RE: Re: [PHP] Are there free http mysql tunneling writed in php ?
| From: | Boyd, Todd M. | Date: | Thu, 05 Jun 2008 15:10:22 +0000 |
| Subject: | RE: Re: [PHP] Are there free http mysql tunneling writed in php ? | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-275059@lists.php.net to get a copy of this message | ||
> -----Original Message-----
> From: Per Jessen [mailto:per@computer.org]
> Sent: Thursday, June 05, 2008 3:06 AM
> To: php-general@lists.php.net
> Subject: Re: [PHP] Are there free http mysql tunneling writed in php ?
>
> KLEIN Stéphane wrote:
>
> > Hi,
> >
> > do you know one free (open source) http mysql tunneling writed in php
> > ?
>
> I don't know of any specific implementation, but surely you can write
> one in about 60 seconds.
>
> get
> http://domain/run-this-sql?db=database&text=blahblahblah
>
> I'm sure you get the idea.
From a security standpoint, this is wiiiiiiiide open for SQL injection. I would recommend against
using something like this for performing SQL queries, as malicious SQL would be easy as pie to
execute. Of course, you can place the script behind layers of security... but ad-hoc queries are a
dangerous beast.
Todd Boyd
Web Programmer