tpl->compiler->compileTemplate($_smarty_tpl)); postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_resource_recompiled.php-53- } catch (Exception $e) { ############################################## postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_template_compiled.php-251- if (defined('HHVM_VERSION')) { postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_template_compiled.php:252: eval('?>' . file_get_contents($this->filepath)); postfixadmin-3.2.4/lib/smarty/libs/sysplugins/smarty_template_compiled.php-253- } else { ############################################## postfixadmin-3.2.4/model/AdminHandler.php-155- ); postfixadmin-3.2.4/model/AdminHandler.php:156: $where = db_where_clause(array('username' => $this->id, 'domain' => 'ALL'), $this->struct); postfixadmin-3.2.4/model/AdminHandler.php-157- $result = db_query("SELECT username from " . table_by_key('domain_admins') . " " . $where); ############################################## postfixadmin-3.2.4/model/DomainHandler.php-281- $firstline=''; postfixadmin-3.2.4/model/DomainHandler.php:282: $firstline=exec($command, $output, $retval); postfixadmin-3.2.4/model/DomainHandler.php-283- if (0!=$retval) { ############################################## postfixadmin-3.2.4/model/DomainHandler.php-313- $firstline=''; postfixadmin-3.2.4/model/DomainHandler.php:314: $firstline=exec($command, $output, $retval); postfixadmin-3.2.4/model/DomainHandler.php-315- if (0!=$retval) { ############################################## postfixadmin-3.2.4/model/MailboxHandler.php-497- $table_mailbox = table_by_key('mailbox'); postfixadmin-3.2.4/model/MailboxHandler.php:498: $query = "SELECT SUM(quota) FROM $table_mailbox WHERE domain = '" . escape_string($domain) . "'"; postfixadmin-3.2.4/model/MailboxHandler.php-499- $query .= " AND username != '" . escape_string($this->id) . "'"; ############################################## postfixadmin-3.2.4/model/MailboxHandler.php-580- $firstline=''; postfixadmin-3.2.4/model/MailboxHandler.php:581: $firstline=exec($command, $output, $retval); postfixadmin-3.2.4/model/MailboxHandler.php-582- if (0!=$retval) { ############################################## postfixadmin-3.2.4/model/MailboxHandler.php-616- $firstline=''; postfixadmin-3.2.4/model/MailboxHandler.php:617: $firstline=exec($command, $output, $retval); postfixadmin-3.2.4/model/MailboxHandler.php-618- if (0!=$retval) { ############################################## postfixadmin-3.2.4/model/PFAHandler.php-651- if ($this->domain_field != "") { postfixadmin-3.2.4/model/PFAHandler.php:652: $additional_where .= " AND " . db_in_clause($this->domain_field, $this->allowed_domains); postfixadmin-3.2.4/model/PFAHandler.php-653- } ############################################## postfixadmin-3.2.4/model/PFAHandler.php-656- if ((!$this->is_admin) && $this->user_field != '') { postfixadmin-3.2.4/model/PFAHandler.php:657: $additional_where .= " AND " . $this->user_field . " = '" . escape_string($this->username) . "' "; postfixadmin-3.2.4/model/PFAHandler.php-658- } ############################################## postfixadmin-3.2.4/model/PFAHandler.php-665- } postfixadmin-3.2.4/model/PFAHandler.php:666: $additional_where .= " AND ( " . join(" OR ", $simple_search) . " ) "; postfixadmin-3.2.4/model/PFAHandler.php-667- unset($condition['_']); postfixadmin-3.2.4/model/PFAHandler.php-668- } postfixadmin-3.2.4/model/PFAHandler.php:669: $where = db_where_clause($condition, $this->struct, $additional_where, $searchmode); postfixadmin-3.2.4/model/PFAHandler.php-670- } else { ############################################## postfixadmin-3.2.4/model/PFAHandler.php-673- } postfixadmin-3.2.4/model/PFAHandler.php:674: $where = " WHERE ( $condition ) $additional_where"; postfixadmin-3.2.4/model/PFAHandler.php-675- } ############################################## postfixadmin-3.2.4/model/PFAHandler.php-814- $active = db_get_boolean(true); postfixadmin-3.2.4/model/PFAHandler.php:815: $query = "SELECT password FROM $table WHERE " . $this->id_field . "='$username' AND active='$active'"; postfixadmin-3.2.4/model/PFAHandler.php-816- ############################################## postfixadmin-3.2.4/model/PFAHandler.php-863- postfixadmin-3.2.4/model/PFAHandler.php:864: $query = "SELECT token FROM $table WHERE " . $this->id_field . "='$username' AND token <> '' AND active='$active' AND '$now' < token_validity"; postfixadmin-3.2.4/model/PFAHandler.php-865- ############################################## postfixadmin-3.2.4/model/VacationHandler.php-191- postfixadmin-3.2.4/model/VacationHandler.php:192: $sql = "SELECT * FROM $table_vacation WHERE email = '$E_username'"; postfixadmin-3.2.4/model/VacationHandler.php-193- $result = db_query($sql); ############################################## postfixadmin-3.2.4/model/VacationHandler.php-242- $table_vacation = table_by_key('vacation'); postfixadmin-3.2.4/model/VacationHandler.php:243: $result = db_query("SELECT * FROM $table_vacation WHERE email = '$E_username'"); postfixadmin-3.2.4/model/VacationHandler.php-244- if ($result['rows'] == 1) { ############################################## postfixadmin-3.2.4/public/backup.php-58-$cmd = "pg_dump -c -D -f /tix/miner/miner.sql -F p -N -U postgres $db"; postfixadmin-3.2.4/public/backup.php:59:$res = `$cmd`; postfixadmin-3.2.4/public/backup.php:60:// Alternate: $res = shell_exec($cmd); postfixadmin-3.2.4/public/backup.php-61-echo $res; ############################################## postfixadmin-3.2.4/public/backup.php-126- unlink("$backup"); postfixadmin-3.2.4/public/backup.php:127: fpassthru($download_backup); postfixadmin-3.2.4/public/backup.php-128-} ############################################## postfixadmin-3.2.4/public/broadcast-message.php-61- postfixadmin-3.2.4/public/broadcast-message.php:62: $q = "SELECT username from $table_mailbox WHERE active='" . db_get_boolean(true) . "' AND ".db_in_clause("domain", $wanted_domains); postfixadmin-3.2.4/public/broadcast-message.php-63- if (intval(safepost('mailboxes_only')) == 0) { postfixadmin-3.2.4/public/broadcast-message.php:64: $q .= " UNION SELECT goto FROM $table_alias WHERE active='" . db_get_boolean(true) . "' AND ".db_in_clause("domain", $wanted_domains)."AND goto NOT IN ($q)"; postfixadmin-3.2.4/public/broadcast-message.php-65- } ############################################## postfixadmin-3.2.4/public/calendar.js-335- b_ieMac = b_mac && b_ie5, postfixadmin-3.2.4/public/calendar.js:336: b_safari = b_mac && re_webkit.exec(s_userAgent) && Number(RegExp.$1) < 500; ############################################## postfixadmin-3.2.4/public/list-virtual.php-177-if (count($search) == 0 || !isset($search['_'])) { postfixadmin-3.2.4/public/list-virtual.php:178: $sql_where .= " $table_mailbox.domain='$fDomain' "; postfixadmin-3.2.4/public/list-virtual.php-179-} else { postfixadmin-3.2.4/public/list-virtual.php-180- $searchterm = escape_string($search['_']); postfixadmin-3.2.4/public/list-virtual.php:181: $sql_where .= db_in_clause("$table_mailbox.domain", $list_domains) . " "; postfixadmin-3.2.4/public/list-virtual.php:182: $sql_where .