=========================================================== .___ __ __ _________________ __ __ __| _/|__|/ |_ / ___\_` __ \__ \ | | \/ __ | | \\_ __\ / /_/ > | \// __ \| | / /_/ | | || | \___ /|__| (____ /____/\____ | |__||__| /_____/ \/ \/ grep rough audit - static analysis tool v2.8 written by @Wireghoul =================================[justanotherhacker.com]=== tt-rss-19.8+dfsg/classes/article.php-700- $res = $pdo->query("DELETE FROM ttrss_entries WHERE tt-rss-19.8+dfsg/classes/article.php:701: NOT EXISTS (SELECT ref_id FROM ttrss_user_entries WHERE ref_id = id) $limit_qpart"); tt-rss-19.8+dfsg/classes/article.php-702- ############################################## tt-rss-19.8+dfsg/classes/digest.php-27- $res = $pdo->query("SELECT id,email FROM ttrss_users tt-rss-19.8+dfsg/classes/digest.php:28: WHERE email != '' AND (last_digest_sent IS NULL OR $interval_qpart)"); tt-rss-19.8+dfsg/classes/digest.php-29- ############################################## tt-rss-19.8+dfsg/classes/feeds.php-925- SET unread = false,last_read = NOW() WHERE (SELECT COUNT(*) tt-rss-19.8+dfsg/classes/feeds.php:926: FROM ttrss_user_labels2, ttrss_entries WHERE article_id = ref_id AND id = ref_id AND $date_qpart AND $search_qpart) > 0 tt-rss-19.8+dfsg/classes/feeds.php-927- AND unread = true AND owner_uid = ?"); ############################################## tt-rss-19.8+dfsg/classes/feeds.php-1316- FROM ttrss_user_entries tt-rss-19.8+dfsg/classes/feeds.php:1317: WHERE unread = true AND ($match_part) tt-rss-19.8+dfsg/classes/feeds.php-1318- AND owner_uid = ?"); ############################################## tt-rss-19.8+dfsg/classes/handler/public.php-647- onchange="fetchProfiles()" onfocus="fetchProfiles()" onblur="fetchProfiles()" tt-rss-19.8+dfsg/classes/handler/public.php:648: required="1" value="<?php echo $_SESSION["fake_login"] ?>" /> tt-rss-19.8+dfsg/classes/handler/public.php-649- </fieldset> ############################################## tt-rss-19.8+dfsg/classes/handler/public.php-656- class="input input-text" tt-rss-19.8+dfsg/classes/handler/public.php:657: value="<?php echo $_SESSION["fake_password"] ?>"/> tt-rss-19.8+dfsg/classes/handler/public.php-658- </fieldset> ############################################## tt-rss-19.8+dfsg/classes/pluginhost.php-227- case $this::KIND_SYSTEM: tt-rss-19.8+dfsg/classes/pluginhost.php:228: if ($this->is_system($plugin)) { tt-rss-19.8+dfsg/classes/pluginhost.php-229- if (!$skip_init) $plugin->init($this); ############################################## tt-rss-19.8+dfsg/classes/pluginhost.php-233- case $this::KIND_USER: tt-rss-19.8+dfsg/classes/pluginhost.php:234: if (!$this->is_system($plugin)) { tt-rss-19.8+dfsg/classes/pluginhost.php-235- if (!$skip_init) $plugin->init($this); ############################################## tt-rss-19.8+dfsg/classes/pluginhost.php-248- tt-rss-19.8+dfsg/classes/pluginhost.php:249: function is_system($plugin) { tt-rss-19.8+dfsg/classes/pluginhost.php-250- $about = $plugin->about(); ############################################## tt-rss-19.8+dfsg/classes/pluginhost.php-259- tt-rss-19.8+dfsg/classes/pluginhost.php:260: if ($this->is_system($sender)) { tt-rss-19.8+dfsg/classes/pluginhost.php-261- if (!is_array($this->handlers[$handler])) { ############################################## tt-rss-19.8+dfsg/classes/pluginhost.php-272- tt-rss-19.8+dfsg/classes/pluginhost.php:273: if ($this->is_system($sender)) { tt-rss-19.8+dfsg/classes/pluginhost.php-274- unset($this->handlers[$handler][$method]); ############################################## tt-rss-19.8+dfsg/classes/pluginhost.php-450- function add_api_method($name, $sender) { tt-rss-19.8+dfsg/classes/pluginhost.php:451: