RE: Re: [PHP] Are there free http mysql tunneling writed in php ?

---- "Boyd wrote: > > -----Original Message----- > > From: Per Jessen [mailto:per@computer.org] > > Sent: Thursday, June 05, 2008 3:06 AM > > To: php-general@lists.php.net > > Subject: Re: [PHP] Are there free http mysql tunneling writed in php ? > > > > KLEIN Stéphane wrote: > > > > > Hi, > > > > > > do you know one free (open source) http mysql tunneling writed in php > > > ? > > > > I don't know of any specific implementation, but surely you can write > > one in about 60 seconds. > > > > get > > http://domain/run-this-sql?db=database&text=blahblahblah > > > > I'm sure you get the idea. > > From a security standpoint, this is wiiiiiiiide open for SQL injection. I would recommend > against using something like this for performing SQL queries, as malicious SQL would be easy as pie > to execute. Of course, you can place the script behind layers of security... but ad-hoc queries are > a dangerous beast. > > > Todd Boyd > Web Programmer Well DUH, but then you should already know that we on this list don't CODE everything for some and that the general consensus is secure your own code. Wolf