fix sql escaping and sqlite error reporting

diff --git a/procmail/msgid-index b/procmail/msgid-index
index 102dacc0f9fb7f1b222ca8c58f9861f6c3d895f3..caccf830e28f34e44c1788b40339d06485e9c369 100644 (file)
--- a/procmail/msgid-index
+++ b/procmail/msgid-index
@@ -14,10 +14,9 @@ DATA="$FROM,$NL$ORIGINAL_TO,$NL$SUBJECT,$NL$MSGID"
 INCLUDERC=$PMDIR/sql-escape
 
 QUERY="insert into messages (sender, recipient, subject, msgid, filename, dest) values (
 INCLUDERC=$PMDIR/sql-escape
 
 QUERY="insert into messages (sender, recipient, subject, msgid, filename, dest) values (

-  $DATA, '\\'$THISLOGFILE_REL\\'', '\\'\$DESTFILE\\'');
-       select * from messages where filename = '\\'$THISLOGFILE_REL\\''"
-TRAP="$TRAP; case \"$($DO_QUERY '$QUERY')\" in '') 
-      echo 'msgid-index: failed to insert reference into database';; esac"
+  $DATA, '$THISLOGFILE_REL', '\$DESTFILE');"
+TRAP="$TRAP; OUT=\"$(echo \"$QUERY\" | $DO_QUERY 2>&1)\";
+      [ -n \"\$OUT\" ] && echo \"msgid-index: failed to insert reference into database: \$OUT\""

 
 QUERY
 DATA
 
 QUERY
 DATA

diff --git a/procmail/record-delayed-mail b/procmail/record-delayed-mail
index 72ff6b88d3faa064e4f394b9682fddab0e7c9439..c8256e1ed0d6ce82d33e4137e77e0caf4c02af99 100644 (file)
--- a/procmail/record-delayed-mail
+++ b/procmail/record-delayed-mail
@@ -8,10 +8,9 @@ DO_QUERY="$SQLITE $DELAYED_QUEUE_DB"
 DATA="$MSGID"
 INCLUDERC=$PMDIR/sql-escape
 
 DATA="$MSGID"
 INCLUDERC=$PMDIR/sql-escape
 

-QUERY="insert into messages values ($DATA, '\\'\$DESTFILE\\'', $RELEASE_TS);
-       select * from messages where msgid = $DATA"
-TRAP="$TRAP; case \"$($DO_QUERY '$QUERY')\" in '') 
-      echo 'delay:       failed to insert reference into database';; esac"
+QUERY="insert into messages values ($DATA, '\$DESTFILE', $RELEASE_TS);"
+TRAP="$TRAP; OUT=\"$(echo \"$QUERY\" | $DO_QUERY 2>&1)\";
+      [ -n \"\$OUT\" ] && echo \"delay:       failed register delayed mail in database: \$OUT\""

 
 QUERY
 DATA
 
 QUERY
 DATA

diff --git a/procmail/sql-escape b/procmail/sql-escape
index 08d0903f33b50eb69d57ed651b380fcef3894522..02c090a8d36398910c32402c3520af0a154a11e7 100644 (file)
--- a/procmail/sql-escape
+++ b/procmail/sql-escape
@@ -1,13 +1,13 @@
-SQ="'\\''"
-SQE="'\\\''"
-

 :0
 * DATA ?? .
 { 
 :0
 * DATA ?? .
 { 

+  # 1. replace ' with ''
+  # 2. add quotes to each line
+  # 3. swap comma outside

   DATA="`echo \"$DATA\" \
   DATA="`echo \"$DATA\" \

-    | sed -re 's,'\'','$SQE$SQE',g;' \
-          -e  's/^.*$/'\$SQE'&'\$SQE'/' \
-          -e  's/,'$SQE'$/'\$SQE',/'`"
+    | sed -re \"s,','',g\" \
+           -e \"s/^.*$/'&'/\" \
+           -e \"s/,'$/',/\"`"

 }
 
 :0 E
 }
 
 :0 E