  def show
    if params[:action] == 'show'
      Log.add_info(request, params.inspect)
    end

    begin
      @mail_filter = MailFilter.find(params[:id])
    rescue => evar
    end
    if @mail_filter.nil?
      render(:text => 'ERROR:' + t('msg.already_deleted', :name => MailFilter.model_name.human))
      return
    else
      if @mail_filter.mail_account.user_id != @login_user.id
        render(:text => 'ERROR:' + t('msg.need_to_be_owner'))
        return
      end
    end
    render(:action => 'show', :layout => (!request.xhr?))
  end
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.