Re: [PHP-DB] SQL Injection

2015-05-16 Thread Lester Caine
many. Hence my question here. That probably sums up 'hosted' plans. The number of available database engines has declined in recent years, and where a site 'outgrows' MySQL, there are a few custom developments, but bottom line ... there is not a single obvious answer ;) -- Lester Caine - G8HFL

Re: [PHP-DB] SQL Injection

2015-05-16 Thread Lester Caine
(sql_query, array_of_data); -- Lester Caine - G8HFL - Contact - http://lsces.co.uk/wiki/?page=contact L.S.Caine Electronic Services - http://lsces.co.uk EnquirySolve - http://enquirysolve.com/ Model Engineers Digital Workshop - http://medw.co.uk Rainbow Digital Media - http

[PHP-DB] SQL injection

2015-06-21 Thread Lester Caine
(111,108,111,108,111,115,104,101,114),1))a)%20--%20and%201%3D1 The question is more of interest in just what it was trying to achieve? I presume hack MySQL? So Firebird would barf anyway, but just trying to something that has generated some several hundred error log entries in the last two days ... -- Lester Caine - G8HFL

Re: [PHP-DB] SQL injection

2015-06-21 Thread Lester Caine
expect a continued 'attack' if the URL was returning something useful so to carry on just did not make sense ... -- Lester Caine - G8HFL - Contact - http://lsces.co.uk/wiki/?page=contact L.S.Caine Electronic Services - http://lsces.co.uk EnquirySolve - http

Re: [PHP-DB] SQL injection

2015-06-21 Thread Lester Caine
entries in the last two days ... Lester Caine - G8HFL The sub-query is invalid, if valid it would've been equivalent to: or (1,2)=(select*from(select 'b2xvbG9zaGVy' as 1, 'b2xvbG9zaGVy' as 1))a) -- and 1=1 Seems non threatening to me. Regardless of whether this specific attack

Re: [PHP-DB] PDO and SAP HANA prepared statements issue

2016-01-26 Thread Lester Caine
ut I can't find the notes now on what combination works and what does't :( -- Lester Caine - G8HFL - Contact - http://lsces.co.uk/wiki/?page=contact L.S.Caine Electronic Services - http://lsces.co.uk EnquirySolve - http://enquirysolve.com/ Model Engineers Digital Worksho

Re: [PHP-DB] PDO and SAP HANA prepared statements issue

2016-01-26 Thread Lester Caine
ace and this does have it's own restrictons based on what platform you are using. It may be worth trying the generic ODBC interface and see if this works any differently. The ODBC driver uses the same style of working as the Firebird/Interbase driver for binding variables and that does work. --

Re: [PHP-DB] Connecting to database fails

2016-08-13 Thread Lester Caine
On 14/08/16 00:00, Rich Shepard wrote: > Ah, yes. Pat likes MySQL/MariaDB so he does not build php to support > postgres. I'll rebuild it and that should solve the problem. I've been with Firebird/Interbase since before PHP existed ;) -- Lester Caine -

Re: [PHP-DB] Connecting to database fails

2016-08-13 Thread Lester Caine
installed. Database drivers are not installed by default as you only really need the ones you are actually using. Should be php5-pgsql -- Lester Caine - G8HFL - Contact - http://lsces.co.uk/wiki/?page=contact L.S.Caine Electronic Services - http://lsces.co.uk Enq

Re: [PHP-DB] Corn job anomaly

2016-09-20 Thread Lester Caine
curity features that cut in. Are they listed in the script, or loaded from the environment ... which is of cause different for the cron jobs ... and why you needed the full path. -- Lester Caine - G8HFL - Contact - http://lsces.co.uk/wiki/?page=contact L.S.Caine El

Re: [PHP-DB] Corn job anomaly

2016-09-20 Thread Lester Caine
ull' text as it is getting information from the local user settings. > The time stamps (minute, hour, day, etc) that precede the /usr are loaded by > my host. just fyi. -- Lester Caine - G8HFL - Contact - http://lsces.co.uk/wiki/?page=contact L.S.Caine Elec

Re: [PHP-DB] Corn job anomaly

2016-09-20 Thread Lester Caine
On 20/09/16 09:14, Karl DeSaulniers wrote: > Pardon my ignorance, but what do you mean full path? Full path to php application. Cron jobs run as 'root' and so need and user account settings added manually if they do not match the 'root' environment. -- Lester Caine - G8

Re: [PHP-DB] Cron job anomaly

2016-09-20 Thread Lester Caine
guy to deal with that ;) I have seen it myself when trying to use mysql and it's to do with the 'network path' but I'm on firebird which simply uses the '(user name removed)' -- Lester Caine - G8HFL - Contact - http://lsces.co.uk/wiki/?page=contact L.S.Caine Electronic Se

Re: [PHP-DB] Re: CHAR field with charset UTF8 and COLLATION UNICODE_CI_AI or UTF8PHP is loading white spaces

2016-11-22 Thread Lester Caine
simple php strings to mbstring objects. UTF8 is a gambol in PHP if it is going to be transferred properly as a simple string variable and will give string length as bytes rather than characters ... -- Lester Caine - G8HFL - Contact - http://lsces.co.uk/wiki/?page=c

Re: [PHP-DB] Re: CHAR field with charset UTF8 and COLLATION UNICODE_CI_AI or UTF8PHP is loading white spaces

2016-11-22 Thread Lester Caine
On 22/11/16 18:01, Delmar Wichnieski wrote: > 2016-11-22 12:42 GMT-02:00 Lester Caine <les...@lsces.co.uk>: > >> > needs help to move >> > the string to a variable that it can check if the UTF8 data is a single >> > character or multiple characters. &g

Re: [PHP-DB] Re: CHAR field with charset UTF8 and COLLATION UNICODE_CI_AI or UTF8PHP is loading white spaces

2016-11-22 Thread Lester Caine
://www.unicode.org/reports/tr15/ is a minefield even for the Firebird collation process ... Just how long is the normalized string? > 2016-11-22 11:21 GMT-02:00 Lester Caine <les...@lsces.co.uk>: > >> > On 22/11/16 12:58, Delmar Wichnieski wrote: >>> > &

<    1   2