  def do_execute
    Log.add_info(request, params.inspect)

    mail_account = MailAccount.find_by_id(params[:mail_account_id])
    mail_folder = MailFolder.find_by_id(params[:mail_folder_id])

    if mail_account.user_id != @login_user.id \
        or mail_folder.user_id != @login_user.id
      render(:text => t('msg.need_to_be_owner'))
      return
    end

    mail_filters = MailFilter.get_for(mail_account.id, true, MailFilter::TRIGGER_MANUAL)
    emails = MailFolder.get_mails(mail_folder.id, mail_folder.user_id)

    filter_next = true
    emails.each do |email|
      mail_filters.each do |filter|
        filter_next = filter.execute(email)
        break unless filter_next
      end
      break unless filter_next
    end

    render(:text => '')
  end
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.