Re: [On-Rev] Using Shell to Manipulate SQL

2011-08-15 Thread Bob Sneidar
If you are going to supply the functionality in your application of creating a new schema, you will need to get the user to supply credentials with create privileges for the database. Using root in a shell will not get you around this. Use "CREATE SCHEMA IF NOT EXISTS " and once you have your s

Re: [On-Rev] Using Shell to Manipulate SQL

2011-08-14 Thread Andre Garzia
Andrew, This is a quick email typed on a phone on an aiport so forgive me for not going to deep. Basically : don't do it! The dangers are too big. You should avoid using shell() with anything that comes from user input. If the user chooses a username such as: " && rm -rf * And this, in a

Re: [On-Rev] Using Shell to Manipulate SQL

2011-08-08 Thread Andrew Kluthe
Tested it out and it just seems I don't have access to the mySQL root account on my on-rev. Probably because its shared hosting. A simple grep for uptime: Enter password: ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO) -- View this message in context: http://r