[B! Security][mysql] justoneplanetã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

justoneplanet id:justoneplanet

Securityã¨mysqlã«é–¢ã™ã‚‹justoneplanetã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

PDOã«ãŠã‘ã‚‹ä¸€å¿œã®å®‰å…¨å®£è¨€ã¨æ®‹ã‚‹å•é¡Œç‚¹
8æœˆ18æ—¥ã«PHP5.3.7ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¾ã—ãŸã€‚ã“ã®ãƒªãƒªãƒ¼ã‚¹ã«ã‚ˆã‚Šã€PDOã®SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®å•é¡ŒãŒä¸€å¿œè§£æ±ºã•ã‚ŒãŸã¨åˆ¤æ–ã—ã¾ã—ãŸã®ã§ã€ã“ã“ã«ã€Œä¸€å¿œã®å®‰å…¨å®£è¨€ã€ã‚’è¡¨æ˜Žã™ã‚‹ã¨ã¨ã‚‚ã«ã€æ®‹ã‚‹å•é¡Œã«ã¤ã„ã¦å ±å‘Šã—ã¾ã™ã€‚ PDOã®å•é¡Œã¨ã¯ä½•ã‹ ä»¥å‰ã€ã¼ããŒPDOã‚’æŽ¡ç”¨ã—ãªã‹ã£ãŸã‚ã‘(Shift_JISã«ã‚ˆã‚‹SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³)ã«ã¦å ±å‘Šã—ãŸã‚ˆã†ã«ã€PHP5.3.5ä»¥å‰ã®PDOã«ã¯DBæŽ¥ç¶šæ™‚ã«æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’æŒ‡å®šã™ã‚‹æ©Ÿèƒ½ãŒãªã„ãŸã‚ã€æ–‡å—åˆ—ãƒªãƒ†ãƒ©ãƒ«ã®ã‚¨ã‚¹ã‚±ãƒ¼ãƒ—ã®éš›ã«æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’Latin1ã‚’ä»®å®šã—ã¦ã—ã¾ã†ã¨ã„ã†å•é¡ŒãŒã‚ã‚Šã¾ã—ãŸã€‚ã“ã®çŠ¶æ…‹ã§ã™ã¨ã€DBã«Shift_JISã§æŽ¥ç¶šã—ã¦ã„ã‚‹éš›ã«ã€SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³è„†å¼±æ€§ãŒæ··å…¥ã—ã¾ã—ãŸã€‚ â€» å®Ÿã¯ã€å…ˆã®ã‚¨ãƒ³ãƒˆãƒªã®ã€Œè¿½è¨˜(2010/07/01 22:20)ã€ã«ç´¹ä»‹ã—ãŸæ–¹æ³•ã§æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’æŒ‡å®šã§ãã‚‹ã®ã§ã™ãŒã€ã»ã¨ã‚“ã©çŸ¥ã‚‰ã‚Œã¦ã„ãªã„ã®ã¨
justoneplanet 2011/08/24
mysql

charset

PDO

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

php
ãƒªãƒ³ã‚¯
ã¼ããŒPDOã‚’æŽ¡ç”¨ã—ãªã‹ã£ãŸã‚ã‘(Shift_JISã«ã‚ˆã‚‹SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³)
è£œè¶³ ã“ã®è¨˜äº‹ã¯æ—§å¾³ä¸¸æµ©ã®æ—¥è¨˜ã‹ã‚‰ã®è»¢è¼‰ã§ã™ã€‚å…ƒURLã€ã‚¢ãƒ¼ã‚«ã‚¤ãƒ–ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯1ã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯2ã€‚ å‚™å¿˜ã®ãŸã‚è»¢è¼‰ã„ãŸã—ã¾ã™ãŒã€ã“ã®è¨˜äº‹ã¯2010å¹´7æœˆ1æ—¥ã«å…¬é–‹ã•ã‚ŒãŸã‚‚ã®ã§ã€å½“æ™‚ã®å¾³ä¸¸ã®è€ƒãˆã‚’ç¤ºã™ã‚‚ã®ã‚’ã€åŸºæœ¬çš„ã«å†…å®¹ã‚’å¤‰æ›´ã›ãšã«ãã®ã¾ã¾è»¢è¼‰ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ è£œè¶³çµ‚ã‚ã‚Š PHPã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãƒ»ã‚¢ã‚¯ã‚»ã‚¹ãƒ»ãƒ©ã‚¤ãƒ–ãƒ©ãƒªPDOã¯ã€DBæŽ¥ç¶šæ™‚ã®æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°æŒ‡å®šãŒã§ããªã„ãŸã‚ã€æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã®é¸æŠžã«ã‚ˆã£ã¦ã¯ã€ãƒ—ãƒ¬ãƒ¼ã‚¹ãƒ›ãƒ«ãƒ€ã‚’ä½¿ã£ã¦ã„ã¦ã‚‚SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³è„†å¼±æ€§ãŒç™ºç”Ÿã—ã¾ã™ã€‚ è¿½è¨˜(2011/06/19) ã“ã“ã«æ¥ã¦æ€¥ã«ãƒ–ã‚¯ãƒžãŒè¿½åŠ ã•ã‚Œã¯ã˜ã‚ã¦ã„ã¾ã™ãŒã€ã“ã®ã‚¨ãƒ³ãƒˆãƒªã‚’æ›¸ã„ã¦ã‹ã‚‰çŠ¶æ³ãŒæ”¹å–„ã—ã¦ã„ã¾ã™ã€‚PHP5.3.6(2011/03/17)ã«ã¦ã€PDOã§ã‚‚ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹æŽ¥ç¶šã®æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’æŒ‡å®šã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ã“ã®ç‰ˆã§ã€UNIXç‰ˆã®PHPã§ã¯è§£æ±ºã—ã¾ã—ãŸãŒã€Win
justoneplanet 2011/08/24
mysql

