IRC Logs

Network: freenode Channel: #mysql

	Enter your search terms Submit search form
	Web www.irclog.org

[23:25]<srffn>rob__: Why would you need to change these permissions?
[23:26]<srffn>rob__: If that's your own box you will not ask that question :)
[23:26]<zj2__>salle: because I get this error Cannot open dir '/var/lib/mysql/twins_theroot': Permission denied at /usr/bin/mysqlhotcopy line 289.
[23:26]<zgmzgw2zdsjg>lol
[23:26]<zj2__>salle: i meant from a security standpoint is it a bad idea?
[23:27]<xycnzw1tq7>is there any downside to using extended inserts?
[23:27]<srffn>rob__: from a security standpoint it is ALWAYS a bad idea to give ANY permission to ANYONE :)
[23:27]<zgmzgw2zdsjg>heh
[23:27]<rrsjggysgg>http://pastebin.ca/110528
[23:27]<srffn>hiker13526: The only one is that statements can become too long :)
[23:27]<zj2__>salle: slightly impractical though, no? :p
[23:27]<srffn>rob__: Indeed!
[23:28]<zgmzgw2zdsjg>one of our dbas is of the opinion that noone should be allowed to run queries against our databases
[23:28]<zgmzgw2zdsjg>would solve many problems :P
[23:28]<srffn>rob__: So the question is: What kind of harm could happen if you allow any user besides mysql to read the mysql datadir?
[23:28]<kgfjzrg>snoyes, yeah thats teh whole query
[23:28]<srffn>rob__: Or write?
[23:29]<srffn>rob__: mysqlhotcopy may need +w
[23:29]<rrsjggysgg>http://pastebin.ca/110531 so uh... SELECT * FROM USERS WHERE USER = $_POST[user]
[23:29]<drgynfn_>jasoneisen: Does this happen to work?
[23:29]<drgynfn_>http://pastebin.ca/110638
[23:29]<sgjdns>Keloran: Hm, I don't see any syntax errors in that. What are you using to run that query, and what is the exact error text?
[23:29]<zj2__>salle: hopefully none. i might just use mysql dump instead - that shouldn't need more than a database username/password, correct?
[23:29]<srffn>rob__: And as you can see the quesitopn becomes: Who is allowed to run mysqlhotcopy?
[23:30]<srffn>rob__: For mysqldump you don't need anything else than database username/password
[23:30]<rrsjggysgg>DanielE_: Empty set (11.59 sec)
[23:30]<rrsjggysgg>(i dont have an MM00001)
[23:30]<rrsjggysgg>But that is still slow
[23:31]<drgynfn_>:/ I need to run to a meeting. One thing I noticed is that the ACCT_DUPLICATE might be slowing things down unless you have an index on it too..
[23:31]<rrsjggysgg>Replaced with a real account: 1 row in set (11.62 sec)
[23:31]<rrsjggysgg>It is indexed
[23:31]<drgynfn_>'k.. well that saves a tiny bit of time.. not a bunch.
[23:31]<drgynfn_>When I get back I'll take another look.
[23:32]<drgynfn_>is the view only used for this query?
[23:32]<kgfjzrg>snoyes, <pre>MySQL Error: Invalid SQL: SELECT cUsername FROM Staff WHERE cUsername = 'workffs' 1146 ()</pre>
[23:33]<rrsjggysgg>No
[23:33]<rrsjggysgg>I wish
[23:33]<zgmzgw2zdsjg>good username that :P
[23:33]<rrsjggysgg>The query I had before runs 1 row in set (12.29 sec)
[23:33]<rrsjggysgg>You saved me a second though!
[23:34]<rrsjggysgg>I have to go though too, maybe tomorrow
[23:34]<rrsjggysgg>Thanks for your help
[23:34]<sgjdns>Keloran: Did you check that the table "Staff" exists in the selected database?
[23:34]<slzzzwjzc>if i said i wanted a user to be able to upload a 20MB csv file and produce 160MB worth of new DB rows, would i be crazy?
[23:34]<slzzzwjzc>over a web interface
[23:34]<rrsjggysgg>insane
[23:35]<zzaxyvysv>sparrwork, yes because most installs limit uploads
[23:36]<slzzzwjzc>assume for the moment that mine doesnt
[23:37]<zzaxyvysv>and have timeouts
[23:42]<lnm-hnm>is it possible to "DELETE FROM table1, table2, table3 WHERE username = '%u'
[23:43]<slzzzwjzc>i can disable the timeouts
[23:43]<lnm-hnm>or DELETE FROM table1 AND table2 AND table2 WHERE username = '%u'
[23:48]<zzaxyvysv>sparrwork, My app at home abuses csv loading, I dont upload but do use php to read and parse and its single user
[23:57]<fzrgcr2fu>Is there a easy way of adding a set number like 15000 to a field? As I need to change the place where the key numbers start in a table
[23:59]<drgynfn_>Frankablu: Are you trying to change the starting point of an autoincrementing key or are you just wanting to set a constant value to a random field?
[23:59]<fzrgcr2fu>DanielE_: autoincrementing key

Back to #mysql
Or go to some related logs:
#gentoo
#gentoo
#gentoo
#cisco
#azureus