How do I determine if versions of phpMyAdmin before 4.8.5 is SQL Injectable using sqlmap?
Subject/Topic: How do I determine if versions of phpMyAdmin before 4.8.5 is SQL Injectable using sqlmap? Good evening from Singapore, Our customer (company name is Confidential/not disclosed) reported that their MySQL database has been found missing or was deleted a few times. They are using Ubuntu 16.04 LTS Linux server with Apache2 Web Server, MySQL and PHP (LAMP). We responded to these security incidents by changing the passwords of the regular user, root user, and MySQL database user root. We have also examined /var/log/auth.log and think that the hacker could not have come in through ssh or sftp over ssh. From /var/log/mysql/error.log, we can ascertain that the MySQL database has been deleted at certain timings. We have also found nothing abnormal after examining /var/log/apache2/access.log. Even though we have secured the Ubuntu Linux server by changing passwords, the hacker was still able to delete our customer's MySQL database again and again. I have already proposed to install ModSecurity Open Source Web Application Firewall (WAF) to defend against web application attacks but my boss has told me to put that on hold at the moment. In fact, I have already deployed ModSecurity 2.9.0 on a Ubuntu 16.04 LTS *Testing* server and found that it actively detects and logs Nessus and sqlmap vulnerability scans in blocking mode. Since we did not find any evidence that the hacker had breached our customer's Ubuntu 16.04 LTS production server through ssh or Teamviewer, we suspect that the hacker could have achieved it by SQL injection. I took the initiative of downloading and installing Nessus Professional 8.3.1 Trial version for Windows 64-bit. The vulnerability scan report generated by Nessus Web Application Tests shows that our customer is using a version of phpMyAdmin prior to 4.8.5 which could be vulnerable to SQL injection using the designer feature. Further research shows that I can use sqlmap to determine if phpMyAdmin is SQL injectable. I already have a Testing Ubuntu 16.04 LTS Linux server with a Testing MySQL database and a Testing phpMyAdmin 4.8.4. I have purposely installed phpMyAdmin 4.8.4 because this version was reported to be vulnerable to SQL injection using the designer feature, and our customer is using a vulnerable version, according to CVE-2019-6798 ( https://nvd.nist.gov/vuln/detail/CVE-2019-6798 ). Then I proceeded to download and execute sqlmap on our Ubuntu Linux desktop against our Testing server. No matter how many commands I try, sqlmap always report that phpMyAdmin 4.8.4 is *NOT* SQL injectable. Perhaps I was using the wrong sqlmap commands all the time? The following is one of the many sqlmap commands I have used. $ python sqlmap.py -u "https://www.EXAMPLE.com/phymyadmin/index.php?id=1; --level=1 --dbms=mysql --sql-query="drop database" Replace database by database name. May I know what is the correct sqlmap command that I should use to determine that my Testing phpMyAdmin 4.8.4 is SQL injectable? I would like to know if I can successfully drop/delete the Testing database on our Testing server. If I can successfully drop/delete the Testing MySQL database using sqlmap, I would be able to conclude that the hacker must have carried out SQL injection to drop/delete the customer's database. I have already turned off the Testing ModSecurity Web Application Firewall on our Testing server to allow sqlmap to go through. Please point me to any good tutorial on SQL injection using sqlmap. Maybe I do not understand SQL injection well enough. Our customer is also using a customised in-house inventory management system that relies on PHP application and MySQL database. Would open source Snort Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) be able to detect and block SQL injection as well? Please advise. Thank you very much. -BEGIN EMAIL SIGNATURE- The Gospel for all Targeted Individuals (TIs): [The New York Times] Microwave Weapons Are Prime Suspect in Ills of U.S. Embassy Workers Link: https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 14 Feb 2019 [1] https://tdtemcerts.wordpress.com/ [2] https://tdtemcerts.blogspot.sg/ [3] https://www.scribd.com/user/270125049/Teo-En-Ming -END EMAIL SIGNATURE- -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/mysql
Step-by-Step Tutorial: How to Setup Your Own e-Commerce Online Store using WooCommerce 3.4.5, Wordpress 4.9.8, and CentOS 1805 (LAMP) in Amazon AWS Cloud
Good morning from Singapore, You can read my step-by-step tutorial on How to Setup Your Own e-Commerce Online Store using WooCommerce 3.4.5, Wordpress 4.9.8, and CentOS 1805 (LAMP) in Amazon AWS Cloud at any one of my two redundant blogs. My blogs were configured in RAID 1 mirroring array. https://tdtemcerts.wordpress.com/2018/09/29/step-by-step-tutorial-how-to-setup-your-own-e-commerce-online-store-using-woocommerce-3-4-5-wordpress-4-9-8-and-centos-1805-lamp-in-amazon-aws-cloud/ https://tdtemcerts.blogspot.com/2018/09/step-by-step-tutorial-how-to-setup-your.html Thanks for reading! If there are any mistakes, please do let me know! ===BEGIN SIGNATURE=== Turritopsis Dohrnii Teo En Ming's Academic Qualifications as at 30 Oct 2017 [1] https://tdtemcerts.wordpress.com/ <https://tdtemcerts.wordpress.com/>[2] http://tdtemcerts.blogspot.sg/ <http://tdtemcerts.blogspot.sg/>[3] https://www.scribd.com/user/270125049/Teo-En-Ming <https://www.scribd.com/user/270125049/Teo-En-Ming>===END SIGNATURE===
RE: Problem on millions of records in one table?
