From the post:
$id = $q->param('id');
$stmt = "select envip,mailfile,headers,subject,size,fromid,toid,date from quamail where id = $id";
Yikes. His claimed expertise is "Protect your e-mail server from ransomware attacks" too.