[web2py] Re: Unable to connect to mysql DB - sql.py mod

2010-06-14 Thread mdipierro
This line: self._execute("SET sql_mode='NO_BACKSLASH_ESCAPES';") is important for security issues. SQL injections may be possible if you comment it. I do not know why it does not work on your system. It should http://mysql.linux.cz/doc/refman/5.5/en/server-sql-mode.html#sqlmode_no_ba

[web2py] Re: Unable to connect to mysql DB - sql.py mod

2010-06-14 Thread The Czar
I am not running V5.5 MySQL - I am using mysql v4.1.25. Maybe a difference there! On Jun 14, 5:06 am, mdipierro wrote: > This line: > >             self._execute("SET sql_mode='NO_BACKSLASH_ESCAPES';") > > is important for security issues. SQL injections may be possible if > you comment it. I do

[web2py] Re: Unable to connect to mysql DB - sql.py mod

2010-06-14 Thread The Czar
I just checked the docs for the older version (4.1) SQL Modes. There is no mention of the NO_BACKSLASH_ESCAPES mode. http://dev.mysql.com/doc/refman/4.1/en/server-sql-mode.html We have some unintended consequences. I'm surprised it doesn't complain about this. On Jun 14, 5:06 am, mdipierro wrot

[web2py] Re: Unable to connect to mysql DB - sql.py mod

2010-06-14 Thread mdipierro
what is the default bahvior? On Jun 14, 9:51 am, The Czar wrote: > I just checked the docs for the older version (4.1) SQL Modes. There > is no mention of the NO_BACKSLASH_ESCAPES mode. > > http://dev.mysql.com/doc/refman/4.1/en/server-sql-mode.html > > We have some unintended consequences. I'm s

[web2py] Re: Unable to connect to mysql DB - sql.py mod

2010-06-15 Thread The Czar
When I tried to enter a bacl slashed field (Odyssey\'s), it failed. So I guess the default behavior is effectively NO_BACKSLASH_ESCAPES On Jun 14, 11:23 pm, mdipierro wrote: > what is the default bahvior? > > On Jun 14, 9:51 am, The Czar wrote: > > > I just checked the docs for the older version

[web2py] Re: Unable to connect to mysql DB - sql.py mod

2010-06-15 Thread mdipierro
I think it is the opposite. You are vulnerable to injections. On Jun 15, 5:35 am, The Czar wrote: > When I tried to enter a bacl slashed field (Odyssey\'s), it failed. So > I guess the default behavior is effectively NO_BACKSLASH_ESCAPES > > On Jun 14, 11:23 pm, mdipierro wrote: > > > what is th