Hi, Baisley How did you config your DB? Did you specify one single file or several files to store your DB? I am not sure whether it affects the performance as well. And Could you give more details about your merge tables. Your experience is greatly useful for us, thanks a lot. -Original Message- From: Brent Baisley [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 18, 2007 9:37 PM To: He, Ming Xin PSE NKG; mysql@lists.mysql.com Subject: Re: Problem on millions of records in one table? It all depends on how complicated your data and searches are. I've got tables that add 2-3 million per day and I don't have performance problems. Although we only retain at most 500 millions records, not a full years worth. That said, you can get horrible performance out of mysql with tables as small as 100,000 records if you don't structure your queries correctly or use a good table structure. If I know the tables are going to grow quickly and I don't need the entire dataset all the time, I'll use merge tables. This makes it easy to remove old data easily from the default table set. - Original Message - From: He, Ming Xin PSE NKG [EMAIL PROTECTED] To: mysql@lists.mysql.com Sent: Tuesday, April 17, 2007 11:03 PM Subject: Problem on millions of records in one table? Hi,all The number of the records in one table increase constantly. As evaluated, the amount would increase to at least 30 millions within one year. So we worry about whether mysql could handle such a big amount of records with good performance. Or need we some other solutions to avoid this problem ,such as using Partition, dividing a big table and etc. Any help or idea would be greatly appreciated. Best Regards mingxin -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
RE: Problem on millions of records in one table?
Hi, Pipes Is it reliable to use MySQL 5.1 in a commercial product now since it is still a beta version? -Original Message- From: Jay Pipes [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 18, 2007 10:04 PM To: Brent Baisley Cc: He, Ming Xin PSE NKG; mysql@lists.mysql.com Subject: Re: Problem on millions of records in one table? Brent Baisley wrote: It all depends on how complicated your data and searches are. I've got tables that add 2-3 million per day and I don't have performance problems. Although we only retain at most 500 millions records, not a full years worth. That said, you can get horrible performance out of mysql with tables as small as 100,000 records if you don't structure your queries correctly or use a good table structure. If I know the tables are going to grow quickly and I don't need the entire dataset all the time, I'll use merge tables. This makes it easy to remove old data easily from the default table set. Hi! Have you tried out the new partitioning features of MySQL 5.1 to do this? Would be cool if you had some performance numbers comparing the older MERGE table method with the newer partitioning... Cheers! Jay - Original Message - From: He, Ming Xin PSE NKG [EMAIL PROTECTED] To: mysql@lists.mysql.com Sent: Tuesday, April 17, 2007 11:03 PM Subject: Problem on millions of records in one table? Hi,all The number of the records in one table increase constantly. As evaluated, the amount would increase to at least 30 millions within one year. So we worry about whether mysql could handle such a big amount of records with good performance. Or need we some other solutions to avoid this problem ,such as using Partition, dividing a big table and etc. Any help or idea would be greatly appreciated. Best Regards mingxin -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
Problem on millions of records in one table?
Hi,all The number of the records in one table increase constantly. As evaluated, the amount would increase to at least 30 millions within one year. So we worry about whether mysql could handle such a big amount of records with good performance. Or need we some other solutions to avoid this problem ,such as using Partition, dividing a big table and etc. Any help or idea would be greatly appreciated. Best Regards mingxin
Re: How to test the MySQL Server (windows version) ?
Hi, joerg Thanks for your patient answer! I hope that we will have the ability to run the test suite on windows system early. Best regards luming _ 与联机的朋友进行交流，请使用 MSN Messenger: http://messenger.msn.com/cn -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
Re: How to test the MySQL Server (windows version) ?
Hi! I tried to run the perl scripts in the windows platform yesterday,but an error occured as following output info: C:\MySQL\MySQLServer5\mysql-test\perl mysql-test-run.pl mysql-test-run: *** ERROR: Could not find C:/MySQL/MySQLServer5/scripts/mysql_fix_privilege_tables I find that the mysql_fix_privilege_tables file is already exist, why did it occured this error? Is my method wrong? Or the perl test script that is included in the source distribution has some bugs? ( the source distribution i used is mysql-5.0.12-beta-linux ) Best regards lu ming _ 享用世界上最大的电子邮件系统― MSN Hotmail。 http://www.hotmail.com -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
How to test the MySQL Server (windows version) ?
