SQL injection?

2007-09-04 Thread Fletcher Mattox
We were recently the target of an SQL injection, so I am trying to determine if they were successful. I have recovered the SQL commands from mysqld.log, but the code has me stumped. INSERT INTO queries (file,id) VALUES ('labs.php','4 OR 0 IN (SELECT TOP 1

one user, multiple passwords

2006-01-14 Thread Fletcher Mattox
Hi, Is it possible for one user to have more than one password; one for each database? My naive attempt at this was GRANT ALL ON db1.* TO 'fletcher'@'%' IDENTIFIED BY pass1 GRANT ALL ON db2.* TO 'fletcher'@'%' IDENTIFIED BY pass2 But I find that pass2 replaces pass1 on db1 when