if ($this->is_system($sender)) { tt-rss-19.8+dfsg/classes/pluginhost.php-452- $this->api_methods[strtolower($name)] = $sender; ############################################## tt-rss-19.8+dfsg/classes/pref/filters.php-215- tt-rss-19.8+dfsg/classes/pref/filters.php:216: $where = implode(", ", $feeds_fmt); tt-rss-19.8+dfsg/classes/pref/filters.php-217- ############################################## tt-rss-19.8+dfsg/classes/pref/filters.php-219- tt-rss-19.8+dfsg/classes/pref/filters.php:220: $where = $line["cat_filter"] ? tt-rss-19.8+dfsg/classes/pref/filters.php-221- Feeds::getCategoryTitle($line["cat_id"]) : ############################################## tt-rss-19.8+dfsg/classes/pref/filters.php-225- tt-rss-19.8+dfsg/classes/pref/filters.php:226:# $where = $line["cat_id"] . "/" . $line["feed_id"]; tt-rss-19.8+dfsg/classes/pref/filters.php-227- ############################################## tt-rss-19.8+dfsg/include/functions.php-284- tt-rss-19.8+dfsg/include/functions.php:285: $ret = @curl_exec($ch); tt-rss-19.8+dfsg/include/functions.php-286- ############################################## tt-rss-19.8+dfsg/include/functions.php-307- curl_setopt($ch, CURLOPT_ENCODING, 'none'); tt-rss-19.8+dfsg/include/functions.php:308: $contents = @curl_exec($ch); tt-rss-19.8+dfsg/include/functions.php-309- } ############################################## tt-rss-19.8+dfsg/include/login_form.php-74- <?php if ($_SESSION["login_error_msg"]) { ?> tt-rss-19.8+dfsg/include/login_form.php:75: <?php echo format_error($_SESSION["login_error_msg"]) ?> tt-rss-19.8+dfsg/include/login_form.php-76- <?php $_SESSION["login_error_msg"] = ""; ?> ############################################## tt-rss-19.8+dfsg/include/login_form.php-82- onchange="fetchProfiles()" onfocus="fetchProfiles()" onblur="fetchProfiles()" tt-rss-19.8+dfsg/include/login_form.php:83: required="1" value="<?php echo $_SESSION["fake_login"] ?>" /> tt-rss-19.8+dfsg/include/login_form.php-84- </fieldset> ############################################## tt-rss-19.8+dfsg/include/login_form.php-91- class="input input-text" tt-rss-19.8+dfsg/include/login_form.php:92: value="<?php echo $_SESSION["fake_password"] ?>"/> tt-rss-19.8+dfsg/include/login_form.php-93- ############################################## tt-rss-19.8+dfsg/js/Article.js-157- tt-rss-19.8+dfsg/js/Article.js:158: comments = `<a href="${hl.comments}">(${comments_msg})</a>`; tt-rss-19.8+dfsg/js/Article.js-159- } ############################################## tt-rss-19.8+dfsg/js/tt-rss.js-103- if (! (wf in window)) { tt-rss-19.8+dfsg/js/tt-rss.js:104: errorMsg = `Browser feature check failed: <code>window.${wf}</code> not found.`; tt-rss-19.8+dfsg/js/tt-rss.js-105- throw $break; ############################################## tt-rss-19.8+dfsg/lib/gettext/gettext.php-364- tt-rss-19.8+dfsg/lib/gettext/gettext.php:365: eval("$string"); tt-rss-19.8+dfsg/lib/gettext/gettext.php-366- if ($plural >= $total) $plural = $total - 1; ############################################## tt-rss-19.8+dfsg/plugins/af_redditimgur/init.php-519- tt-rss-19.8+dfsg/plugins/af_redditimgur/init.php:520: @curl_exec($ch); tt-rss-19.8+dfsg/plugins/af_redditimgur/init.php-521- $ret = curl_getinfo($ch, $header); ############################################## tt-rss-19.8+dfsg/plugins/af_tumblr_1280/init.php-52- tt-rss-19.8+dfsg/plugins/af_tumblr_1280/init.php:53: @$result = curl_exec($ch); tt-rss-19.8+dfsg/plugins/af_tumblr_1280/init.php-54- $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE); ############################################## tt-rss-19.8+dfsg/plugins/af_unburn/init.php-43- tt-rss-19.8+dfsg/plugins/af_unburn/init.php:44: @curl_exec($ch); tt-rss-19.8+dfsg/plugins/af_unburn/init.php-45- ############################################## tt-rss-19.8+dfsg/plugins/auth_internal/init.php-66- <input type="hidden" name="password" value="<?php echo htmlspecialchars($password) ?