Re: hiding passwd in cmdlines that appear in the process list

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Ah.. makes sense.   Good old DOS is stupid enough not to card most times.  You can create a text file with a "Y" in it, and redirect it into a command like:

del . < y.txt


Guess that's not a pipe technically.  And some commands may be smart enough to prevent something like this.

Thanks for the info Stut!

-TG

= = = Original message = = =

tg-php@xxxxxxxxxxxxxxxxxxxxxx wrote:
> I don't know if this would work, but maybe something like this:
>
> cat /my/sql/root/passwd/file | mysql -h localhost --user=admin -D somedb < "/my/import/script.sql" 2>&1
>
> No idea if that'd work, but it might put you in the right ballpark.

You can't do this. The pipe gets overridden by the stdin redirect (at 
least it does on FreeBSD 5.4).

Jochem: You need to read this... 
http://dev.mysql.com/doc/refman/5.0/en/password-security.html

-Stut



___________________________________________________________
Sent by ePrompter, the premier email notification software.
Free download at http://www.ePrompter.com.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux