Re: [On-Rev] Using Shell to Manipulate SQL

2011-08-15 Thread Bob Sneidar
If you are going to supply the functionality in your application of creating a new schema, you will need to get the user to supply credentials with create privileges for the database. Using root in a shell will not get you around this. Use "CREATE SCHEMA IF NOT EXISTS " and once you have your s

Re: [On-Rev] Using Shell to Manipulate SQL

2011-08-14 Thread Andre Garzia
Andrew, This is a quick email typed on a phone on an aiport so forgive me for not going to deep. Basically : don't do it! The dangers are too big. You should avoid using shell() with anything that comes from user input. If the user chooses a username such as: " && rm -rf * And this, in a

Re: [On-Rev] Using Shell to Manipulate SQL

2011-08-08 Thread Andrew Kluthe
message in context: http://runtime-revolution.278305.n4.nabble.com/On-Rev-Using-Shell-to-Manipulate-SQL-tp3728813p3728823.html Sent from the Revolution - User mailing list archive at Nabble.com. ___ use-livecode mailing list use-livecode@lists.runrev.com

[On-Rev] Using Shell to Manipulate SQL

2011-08-08 Thread Andrew Kluthe
Here is another thing I am wondering about this evening. I am curious as to how much power the Shell() function in an On-Rev configuration is. I'd like to create mySQL databases & users on the fly. I know the shell() function can run commands for you, but do you think I will be able to create mys