Re: hiding passwd in cmdlines that appear in the process list

From: Date: Wed, 29 Nov 2006 16:58:29 +0000
Subject: Re: hiding passwd in cmdlines that appear in the process list
Groups: php.general 
Request: Send a blank email to php-general+get-245289@lists.php.net to get a copy of this message
Ah.. makes sense. Good old DOS is stupid enough not to card most times. You can create a text file with a "Y" in it, and redirect it into a command like: del . < y.txt Guess that's not a pipe technically. And some commands may be smart enough to prevent something like this. Thanks for the info Stut! -TG = = = Original message = = = tg-php@gryffyndevelopment.com wrote: > I don't know if this would work, but maybe something like this: > > cat /my/sql/root/passwd/file | mysql -h localhost --user=admin -D somedb < > "/my/import/script.sql" 2>&1 > > No idea if that'd work, but it might put you in the right ballpark. You can't do this. The pipe gets overridden by the stdin redirect (at least it does on FreeBSD 5.4). Jochem: You need to read this... http://dev.mysql.com/doc/refman/5.0/en/password-security.html -Stut ___________________________________________________________ Sent by ePrompter, the premier email notification software. Free download at http://www.ePrompter.com.

« previous php.general (#245289) next »