>"> tt-rss-19.8+dfsg/plugins/auth_internal/init.php:67: <input type="hidden" name="bw_limit" value="<?php echo htmlspecialchars($_POST["bw_limit"]) ?>"> tt-rss-19.8+dfsg/plugins/auth_internal/init.php:68: <input type="hidden" name="remember_me" value="<?php echo htmlspecialchars($_POST["remember_me"]) ?>"> tt-rss-19.8+dfsg/plugins/auth_internal/init.php:69: <input type="hidden" name="profile" value="<?php echo htmlspecialchars($_POST["profile"]) ?>"> tt-rss-19.8+dfsg/plugins/auth_internal/init.php-70- ############################################## tt-rss-19.8+dfsg/update.php-35- FROM ttrss_tags, ttrss_user_entries, ttrss_entries tt-rss-19.8+dfsg/update.php:36: WHERE post_int_id = int_id AND $interval_query AND tt-rss-19.8+dfsg/update.php-37- ref_id = ttrss_entries.id AND tag_cache != '' LIMIT ?"); ############################################## tt-rss-19.8+dfsg/update.php-234- tt-rss-19.8+dfsg/update.php:235: passthru(PHP_EXECUTABLE . " " . $argv[0] ." --daemon-loop $quiet $log $log_level"); tt-rss-19.8+dfsg/update.php-236- ############################################## tt-rss-19.8+dfsg/update_daemon2.php-253- tt-rss-19.8+dfsg/update_daemon2.php:254: passthru(PHP_EXECUTABLE . " update.php --daemon-loop $quiet $log --task $j --pidlock $my_pid"); tt-rss-19.8+dfsg/update_daemon2.php-255- ############################################## tt-rss-19.8+dfsg/utils/update-translations.sh-22- echo Updating $lang... tt-rss-19.8+dfsg/utils/update-translations.sh:23: PO_BASENAME=`echo $lang | sed s/.po//` tt-rss-19.8+dfsg/utils/update-translations.sh-24- update_lang $PO_BASENAME ############################################## tt-rss-19.8+dfsg/vendor/Psr/Log/NullLogger.php-9- * library creating a NullLogger instance to have something to throw logs at tt-rss-19.8+dfsg/vendor/Psr/Log/NullLogger.php:10: * is a good way to avoid littering your code with `if ($this->logger) { }` tt-rss-19.8+dfsg/vendor/Psr/Log/NullLogger.php-11- * blocks. ############################################## tt-rss-19.8+dfsg/debian/postinst-29- KEY="$1" tt-rss-19.8+dfsg/debian/postinst:30: VAL=`echo "$2" | sed 's~/~\\\/~g'` tt-rss-19.8+dfsg/debian/postinst-31- perl -p -i -e "s/define\('$KEY', '(.*)'\);/define('$KEY', '$VAL');/g" /etc/tt-rss/config.php ############################################## tt-rss-19.8+dfsg/.pc/remove-tt-rss-layer.patch/include/login_form.php-75- <?php if ($_SESSION["login_error_msg"]) { ?> tt-rss-19.8+dfsg/.pc/remove-tt-rss-layer.patch/include/login_form.php:76: <?php echo format_error($_SESSION["login_error_msg"]) ?> tt-rss-19.8+dfsg/.pc/remove-tt-rss-layer.patch/include/login_form.php-77- <?php $_SESSION["login_error_msg"] = ""; ?> ############################################## tt-rss-19.8+dfsg/.pc/remove-tt-rss-layer.patch/include/login_form.php-83- onchange="fetchProfiles()" onfocus="fetchProfiles()" onblur="fetchProfiles()" tt-rss-19.8+dfsg/.pc/remove-tt-rss-layer.patch/include/login_form.php:84: required="1" value="<?php echo $_SESSION["fake_login"] ?>" /> tt-rss-19.8+dfsg/.pc/remove-tt-rss-layer.patch/include/login_form.php-85- </fieldset> ############################################## tt-rss-19.8+dfsg/.pc/remove-tt-rss-layer.patch/include/login_form.php-92- class="input input-text" tt-rss-19.8+dfsg/.pc/remove-tt-rss-layer.patch/include/login_form.php:93: value="<?php echo $_SESSION["fake_password"] ?>"/> tt-rss-19.8+dfsg/.pc/remove-tt-rss-layer.patch/include/login_form.php-94-