= " AND ( $table_mailbox.username LIKE '%$searchterm%' OR $table_mailbox.name LIKE '%$searchterm%' "; postfixadmin-3.2.4/public/list-virtual.php-183- if ($display_mailbox_aliases) { postfixadmin-3.2.4/public/list-virtual.php:184: $sql_where .= " OR $table_alias.goto LIKE '%$searchterm%' "; postfixadmin-3.2.4/public/list-virtual.php-185- } postfixadmin-3.2.4/public/list-virtual.php:186: $sql_where .= " ) "; # $search is already escaped postfixadmin-3.2.4/public/list-virtual.php-187-} ############################################## postfixadmin-3.2.4/public/list-virtual.php-208- $sql_join .= " LEFT JOIN $table_quota ON $table_mailbox.username=$table_quota.username "; postfixadmin-3.2.4/public/list-virtual.php:209: $sql_where .= " AND ( $table_quota.path='quota/storage' OR $table_quota.path IS NULL ) "; postfixadmin-3.2.4/public/list-virtual.php-210-} ############################################## postfixadmin-3.2.4/public/password-change.php-34-} postfixadmin-3.2.4/public/password-change.php:35:require_once($rel_path . 'common.php'); postfixadmin-3.2.4/public/password-change.php-36- ############################################## postfixadmin-3.2.4/public/password-recover.php-34-} postfixadmin-3.2.4/public/password-recover.php:35:require_once($rel_path . 'common.php'); postfixadmin-3.2.4/public/password-recover.php-36- ############################################## postfixadmin-3.2.4/public/password-recover.php-64- $table = table_by_key($context === 'users' ? 'mailbox' : 'admin'); postfixadmin-3.2.4/public/password-recover.php:65: $result = db_query("SELECT * FROM $table WHERE username='$tUsername'"); postfixadmin-3.2.4/public/password-recover.php-66- $row = db_assoc($result['result']); ############################################## postfixadmin-3.2.4/public/upgrade.php-18-function _pgsql_object_exists($name) { postfixadmin-3.2.4/public/upgrade.php:19: $sql = "select relname from pg_class where relname = '$name'"; postfixadmin-3.2.4/public/upgrade.php-20- $r = db_query($sql); ############################################## postfixadmin-3.2.4/public/upgrade.php-114- // check if table already exists, if so, don't recreate it postfixadmin-3.2.4/public/upgrade.php:115: $r = db_query("SELECT relname FROM pg_class WHERE relname = '$table'"); postfixadmin-3.2.4/public/upgrade.php-116- if ($r['rows'] == 0) { ############################################## postfixadmin-3.2.4/public/upgrade.php-344- $fieldlist = str_replace(',', '`,`', $fieldlist); # fix quoting if index contains multiple fields postfixadmin-3.2.4/public/upgrade.php:345: return "ALTER TABLE $table ADD INDEX `$indexname` ( `$fieldlist` )"; postfixadmin-3.2.4/public/upgrade.php-346- } elseif ($CONF['database_type'] == 'pgsql') { ############################################## postfixadmin-3.2.4/public/upgrade.php-948- CONSTRAINT `vacation_notification_pkey` postfixadmin-3.2.4/public/upgrade.php:949: FOREIGN KEY (`on_vacation`) REFERENCES $table_vacation(`email`) ON DELETE CASCADE postfixadmin-3.2.4/public/upgrade.php-950- ) ############################################## postfixadmin-3.2.4/public/upgrade.php-1419- # adding and usage of reply_type field removed in r1610 postfixadmin-3.2.4/public/upgrade.php:1420: # db_query_parsed("ALTER TABLE `$table_vacation` ADD `reply_type` VARCHAR( 20 ) NOT NULL AFTER `domain` "); postfixadmin-3.2.4/public/upgrade.php-1421- # obsoleted by upgrade_1610() postfixadmin-3.2.4/public/upgrade.php:1422: # db_query_parsed("ALTER TABLE `$table_vacation` ADD `interval_time` INT NOT NULL DEFAULT '0' AFTER `reply_type` "); postfixadmin-3.2.4/public/upgrade.php-1423-} ############################################## postfixadmin-3.2.4/public/upgrade.php-1716- if (!_sqlite_field_exists($table, 'phone')) { postfixadmin-3.2.4/public/upgrade.php:1717: db_query_parsed("ALTER TABLE `$table` ADD COLUMN `phone` varchar(30) NOT NULL DEFAULT ''"); postfixadmin-3.2.4/public/upgrade.php-1718- } postfixadmin-3.2.4/public/upgrade.php-1719- if (!_sqlite_field_exists($table, 'email_other')) { postfixadmin-3.2.4/public/upgrade.php:1720: db_query_parsed("ALTER TABLE `$table` ADD COLUMN `email_other` varchar(255) NOT NULL DEFAULT ''"); postfixadmin-3.2.4/public/upgrade.php-1721- } ############################################## postfixadmin-3.2.4/public/users/calendar.js-335- b_ieMac = b_mac && b_ie5, postfixadmin-3.2.4/public/users/calendar.js:336: b_safari = b_mac && re_webkit.exec(s_userAgent) && Number(RegExp.$1) < 500; ############################################## postfixadmin-3.2.4/public/users/password-change.php-34-} postfixadmin-3.2.4/public/users/password-change.php:35:require_once($rel_path . 'common.php'); postfixadmin-3.2.4/public/users/password-change.php-36- ############################################## postfixadmin-3.2.4/public/users/password-recover.php-34-} postfixadmin-3.2.4/public/users/password-recover.php:35:require_once($rel_path . 'common.php'); postfixadmin-3.2.4/public/users/password-recover.php-36- ############################################## postfixadmin-3.2.4/public/users/password-recover.php-64- $table = table_by_key($context === 'users' ? 'mailbox' : 'admin'); postfixadmin-3.2.4/public/users/password-recover.php:65: $result = db_query("SELECT * FROM $table WHERE username='$tUsername'"); postfixadmin-3.2.4/public/users/password-recover.php-66- $row = db_assoc($result['result']); ############################################## postfixadmin-3.2.4/public/viewlog.php-64- postfixadmin-3.2.4/public/viewlog.php:65: $query = "SELECT timestamp,username,domain,action,data FROM $table_log WHERE domain='$fDomain' ORDER BY timestamp DESC LIMIT $page_size"; postfixadmin-3.2.4/public/viewlog.php-66- if (db_pgsql()) { postfixadmin-3.2.4/public/viewlog.php:67: $query = "SELECT extract(epoch from timestamp) as timestamp,username,domain,action,data FROM $table_log WHERE domain='$fDomain' ORDER BY timestamp DESC LIMIT $page_size"; postfixadmin-3.2.4/public/viewlog.php-68- } ############################################## postfixadmin-3.2.4/scripts/postfixadmin-cli-29-self="$0" postfixadmin-3.2.4/scripts/postfixadmin-cli:30:test -L "$self" && self="`readlink -f \"$self\"`" postfixadmin-3.2.4/scripts/postfixadmin-cli-31- ############################################## postfixadmin-3.2.4/templates/list-virtual.tpl-52- {assign var="colspan" value=9} postfixadmin-3.2.4/templates/list-virtual.tpl:53: {if $CONF.vacation_control_admin===YES}{assign var="colspan" value="`$colspan+1`"}{/if} postfixadmin-3.2.4/templates/list-virtual.tpl:54: {if $CONF.alias_control_admin===YES}{assign var="colspan" value="`$colspan+1`"}{/if} postfixadmin-3.2.4/templates/list-virtual.tpl-55- <table id="mailbox_table"> ############################################## postfixadmin-3.2.4/templates/list-virtual_mailbox.tpl-16- <td>{$PALANG.active}</td> postfixadmin-3.2.4/templates/list-virtual_mailbox.tpl:17: {assign var="colspan" value="`$colspan-6`"} postfixadmin-3.2.4/templates/list-virtual_mailbox.tpl-18- <td colspan="{$colspan}"> </td>