The test system that is included in MySQL Server's Unix source distributions.(/mysql-test/mysql-test-run.sh) We can use the suite to run a test against to the MySQL Server. But these tests only can be run on Unix(linux). If you want to run the tests on Windows, you must use the Cygwin environment, and the server must be compiled under Cygwin environment. Actually, it doesn't test the MySQL Server's Windows version because the Cygwin had make the running environment be equal to the Unix's i think. Is my opinion right? I want to know how to test the MySQL Server's Windows version. Is MySQL AB doesn't provide the test method? Who can give me an answer? _ 与联机的朋友进行交流，请使用 MSN Messenger: http://messenger.msn.com/cn -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
Re: How to test the MySQL Server (windows version) ?
Hi, joerg Thank you very much! But i want to know more about this problem. I find a perl script about mysql server's test in the mysql-test subdirectory(/mysql-test/mysql-test-run.pl). Is this the test script written by perl what could replace the shell script(/mysql-test/mysql-test-run.sh) in Windows mentioned in your e-mail? Could it be rightly run in windows now? Or it cann't be run due to the unfinished work? Are the perl scripts that mentioned in your e-mail included in the MySQL Server's Unix source distributions(mysql-5.0.12-beta-linux) ? Are the perl test scripts only used in Mysql's internal works now? Best regards luming _ 享用世界上最大的电子邮件系统― MSN Hotmail。 http://www.hotmail.com -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
problem about the mysql test suite
I run a test against to the MySQL Server with the test tool of the binary distribution in Linux OS(red hat 9.0). But many of the test cases failed. My test method and the output results are following: 1.batch test command mysqltest -h localhost -u root -R r/alias.result test t/alias.test mysqltest -h localhost -u root -R r/alter_table.result test t/alter_table.test mysqltest -h localhost -u root -R r/analyse.result test t/analyse.test mysqltest -h localhost -u root -R r/analyze.result test t/analyze.test mysqltest -h localhost -u root -R r/ansi.result test t/ansi.test mysqltest -h localhost -u root -R r/archive.result test t/archive.test mysqltest -h localhost -u root -R r/auto_increment.result test t/auto_increment.test mysqltest -h localhost -u root -R r/backup.result test t/backup.test mysqltest -h localhost -u root -R r/bdb-alter-table-1.result test t/bdb-alter-table-1.test mysqltest -h localhost -u root -R r/bdb-alter-table-2.result test t/bdb-alter-table-2.test mysqltest -h localhost -u root -R r/bdb-crash.result test t/bdb-crash.test mysqltest -h localhost -u root -R r/bdb-deadlock.result test t/bdb-deadlock.test mysqltest -h localhost -u root -R r/bdb.result test t/bdb.test mysqltest -h localhost -u root -R r/bdb_cache.result test t/bdb_cache.test mysqltest -h localhost -u root -R r/bench_count_distinct.result test t/bench_count_distinct.test mysqltest -h localhost -u root -R r/bigint.result test t/bigint.test mysqltest -h localhost -u root -R r/binary.result test t/binary.test mysqltest -h localhost -u root -R r/binlog.result test t/binlog.test mysqltest -h localhost -u root -R r/blackhole.result test t/blackhole.test mysqltest -h localhost -u root -R r/bool.result test t/bool.test 2.output results ok mysqltest: At line 343: query 'CREATE TABLE T12207(a int) ENGINE=MYISAM' failed: 1050: Table 'T12207' already exists not ok ok ok This test is not supported by this installation skipped ok mysqltest: No to-string for last from-string mysqltest: Can't initialize replace from replace_result : 1 : X : 2 : X : 22 : X : 23 : X $MYSQL_TEST_DIR MYSQL_TEST_DIR This test is not supported by this installation skipped This test is not supported by this installation skipped This test is not supported by this installation skipped This test is not supported by this installation skipped This test is not supported by this installation skipped This test is not supported by this installation skipped ok not ok ok This test is not supported by this installation skipped This test is not supported by this installation skipped ok From the output results, we can find that many test cases are failed. These test cases is only a little part of the all test cases. Many others also failed. Is the test mothed that I used wrong ? Or the test cases that provided by MySQL are wrong? I don't think so many test cases failed like this is normal. But I could't ensure the reason. Who can help me? ( Note: MySQL Server 's version that i used is v5.0.12. The test cases are all come from the \mysql-test\r\ subdirectory. The test tools is included in /usr/bin/ that is installed with the MySQL Server's installation. ) _ 免费下载 MSN Explorer: http://explorer.msn.com/lccn/ -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
Who can tell me how to use the MySQL's test tool ?
Who can tell me how to use the MySQL's test tool (\MySQL\MySQL Server 5.0\bin\mysqltest.exe) ? I want to test the mysql server, and i find the test tool in the directory \MySQL\MySQL Server 5.0\bin\ (my os is Windows2000), but it can not be executed directly. Further more i can not find any document and help about it. I need the information about how to use the test tools, who can help me? _ 享用世界上最大的电子邮件系统― MSN Hotmail。 http://www.hotmail.com -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
mySQL on Windows CE
Hi, Is this supported? I mean I just look at the FAQ and find it is on the list of supported platform (Handheld: Windows CE), but I hardly see any article mention about it. I have downloaded two connector (.NET and ODBC), but which one should I use for Windows CE development? Could someone help clarify? For Embedded Visual C++ 4.0, what connector should I use and does it supported? Or, if I go for .NET Compact Framework with Visual Studio .NET 2003, should I use .NET connector? Or ODBC? I have seen previously someone said connector for .NET Compact Framework is not yet out, but today I see handheld Windows CE on the list of supported platform by mySQL, and I am almost confused. Khan Ming -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]
The little girl
Hello sql member, The fund of the help collects donations for the little girl. If you know that mercy and compassion means, visit our website please: http://www.kathelp.boom.ru -- Best regards, Ming mailto:[EMAIL PROTECTED] - Before posting, please check: http://www.mysql.com/manual.php (the manual) http://lists.mysql.com/ (the list archive) To request this thread, e-mail [EMAIL PROTECTED] To unsubscribe, e-mail [EMAIL PROTECTED] Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
Re: logrotate problem with mysql
On Fri, 10 Jan 2003, Michael T. Babcock wrote: if test -n `ps acx|grep mysqld`; then /usr/bin/mysqladmin flush-logs fi You're probably running it as root with the password loading from the /root/.my.cnf or something. Try adding the -uroot -p command-line options, or a [mysqladmin] section to your ~root/.my.cnf file. My /root/.my.cnf has 600 permissions and looks like: [mysqladmin] password=rootpassword user=root Do I need to add this section to the /etc/my.cnf? Is the user unknown to mysqladmin when it's run through logrotate? Thanks again. -- Jiann-Ming Su [EMAIL PROTECTED] 404-712-2603 Development Team Systems Administrator General Libraries Systems Division - Before posting, please check: http://www.mysql.com/manual.php (the manual) http://lists.mysql.com/ (the list archive) To request this thread, e-mail [EMAIL PROTECTED] To unsubscribe, e-mail [EMAIL PROTECTED] Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
logrotate problem with mysql
I'm using mysql that was distributed by mysql.com. I seem to be having
a problem with logrotate. When I run logrotate manually on mysql only,
the logs seem to rotate fine. But, when it runs in the cron job, it
creates the new log, but mysql continues to log to the old log.
My mysql logrotate entry looks like:
/var/log/mysqld.log {
create 644 mysql mysql
notifempty
daily
rotate 2
missingok
nocompress
postrotate
# just if mysqld is really running
if test -n `ps acx|grep mysqld`; then
/usr/bin/mysqladmin flush-logs
fi
endscript
}
I have also tried using mysqladmin refresh. Any ideas why the logs aren't
being rotated properly under cron?
--
Jiann-Ming Su [EMAIL PROTECTED] 404-712-2603
Development Team Systems Administrator
General Libraries Systems Division
--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list
-
Before posting, please check:
http://www.mysql.com/manual.php (the manual)
http://lists.mysql.com/ (the list archive)
To request this thread, e-mail [EMAIL PROTECTED]
To unsubscribe, e-mail [EMAIL PROTECTED]
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
sql Your opportunity...
Hello , sql I know you're busy so let me get right to the point. If you have a business then I'm going to show you something that will double, triple or even Quadruple your sales... If you're new to making money on the net then boy, I'm going to show you something that will earn you a realistic $2000 a month..! ..worth spending the next 30 seconds to read on... -- This is very new... You are the leading group of people to discover this cutting edge concept, so take action BEFORE the rest of the internet finds out and adopt it! -- Did you know that even the best site in the world will only signup at most 5% of interested visitors on their first visit! No. I'm not kidding. If you don't follow up with the remaining 95% of those interested in what you are offering, you are throwing money AWAY... but what if I could offer you a 100% FREE solution to catching the 95% that don't buy in straight away? Would you be interested? ZERO cost to you! -- Here's Why. -- CASHCulture has developed a state-of-the-art selling machine that will automatically follow up your prospects, from first contact right through to closing the sale! 100% automaticlly without you lifting a finger... It will increase your PROFITS and make your sales SKYROCKET! Other companies would charge anything up to $35 a month for this! You get it for FREE but. why stop there when you can also have Professional Web Hosting and a whole lot more. -- as if that was not enough... -- I'm going to give you FREE access to the Make Money University! For newcomers to making money online AND seasoned Netrepreneurs alike, the Make Money University provides valuable, Top Quality resources to making money on the net -- including Step-by-Step guide to Online Success! No