kienan
/
AlternC
mirror of https://github.com/kienanstewart/AlternC.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Fixing SQL queries on fix_quota_script

This commit is contained in:
Steven Mondji-Lerider 2014-03-18 15:48:39 +00:00
parent adaa1cbf78
commit d7e44f384f
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/fix_dovecot_quota.php
View File

@ -31,7 +31,6 @@ if ( $nb2 != 1 ){
exit(1); exit(1);
} }
#function taking a query used to select the mailbox(es) root and updating their quotas into the mailbox table #function taking a query used to select the mailbox(es) root and updating their quotas into the mailbox table
function FixQuotaDovecot($conditions){ function FixQuotaDovecot($conditions){
global $db; global $db;
@ -41,7 +40,7 @@ function FixQuotaDovecot($conditions){
mailbox mailbox
join address on address.id = mailbox.address_id join address on address.id = mailbox.address_id
join domaines on domaines.id = address.domain_id join domaines on domaines.id = address.domain_id
WHERE $conditions ;"; $conditions ;";
if(!$db->query($query)){ if(!$db->query($query)){
usage("failed"); // FIXME real error usage("failed"); // FIXME real error
@ -65,7 +64,7 @@ switch($opt){
usage("The email you entered is syntaxically incorrect"); usage("The email you entered is syntaxically incorrect");
exit(1); exit(1);
} }
$cond = "concat(address.address,'@',domaines.domaine) ='".$val ; $cond = "WHERE concat(address.address,'@',domaines.domaine) ='".$val."'" ;
break; break;
case "l": case "l":
$login=strtolower($val); $login=strtolower($val);
@ -73,14 +72,14 @@ switch($opt){
usage("the login you entered is syntaxically incorrect"); usage("the login you entered is syntaxically incorrect");
exit(1); exit(1);
} }
$cond = "membres.login = ".mysql_real_escape_string($login) ; $cond = "join membres on domaines.compte = membres.uid WHERE membres.login = '".mysql_real_escape_string($login)."'";
break; break;
case "d": case "d":
if(checkfqdn($val) != 0){ if(checkfqdn($val) != 0){
usage("The domain you entered is syntaxically incorrect"); usage("The domain you entered is syntaxically incorrect");
exit(1); exit(1);
} }
$cond = "domaines.domaine = ".mysql_real_escape_string($val) ; $cond = "WHERE domaines.domaine = '".mysql_real_escape_string($val)."'" ;
break; break;
default: default:
usage(); usage();