Re: hiding passwd in cmdlines that appear in the process list
| From: | tg-php at gryffyndevelopment dot com | Date: | Wed, 29 Nov 2006 16:58:29 +0000 |
| Subject: | Re: hiding passwd in cmdlines that appear in the process list | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-245289@lists.php.net to get a copy of this message | ||
Ah.. makes sense. Good old DOS is stupid enough not to card most times. You can create a text
file with a "Y" in it, and redirect it into a command like:
del . < y.txt
Guess that's not a pipe technically. And some commands may be smart enough to prevent
something like this.
Thanks for the info Stut!
-TG
= = = Original message = = =
tg-php@gryffyndevelopment.com wrote:
> I don't know if this would work, but maybe something like this:
>
> cat /my/sql/root/passwd/file | mysql -h localhost --user=admin -D somedb <
> "/my/import/script.sql" 2>&1
>
> No idea if that'd work, but it might put you in the right ballpark.
You can't do this. The pipe gets overridden by the stdin redirect (at
least it does on FreeBSD 5.4).
Jochem: You need to read this...
http://dev.mysql.com/doc/refman/5.0/en/password-security.html
-Stut
___________________________________________________________
Sent by ePrompter, the premier email notification software.
Free download at http://www.ePrompter.com.