experience required! --EARN while you LEARN! -- Discover A New Breakthrough In Compensation! -- It's Impossible NOT to EARN with this program!! We've MADE SURE OF IT with our revolutionary 2x15 Personally Forced Matrix. Our STUNNING Compensation Plan can earn you a realistic $2000 a month, and even $77,360 a month for experienced marketers over time! Show it to your friends and they'll fall off their chair! GUARANTEED! -- Here's the best part: It's made so Simple Easy that even my 12 year old niece could run it and make More Money than my good old uncle! Become an early adoptor and take an unfair advantage. Act NOW! This is the one thing you can't afford to miss! Check it out For FREE Now! CLICK -- http://www.cashculture.com/?ref=harison A HREF=http://www.cashculture.com/?ref=harison AOL Users Click here/a and you can start using the system straight away Sincerely, Harrison Ming p.s. Remember it is FREE and It's Impossible NOT to EARN! When you sign up for FREE I will show you that it works -- and boy it works GREAT! p.p.s. This is a win-win situation -- you have nothing to lose EXCEPT if you Wait -- when many others have signed up. It's Important That you Act NOW! -- Discover A New Breakthrough In Compensation! - It's Impossible Not To Earn - mailto:[EMAIL PROTECTED] - Before posting, please check: http://www.mysql.com/manual.php (the manual) http://lists.mysql.com/ (the list archive) To request this thread, e-mail [EMAIL PROTECTED] To unsubscribe, e-mail [EMAIL PROTECTED] Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
The little girl
Hello sql, The fund of the help collects donations for the little girl. If you know that mercy and compassion means, visit our website please: http://www.kathelp.boom.ru -- Best regards, Ming mailto:[EMAIL PROTECTED] - Before posting, please check: http://www.mysql.com/manual.php (the manual) http://lists.mysql.com/ (the list archive) To request this thread, e-mail [EMAIL PROTECTED] To unsubscribe, e-mail [EMAIL PROTECTED] Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
Supermarket
Hello sql, The best products and services do not require advertising, you only should know how to receive it. We have a nice Affiliate Program. Let's go shopping! : http://www.sprmarket.com -- Best regards, Ming mailto:[EMAIL PROTECTED] - Before posting, please check: http://www.mysql.com/manual.php (the manual) http://lists.mysql.com/ (the list archive) To request this thread, e-mail [EMAIL PROTECTED] To unsubscribe, e-mail [EMAIL PROTECTED] Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
RE: Transactions not supported by database - Perl
I have expereience the same behaviour when using the ppm from
activestate. Try using the one below, seem to work for me...
ppm install http://theoryx5.uwinnipeg.ca/ppmpackages/DBD-mysql.ppd
-Original Message-
From: Gerald Clark [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 14, 2002 9:33 PM
To: Bob Boden
Cc: [EMAIL PROTECTED]
Subject: Re: Transactions not supported by database - Perl
Send the set autocommit=0 just as you send any other query in perl.
Bob Boden wrote:
Attempts to disable auto-commit mode in Perl using the DBI command
$dbh-{AutoCommit} = 0; returns the following message, Transactions
not
supported by database.
I am using the latest version of MySQL-Max (3.23.51) as well as the
latest
version of DBD::mysql.
Executing the following command at the mysql prompt verifies that BDB
Transaction enabled tables are supported and turned on.
mysql SHOW VARIABLES LIKE have_%;
+---+--+
| Variable_name | Value|
+---+--+
| have_bdb | YES |
| have_gemini | NO |
| have_innodb | DISABLED |
| have_isam | YES |
| have_raid | NO |
| have_openssl | NO |
+---+--+
6 rows in set (0.00 sec)
Executing SET AUTOCOMMIT=0; at the mysql prompt works fine as well.
However,
I can not get Perl scripts to recognize the disable auto-commit
command.
These symptoms are occurring in a Linux/apache web server as well as a
Windows 2000 environment running as localhost.
Any suggestions would be greatly appreciated.
-
Before posting, please check:
http://www.mysql.com/manual.php (the manual)
http://lists.mysql.com/ (the list archive)
To request this thread, e-mail [EMAIL PROTECTED]
To unsubscribe, e-mail
[EMAIL PROTECTED]
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
-
Before posting, please check:
http://www.mysql.com/manual.php (the manual)
http://lists.mysql.com/ (the list archive)
To request this thread, e-mail [EMAIL PROTECTED]
To unsubscribe, e-mail
[EMAIL PROTECTED]
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
-
Before posting, please check:
http://www.mysql.com/manual.php (the manual)
http://lists.mysql.com/ (the list archive)
To request this thread, e-mail [EMAIL PROTECTED]
To unsubscribe, e-mail [EMAIL PROTECTED]
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
Re:SQL installation
On Sun, Apr 14, 2002 at 08:50:46AM +0200, [EMAIL PROTECTED] wrote: Your message cannot be posted because it appears to be either spam or simply off topic to our filter. To bypass the filter you must include one of the following words in your message: sql,query If you just reply to this message, and include the entire text of it in the reply, your reply will go through. However, you should first review the text of the message to make sure it has something to do with MySQL. Just typing the word MySQL once will be sufficient, for example. You have written the following: Hi, I read the installation guide on the web and there is a part where it is stated that if we don't have permission to create file in /usr/local we should perform the installation as root. What do u mean by perform installation as root. How should it be done? Any help would be appreciated Thx -- God doesn't play dice --Albert Einstein -- God doesn't play dice --Albert Einstein - Before posting, please check: http://www.mysql.com/manual.php (the manual) http://lists.mysql.com/ (the list archive) To request this thread, e-mail [EMAIL PROTECTED] To unsubscribe, e-mail [EMAIL PROTECTED] Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
