  def self.execute_action_move(mail_filter, email, val)

    mail_folder_id = val

    mail_folder = MailFolder.find_by_id(mail_folder_id)
    if !mail_folder.nil? and (mail_folder.user_id == email.user_id)
      email.update_attribute(:mail_folder_id, mail_folder_id)
    end

    return true
  end
The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.