Re: [PHP-DB] Are join queries in phpMyAdmin a security hazard?

2010-02-28 Thread Chris
Ben Hubbell wrote: Hello, My web host does not have join queries in phpMyAdmin enabled. My web host is inexpensive, but their commitment to costumer service is inconsistent. They often dismiss bug reports as feature requests. When pressed to enable join queries in phpMyAdmin several years

Re: [PHP-DB] Are join queries in phpMyAdmin a security hazard?

2010-02-28 Thread TG
The only issue I see and maybe why they'd disable it is so you don't do a crazy join that ends up returning 8 billion rows. But they should be able to manage that with query execution time timeouts or something and you can do the same thing with bad implied inner joins in the WHERE clause