RE: Re: Are there free http mysql tunneling writed in php ?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> -----Original Message-----
> From: Per Jessen [mailto:per@xxxxxxxxxxxx]
> Sent: Thursday, June 05, 2008 3:06 AM
> To: php-general@xxxxxxxxxxxxx
> Subject: Re:  Are there free http mysql tunneling writed in php ?
> 
> KLEIN Stéphane wrote:
> 
> > Hi,
> >
> > do you know one free (open source) http mysql tunneling writed in php
> > ?
> 
> I don't know of any specific implementation, but surely you can write
> one in about 60 seconds.
> 
> get http://domain/run-this-sql?db=database&text=blahblahblah
> 
> I'm sure you get the idea.

>From a security standpoint, this is wiiiiiiiide open for SQL injection. I would recommend against using something like this for performing SQL queries, as malicious SQL would be easy as pie to execute. Of course, you can place the script behind layers of security... but ad-hoc queries are a dangerous beast.


Todd Boyd
Web Programmer





[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux