Ulf Wendel

2011/10/18
by admin
Comments Off on Uh, uh… SQL injection for auto EXPLAIN

Uh, uh… SQL injection for auto EXPLAIN

Would you like to see the EXPLAIN output for all MySQL queries of any PHP application without changing the application much? Easy-peasy: compile PHP to use the mysqlnd library, install PECL/mysqlnd_uh and paste 22 lines of evil code into your … Continue reading