{"id":665,"date":"2010-05-20T17:13:56","date_gmt":"2010-05-20T15:13:56","guid":{"rendered":"http:\/\/blog.benny-baumann.de\/?p=665"},"modified":"2010-05-20T17:13:56","modified_gmt":"2010-05-20T15:13:56","slug":"squirrelmail-mime-decoding-ohne-preg_replace-e","status":"publish","type":"post","link":"https:\/\/blog.benny-baumann.de\/?p=665","title":{"rendered":"SquirrelMail: MIME-Decoding ohne preg_replace \/e"},"content":{"rendered":"<p>Okay und mal wieder gibt&#8217;s hier einen Patch, um SquirrelMail von unn\u00f6tigen Eval-Aufrufen zu bereinigen. Diesmal in dem Teil von SquirrelMail, der f\u00fcr das Dekodieren von MIME-kodierten Mails sorgt. Konkret geht es hierbei aber weniger um die MIME-Dekodierung selber als vielmehr um das Verarbeiten der Header-Daten.<!--more--><\/p>\n<p>Da ich aber zu SquirrelMail schon genug gesagt habe, lass ich es (ich bin es leid, mich diesbez\u00fcglich immer wieder Redundanz erzeugen zu m\u00fcssen. Von daher: Hier ist der Patch:<\/p>\n<pre lang=\"diff\">--- mime.php        2010-05-20 16:42:58.000000000 +0200\r\n+++ mime.php    2010-05-20 17:03:49.000000000 +0200\r\n@@ -626,6 +626,16 @@\r\n }\r\n\r\n \/**\r\n+ * Helper function for Header field Decoding\r\n+ *\r\n+ * This function decodes quoted-printable-escaped character sequences into\r\n+ * their original byte values, i.e. from =40 into @\r\n+ *\/\r\n+function decodeHeader_charDecode($m) {\r\n+    return chr(hexdec($m[1]));\r\n+}\r\n+\r\n+\/**\r\n  * Decodes headers\r\n  *\r\n  * This functions decode strings that is encoded according to\r\n@@ -704,8 +714,7 @@\r\n                     break;\r\n                 case 'Q':\r\n                     $replace = str_replace('_', ' ', $res[4]);\r\n-                    $replace = preg_replace('\/=([0-9a-f]{2})\/ie', 'chr(hexdec(\"\\1\"))',\r\n-                            $replace);\r\n+                    $replace = preg_replace_callback('\/=([0-9a-f]{2})\/i', 'decodeHeader_charDecode', $replace);\r\n                     if ($can_be_encoded) {\r\n                         \/\/ string is converted from one charset to another. sanitizing depends on $htmlsave\r\n                         $replace = charset_convert($res[2], $replace,$default_charset,$htmlsave);<\/pre>\n<p>Die \u00c4nderung sollte soweit klar sein. Falls noch was dazu kommt, erg\u00e4nze ich das noch. Bei einem weiteren kurzen Blick durch diese Datei ist mir aber nichts aufgefallen.<\/p>\n<p class=\"wp-flattr-button\"><a href=\"https:\/\/blog.benny-baumann.de\/?flattrss_redirect&amp;id=665&amp;md5=bd790b8c4a5fe761d12055403f413e71\" title=\"Flattr\" target=\"_blank\"><img src=\"http:\/\/blog.benny-baumann.de\/wp-content\/plugins\/flattr\/img\/flattr-badge-large.png\" srcset=\"http:\/\/blog.benny-baumann.de\/wp-content\/plugins\/flattr\/img\/flattr-badge-large.png\" alt=\"Flattr this!\"\/><\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Okay und mal wieder gibt&#8217;s hier einen Patch, um SquirrelMail von unn\u00f6tigen Eval-Aufrufen zu bereinigen. Diesmal in dem Teil von SquirrelMail, der f\u00fcr das Dekodieren von MIME-kodierten Mails sorgt. Konkret geht es hierbei aber weniger um die MIME-Dekodierung selber als vielmehr um das Verarbeiten der Header-Daten.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[29],"tags":[14,98,13,215,21,275],"class_list":["post-665","post","type-post","status-publish","format-standard","hentry","category-software","tag-bugs","tag-developement","tag-patch","tag-pcre","tag-php","tag-squirrelmail"],"_links":{"self":[{"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=\/wp\/v2\/posts\/665","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=665"}],"version-history":[{"count":1,"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=\/wp\/v2\/posts\/665\/revisions"}],"predecessor-version":[{"id":666,"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=\/wp\/v2\/posts\/665\/revisions\/666"}],"wp:attachment":[{"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.benny-baumann.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}