Re: MySQL 4.0 released
Hello, I'm encountering a serious program fault at using MySQL Win32 client library LIBMYSQL.DLL. I found LIBMYSQL.DLL not thread-safe. When 10 threads are launched to run the following two blocks of C statements, very quickly a program fault window pops up to LIBMYSQL.DLL. block #1 - EnterCriticalSection(dcs); mysql_real_query(db,stmt,strlen(stmt)); res=mysql_store_result(db); LeaveCriticalSection(dcs); block #1 - (in another C function) EnterCriticalSection(dcs); row=mysql_fetch_row(res); nfld=mysql_num_fields(res); flds=mysql_fetch_fields(res); LeaveCriticalSection(dcs); But, if I merged the two blocks into one as: EnterCriticalSection(dcs); mysql_real_query(db,stmt,strlen(stmt)); res=mysql_store_result(db); row=mysql_fetch_row(res); nfld=mysql_num_fields(res); flds=mysql_fetch_fields(res); LeaveCriticalSection(dcs); then, the threads run fine for hours without any program fault pop up. HOWEVER, the second scenario is irrelevant to my (and most multithreaded) application where there are many nested queries of rows. Is there any thread-safe LIBMYSQL.DLL downloadable on mysql.com?? or is there any other solution to make SQL queries by simultaneous threads safe? Thank You! Best Regards, Peter - Original Message - From: Michael Widenius [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Tuesday, October 16, 2001 6:29 AM Subject: MySQL 4.0 released Hi! MySQL 4.0.0-alpha is now available at: http://www.mysql.com/downloads/mysql-4.0.html You can find information about upgrading from MySQL 3.23 to 4.0 at: http://www.mysql.com/doc/U/p/Upgrading-from-3.23.html The MySQL 4.0 release includes a lot of new exciting features, like MySQL as an embedded library, InnoDB (transactions) as standard table type, UNION, multi table delete and much more. MySQL 4.0 is basically a 'reconstruction release' that will enable us to easier add new features to MySQL in the future. The intention is to quickly add features list at: http://www.mysql.com/doc/T/O/TODO_MySQL_4.0.html and then start to work on the 4.1 branch while 4.0 stabilizes. Changes in release 4.0.0 * Added documentation for `libmysqld', the embedded MySQL server library. Also added example programs (a `mysql' client and `mysqltest' test program) which use `libmysqld'. * Removed all Gemini hooks from MySQL. * Removed `my_thread_init()' and `my_thread_end()' from mysql_com.h, and added `mysql_thread_init()' and `mysql_thread_end()' to mysql.h. * Secure connections (with SSL). * Unsigned `BIGINT' constants now work. `MIN()' and `MAX()' now handles signed and unsigned `BIGINT' numbers correctly. * New character set `latin_de' which provides correct German sorting. * `TRUNCATE TABLE' and `DELETE FROM table_name' are now separate functions. One bonus is that `DELETE FROM table_name' now returns the number of deleted rows. * `DROP DATABASE' now executes a `DROP TABLE' on all tables in the database, which fixes a problem with InnoDB tables. * Added support for `UNION'. * A new `HANDLER' interface to `MyISAM' tables. * Added support for `INSERT' on `MERGE' tables. Patch from Benjamin Pflugmann. * Changed `WEEK(#,0)' to match the calender in the USA. * `COUNT(DISTINCT)' is about 30% faster. * Speed up all internal list handling. * Speed up `IS NULL()' and some other internal primitives. * Creating full text indexes are now much faster. * Tree-like cache to speed up bulk inserts and `myisam_bulk_insert_tree_size' variable. * Searching on packed (`CHAR'/`VARCHAR') keys are now much faster. * Optimized queries of type: `SELECT DISTINCT * from table_name ORDER by key_part1 LIMIT #' * `SHOW CREATE TABLE' now shows all table attributes. * `ORDER BY ... DESC' can now use keys. * `LOAD DATA FROM MASTER' auto-magically sets up a slave. * Renamed `safe_mysqld' to `mysqld_safe'. * Added support for symbolic links to `MyISAM' tables. Symlink handling is now enabled by default for Windows. * `LOAD DATA FROM MASTER' auto-magically sets up a slave. * Added `SQL_CALC_FOUND_ROWS' and `FOUND_ROWS()'. This makes it possible to know how many rows a query would have returned without a `LIMIT' clause. * Changed output format of `SHOW OPEN TABLES'. * Allow `SELECT expression LIMIT ...'. * Added `IDENTITY' as a synonym for `AUTO_INCREMENT' (like Sybase). * Added `ORDER BY' syntax to `UPDATE' and `DELETE'. * `SHOW INDEXES' is now a synonym for `SHOW INDEX'. * Added `ALTER TABLE table_name DISABLE KEYS' and `ALTER TABLE table_name ENABLE KEYS' commands. * Allow one to use `IN' instead of `FROM' in `SHOW' commands. * Allow ANSI SQL syntax `X'hexadecimal-number'' *
moving database to another computer
Hi, I've been working with mysql for a couple of months now for my website. Now I have to move to a different server, and would like to move the database as well. Problem is I have no idea what this entails and how to do it. Can someone help me? Thanks. Ming Hsu - Before posting, please check: http://www.mysql.com/manual.php (the manual) http://lists.mysql.com/ (the list archive) To request this thread, e-mail [EMAIL PROTECTED] To unsubscribe, e-mail [EMAIL PROTECTED] Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
Re: MySQL constantly crash on BLOB insertions...
