[Exim4U] Re: Tainted search query is not properly quoted

24 Mar 2023


      On Mon, Mar 20, 2023 at 7:59 PM Odhiambo Washington <odhiambo(a)gmail.com>
wrote:
...
Hi Gordon et al,
Here is the solution:
warn  condition = ${if eq {$acl_m_greyexpiry}{} {1}}
        set acl_m_dontcare = ${lookup sqlite {INSERT INTO greylist \
                                        VALUES (
'${quote_sqlite:$acl_m_greyident)', \
'${eval10:$tod_epoch+300}', \
'${quote_sqlite:$sender_host_address}', \
'${quote_sqlite:$sender_helo_name}' );}}
CORRECTED: The old solution was wrong as I mistakenly used ) instead of }
at the end of acl_m_greyident.

warn  condition = ${if eq {$acl_m_greyexpiry}{} {1}}
        set acl_m_dontcare = ${lookup sqlite {INSERT INTO greylist \
                                        VALUES (
'${quote_sqlite:$acl_m_greyident}', \

 '${eval10:$tod_epoch+300}', \

 '${quote_sqlite:$sender_host_address}', \

 '${quote_sqlite:$sender_helo_name}' );}}

-- 
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-)