Re: MySQL/PHP Tunneling

2004-07-10 Thread Eldon Ziegler
Karam,
A much more secure way is to use OpenSSH (www.openssh.org) to create an 
encrypted connection between the local machine and the MySQL server and to 
use the -L option to forward MySQL commands from the localhost to the MySQL 
server.

For example,
ssh -l   -L 3306::3306

Once the ssh connection has been made you tell your client program that the 
MySQL server is on localhost and ssh will encrypt and forward the commands 
to the actual server.

Regards,
Eldon
At 09:53 am 7/10/2004, you wrote:
Hello,
Recently lot of MySQL clients try to overcome host
based privilege system of MySQL by using PHP tunneling
method.
In this method they call up a PHP file in the server
and the PHP file executes a query and sends the data
in XML format.
I am using C API() and I was just wondering if
somebody is working on such tunnels i.e. a PHP file
and its corresponding C/++ code that will fill up
MYSQL_RES structures correctly so that I can use them
to C API() without any problem. Otherwise, i guess i
have to write one for myself.
Regards,
Karam

__
Do you Yahoo!?
Take Yahoo! Mail with you! Get it on your mobile phone.
http://mobile.yahoo.com/maildemo
--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]


MySQL/PHP Tunneling

2004-07-10 Thread Karam Chand
Hello,

Recently lot of MySQL clients try to overcome host
based privilege system of MySQL by using PHP tunneling
method.

In this method they call up a PHP file in the server
and the PHP file executes a query and sends the data
in XML format. 

I am using C API() and I was just wondering if
somebody is working on such tunnels i.e. a PHP file
and its corresponding C/++ code that will fill up
MYSQL_RES structures correctly so that I can use them
to C API() without any problem. Otherwise, i guess i
have to write one for myself.

Regards,
Karam




__
Do you Yahoo!?
Take Yahoo! Mail with you! Get it on your mobile phone.
http://mobile.yahoo.com/maildemo 

-- 
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:http://lists.mysql.com/[EMAIL PROTECTED]