Re: [exim] Tainted search query is not properly quoted

2023-03-20 Thread Odhiambo Washington via Exim-users 
On Mon, Mar 20, 2023 at 7:27 PM Jeremy Harris via Exim-users <
exim-users@exim.org> wrote:

> On 20/03/2023 15:14, Odhiambo Washington via Exim-users wrote:
> > What mod do I need to make on it?
>
> Quote it.  Like you already are for $sender_helo_name.
> --
> Cheers,
>Jeremy
>

That has now eliminated the error.

Thank you.


-- 
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-)
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Tainted search query is not properly quoted

2023-03-20 Thread Jeremy Harris via Exim-users 

On 20/03/2023 15:14, Odhiambo Washington via Exim-users wrote:

What mod do I need to make on it?


Quote it.  Like you already are for $sender_helo_name.
--
Cheers,
  Jeremy


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Tainted search query is not properly quoted

2023-03-20 Thread Odhiambo Washington via Exim-users 
On Sun, Mar 19, 2023 at 2:31 PM Jeremy Harris via Exim-users <
exim-users@exim.org> wrote:

> On 19/03/2023 10:58, Odhiambo Washington via Exim-users wrote:
> >   warn  condition= ${if eq {$acl_m_greyexpiry}{} {1}}
> >  set acl_m_dontcare = ${lookup sqlite {INSERT INTO greylist \
> >VALUES ( '$acl_m_greyident', \
> >
> >   '${eval10:$tod_epoch+300}', \
> >
> >   '${quote_sqlite:$sender_host_address}', \
> >
> >   '${quote_sqlite:$sender_helo_name}' );}}
> >
> >
> > It's not obvious to me what I haven't quoted properly.
>
> The only obvious element is your $acl_m_greyindent, since $tod_epoch
> shouldn't be derived from wire information.  The debug "expand" channel
> would show you for definite.
>

That comes from this:

 # Generate a hashed 'identity' for the mail, as described above.
 warn set acl_m_greyident =
${hash{20}{62}{$sender_address$recipients$h_message-id:}}

What mod do I need to make on it?

Thanks

-- 
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-)
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/