Ulf Wendel

2011/10/18
by admin
Comments Off on Uh, uh… SQL injection for auto EXPLAIN

Uh, uh… SQL injection for auto EXPLAIN

Would you like to see the EXPLAIN output for all MySQL queries of any PHP application without changing the application much? Easy-peasy: compile PHP to use the mysqlnd library, install PECL/mysqlnd_uh and paste 22 lines of evil code into your … Continue reading

2011/10/14
by admin
Comments Off on Uh, uh… faking or caching MySQL PHP results

Uh, uh… faking or caching MySQL PHP results

Unfortunately MySQL Proxy was no good source of inspiration today. MySQL Proxy can do many wonderful things which you can do with C based mysqlnd plugins as well. But not with PECL/mysqlnd_uh. PECL/mysqlnd_uh lets you write “plugins” in PHP. Given … Continue reading

2011/10/13
by admin
Comments Off on Uh, uh… PHP MySQL client fail over

Uh, uh… PHP MySQL client fail over

It is the third day I try to find mysqlnd plugin use cases for the Succeed with Plugins webinar on October, 26th. Not being innovative or creative today, I looked into a classic: client fail over. As a trained and … Continue reading

2011/10/12
by admin
Comments Off on Uh, uh… who caused that error? MySQL ?!

Uh, uh… who caused that error? MySQL ?!

Support nightmare: a customer reports a random PHP MySQL error. As a support expert you have the strong feeling that it is down to some suspicious SQL sequence. How to proof? 25 lines of PECL/mysqlnd_uh swiss-army knife magic… prepend.php class … Continue reading