hi, the fatal "MySQL gone away..." error remains outstanding even after i upgraded 3.22.25 to 3.23.31 just now. i also run mysql_convert_table_format with my database, which should have converted all tables to MyISAM format. does anybody have good idea of working around this? i cannot go on any more!!! s.o.ss.o.ss.o.s thanks. peter - Original Message - From: Huang-Ming To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Monday, January 22, 2001 9:33 AM Subject: MySQL constantly crash on BLOB insertions... hi sirs, i met a serious bug on inserting a 900+KB data into a LONGBLOB column. the error shows "MySQL server has gone away on executingSQL= INSERT INTO ebody(rtime,body,size,subj,pri,froms,tos,ccs,bccs,nattach,msgid) VALUES(date_add(curdate(),interval curtime() hour_second),?,?,?,?,?,?,?,?,?,?) " it seems occurring only on insertions of "big data", eg. data500KB. but when the error occurs, it still has NO problem to insert smaller data, eg. 100KB- data. so the fault might happen only to big data insertion. i'm using MySQL 3.22.25. this is schema of table 'ebody': (it has 75 rows now) create table ebody( bid integer auto_increment not null, msgid varchar(80) not null, bodylongtext, length integer, subjvarchar(128), pri tinyint, rtime datetime, froms varchar(80), tos text, ccs text, bccstext, nattach tinyint, # KEY i_msgid (msgid(8)), PRIMARY KEY (bid) ); for your easier insepction, i also attach log message of my application which is a Perl5 script and is NOT running under mod_perl. at your earliest convenience, please advise me on how to go on inserting big data to this table. eg., should i need to upgrade to 2.23.31 for this problem. thanks a lot. Peter Pan
Re: MySQL constantly crash on BLOB insertions...
hi Tim, thanks for the prompt response which is hard to be seen with Oracle and Microsoft. sorry, i should have had studied hard the manual a year ago. regarding the error, however, would the error message be better to tell users to adjust relevant configuration than only to say "MySQL gone away"? it's misleading to some serious fault in MySQL which actually is not therein, isn't it? thanks anyway. peter - Original Message - From: Thimble Smith [EMAIL PROTECTED] To: Huang-Ming [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Monday, January 22, 2001 7:04 PM Subject: Re: MySQL constantly crash on BLOB insertions... On Mon, Jan 22, 2001 at 12:33:46PM +0200, Thimble Smith wrote: I can repeat this problem; I'm looking into it and we'll hopefully have a patch for it shortly. Well, the problem is simply that max_allowed_packet needs to be increased. Check the manual entry. http://mysql.tonnikala.org/doc/S/H/SHOW_VARIABLES.html Tim -- __ ___ ___ __ / |/ /_ __/ __/ __ \/ /Tim Smith [EMAIL PROTECTED] / /|_/ / // /\ \/ /_/ / /__ MySQL AB, Development Team /_/ /_/\_, /___/\___\_\___/ Helsinki, Finland (for a few weeks) ___/ www.mysql.com
MySQL constantly crash on BLOB insertions...
hi sirs,
i met a serious bug on
inserting a 900+KB data into a LONGBLOB column.
the error shows
"MySQL server has gone away on executingSQL= INSERT INTO
ebody(rtime,body,size,subj,pri,froms,tos,ccs,bccs,nattach,msgid)
VALUES(date_add(curdate(),interval curtime() hour_second),?,?,?,?,?,?,?,?,?,?)
"
it seems occurring only on
insertions of "big data", eg. data500KB. but when the error occurs, it
still has no problem to inset smaller data, eg. 100KB- data. so the
fault might happen only to
big data insertion.
i'm using MySQL 3.22.25.
this is schema of table
'ebody': (it has 75 rows now)
create table
ebody(bid integerauto_increment
not null,msgid varchar(80) not
null,bodylongtext,lengthinteger,subjvarchar(128),pri
tinyint,rtime
datetime,froms
varchar(80),tostext,ccs
text,bccs
text,nattachtinyint,#KEY
i_msgid(msgid(8)),PRIMARY
KEY(bid));
for your easier insepction,
i also attach log message of my application which is a Perl5 script and is
NOT running under mod_perl.
at your earliest
convenience, please advise me on how to go on inserting big datato this
table. eg., should i need to upgrade to 2.23.31 for this problem.
thanks a lot.
Peter Pan
Mailhost=vmail.unknown.com
Domain=unknown.com
child 177 working: SOCKIO::Socket::INET=GLOB(0x85f2e50)TOARRAY(0x85f2e44)FROMMSG
-- SMTP server 177 starts --
---MIME headers---
subject=444
[EMAIL PROTECTED]
from=pipi [EMAIL PROTECTED]
content-type=multipart/mixed; boundary="5747514527BE3D5B45C15B20"
mime-version=1.0
date=Mon, 22 Jan 2001 07:38:19 +0800
message-id=[EMAIL PROTECTED]
x-mailer=Mozilla 4.05 [en] (Win95; I)
---end MIME headers---
Local: [EMAIL PROTECTED]
Relay:
boundary=5747514527BE3D5B45C15B20
Attachment: 1.14R2 B1 (to all).zip (163700 bytes)
(177): LOCK TABLES ebody WRITE
(177): INSERT INTO ebody(rtime,body,size,subj,pri,froms,tos,ccs,bccs,nattach,msgid)
VALUES(date_add(curdate(),interval curtime() hour_second),?,?,?,?,?,?,?,?,?,?)
(177): SELECT last_insert_id() FROM ebody
(177): UNLOCK TABLES
(177): SELECT value FROM sption WHERE name='blocks'
(177): SELECT uid FROM alias WHERE alias='panpipi'
user([EMAIL PROTECTED])=1
(177): SELECT options,blocks FROM eption WHERE uid=1
(177): SELECT areply,signature FROM eption WHERE uid=1
(177): SELECT date_add(curdate(),INTERVAL curtime() HOUR_SECOND)
(177): SELECT filters FROM eption WHERE uid=1
(177): SELECT date_add(curdate(),INTERVAL curtime() HOUR_SECOND)
(177): SELECT sum(size) FROM email,ebody WHERE oid='1' AND email.bid=ebody.bid
(177): SELECT sum(size) FROM email,ebody WHERE oid='1' AND email.bid=ebody.bid
(177): INSERT INTO email(bid,fid,oid,filtered) VALUES('75','0','1',?)
-- SMTP server 177 exits --
child 179 working: SOCKIO::Socket::INET=GLOB(0x85f5200)TOARRAY(0x814878c)FROMMSG
-- SMTP server 179 starts --
---MIME headers---
subject=all.zip
[EMAIL PROTECTED]
from=pipi [EMAIL PROTECTED]
content-type=multipart/mixed; boundary="C6046A0F3A7DD29D3AE1F1B9"
mime-version=1.0
date=Mon, 22 Jan 2001 07:38:21 +0800
message-id=[EMAIL PROTECTED]
x-mailer=Mozilla 4.05 [en] (Win95; I)
---end MIME headers---
Local: [EMAIL PROTECTED]
Relay:
boundary=C6046A0F3A7DD29D3AE1F1B9
Attachment: 1.14R2 B1 (to all).zip (163700 bytes)
(179): LOCK TABLES ebody WRITE
(179): INSERT INTO ebody(rtime,body,size,subj,pri,froms,tos,ccs,bccs,nattach,msgid)
VALUES(date_add(curdate(),interval curtime() hour_second),?,?,?,?,?,?,?,?,?,?)
(179): SELECT last_insert_id() FROM ebody
(179): UNLOCK TABLES
(179): SELECT value FROM sption WHERE name='blocks'
(179): SELECT uid FROM alias WHERE alias='panpipi'
user([EMAIL PROTECTED])=1
(179): SELECT options,blocks FROM eption WHERE uid=1
(179): SELECT areply,signature FROM eption WHERE uid=1
(179): SELECT date_add(curdate(),INTERVAL curtime() HOUR_SECOND)
(179): SELECT filters FROM eption WHERE uid=1
(179): SELECT date_add(curdate(),INTERVAL curtime() HOUR_SECOND)
(179): SELECT sum(size) FROM email,ebody WHERE oid='1' AND email.bid=ebody.bid
(179): SELECT sum(size) FROM email,ebody WHERE oid='1' AND email.bid=ebody.bid
(179): INSERT INTO email(bid,fid,oid,filtered) VALUES('76','0','1',?)
-- SMTP server 179 exits --
child 182 working: SOCKIO::Socket::INET=GLOB(0x85f2e5c)TOARRAY(0x85f2e2c)FROMMSG
-- SMTP server 182 starts --
---MIME headers---
subject=9
[EMAIL PROTECTED]
from=pipi [EMAIL PROTECTED]
content-type=multipart/mixed; boundary="83A59136D174F01D5551A302"
mime-version=1.0
date=Mon, 22 Jan 2001 07:40:02 +0800
message-id=[EMAIL PROTECTED]
x-mailer=Mozilla 4.05 [en] (Win95; I)
---end MIME headers---
Local: [EMAIL PROTECTED]
Relay:
boundary=83A59136D174F01D5551A302
Attachment: J-Pcrystal.zip (1348720 bytes)
(182): LOCK TABLES ebody WRITE
(182): INSERT INTO ebody(rtime,body,size,subj,pri,froms,tos,ccs,bccs,nattach,msgid)
VALUES(date_add(curdate(),interval curtime() hour_second),?,?,?,?,?,?,?,?,?,?)
(182):
