LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 05-09-2008, 02:13 PM   #1
juice99
LQ Newbie
 
Registered: Sep 2005
Posts: 12

Rep: Reputation: 0
mysql and php problem


does mysqld option '--secure-file-priv=' is implemented at all? it says so in manual, but when i set it to like /something, users are able to load_file from anywhere in the system anyways

i use mysql 5.0.51a-3 on linux (debian)

i just added it to /etc/init.d/mysql in mysql_safe line, like --secure-file-priv=/some/notexisting/dir, and i restarted mysql.

in memory i see (ps auxw|grep mysql) that it is used, but i'm still able load any file with apache permissions. (bypassing php safe mode), so i REALLY need to turn off this function. but no idea how...

or maybe do you know any tool that automatically blocks suspicious php scripts, like php shells.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
php-mysql dependancy problem after nitemare mysql upgrade. RHEL4 andrewc Red Hat 1 01-03-2006 04:16 PM
Problem with MySQL 4.1.7 and PHP 5.0.2 Lars79 Slackware 4 10-28-2004 08:09 AM
Problem with PHP and MySQL eam Programming 2 08-24-2004 02:33 PM
Problem getting PHP to recognize MySQL, Using PHP 4.0 and MySQL 4.0.20 d2army Programming 4 06-27-2004 08:54 PM
MySQL / PHP problem jjd228 Linux - Software 5 03-15-2004 10:28 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 12:13 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration