MySQL Made Easy by Joseph C. Scott

Author:Joseph C. Scott [C. Scott, Joseph]
Language: eng
Format: azw3, mobi
Publisher: UNKNOWN
Published: 2020-10-14T16:00:00+00:00

Security Issues with LOAD DATA LOCAL

Restoring from a client machine may be convenient, but it does come with a security risk. Someone could useLOAD DATA LOCALto read any files to which the user they are connecting as has access. They could do this by creating a table and reading from the table after they have loaded the data. If they were connecting as the same user as the web server and have the right access to run queries, this becomes dangerous. By default, MySQL allowsLOAD DATA LOCAL. To prevent this and disallowall LOAD DATA LOCAL, start the MySQL server with the--local-infile=0option. You could also compile MySQL without the--enable-local-infileoption.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.