Mirrors/mailcow-dockerized
1
0
Fork 0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2026-01-23 02:14:26 +00:00
Code Issues Projects Releases Wiki Activity

[Web] clear old app_passwd log entries

Browse source
This commit is contained in:
FreddleSpl0it 2025-10-07 10:37:44 +02:00
parent c2948735f2
commit 455ef084b4
No known key found for this signature in database
GPG key ID: 00E14E7634F4BEC5
1 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

12
data/web/inc/init_db.inc.php
View file

@ -1338,12 +1338,12 @@ function init_db_schema()
}
// Clear old app_passwd log entries
if ($db_version == "07102025_1015") {
$pdo->query("DELETE FROM logs
WHERE JSON_EXTRACT(`call`, '$[0]') = 'app_passwd'
AND JSON_EXTRACT(`call`, '$[1]') = 'edit'
AND role != 'unauthenticated';");
}
$pdo->exec("DELETE FROM logs
WHERE role != 'unauthenticated'
AND JSON_EXTRACT(`call`, '$[0]') = 'app_passwd'
AND JSON_EXTRACT(`call`, '$[1]') = 'edit'
AND (JSON_CONTAINS_PATH(`call`, 'one', '$[2].password')
OR JSON_CONTAINS_PATH(`call`, 'one', '$[2].password2'));");
// Mitigate imapsync argument injection issue
$pdo->query("UPDATE `imapsync` SET `custom_params` = ''