charset

PDO

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

php
ãƒªãƒ³ã‚¯
MySQLã€ãƒ–ãƒ©ã‚¤ãƒ³ãƒ‰ SQL ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ã‚ˆã‚Šæƒ…å ±æ¼æ´©ãŒç™ºç”Ÿ | ã‚¹ãƒ©ãƒ‰ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
MySQL.com ã¨é–¢é€£ã™ã‚‹ã‚µã‚¤ãƒˆãŒç±³å›½æ™‚é–“ 27 æ—¥ã«ã‚¯ãƒ©ãƒƒã‚¯ã•ã‚Œã€æƒ…å ±ãŒæ¼æ´©ã—ãŸæ¨¡æ§˜ã€‚æ‰‹æ³•ã¯ãƒ–ãƒ©ã‚¤ãƒ³ãƒ‰ SQL ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«ã‚ˆã‚‹ã‚‚ã®ã¨è€ƒãˆã‚‰ã‚Œã¦ã„ã‚‹ (Techie Buzz ã®è¨˜äº‹ã€æœ¬å®¶ /. è¨˜äº‹ã‚ˆã‚Š) ã€‚ è¢«å®³ã«éã£ãŸã®ã¯æœ¬å®¶ MySQL.com ã®ä»–ã€ãƒ•ãƒ©ãƒ³ã‚¹ã€ãƒ‰ã‚¤ãƒ„ã€ã‚¤ã‚¿ãƒªã‚¢ã® MySQL ã®ã‚µã‚¤ãƒˆã€‚æ¼æ´©ã—ãŸæƒ…å ±ã«ã¯ MySQL é–¢ä¿‚è€…ã® Em ail ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚„èªè¨¼æƒ…å ±ã®ä»–ã€é¡§å®¢æƒ…å ±ã‚„å†…éƒ¨ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æƒ…å ±ã‚‚å«ã¾ã‚Œã¦ã„ã‚‹ã¨ã„ã†ã€‚ã¾ãŸ XSS è„†å¼±æ€§ã«ã¤ã„ã¦ã‚‚è©³ç´°ã«å ±å‘Šã•ã‚Œã¦ãŠã‚Šæ¼æ´©ãŒã•ã‚‰ã«æ‹¡å¤§ã™ã‚‹æã‚Œã‚‚ã‚ã‚‹ã¨ã®ã“ã¨ã§ã€ã•ã‚‰ã«ã¯ Sun.com ã«ã‚ã‚‹ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã®å†…å®¹ã‚‚æ—¢ã«ã‚¯ãƒ©ãƒƒã‚¯ã•ã‚Œã¦ã„ã‚‹å ±å‘Šã‚‚ã‚ã‚‹ã€‚ ä»Šã®ã¨ã“ã‚ MySQL ã‹ã‚‰ã¯ã“ã®ä»¶ã«é–¢ã™ã‚‹ãƒ‹ãƒ¥ãƒ¼ã‚¹ãƒªãƒªãƒ¼ã‚¹ãŒå‡ºã¦ã„ãªã„ãŒã€æ˜¯éžã¨ã‚‚ MySQL ã®çŸœæƒ (ãã†ã„ã†ã‚‚ã®ãŒã‚ã‚‹ã®ãªã‚‰) ã‚’è³ã—ã¦å¯¾ç–ã‚’æ–½ã—ã¦æ¬²ã—ã„ã‚‚ã®ã§
justoneplanet 2011/03/29
MySQL

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

attack
ãƒªãƒ³ã‚¯
MySQL :: MySQL Forums
Forum to discuss quality assurance techniques, such as bug reports, test cases, code patches
justoneplanet 2011/03/10
MySQL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

prepared

statement
ãƒªãƒ³ã‚¯
ã‚¦ãƒŽã‚¦ãƒ©ãƒœ Unoh Labs: PHPã§æš—å·åŒ–ãƒ»å¾©å·åŒ–ã‚ã‚Œã“ã‚Œ
GT Nitro: Car Game Drag Raceã¯ã€å…¸åž‹çš„ãªã‚«ãƒ¼ã‚²ãƒ¼ãƒ ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ã“ã‚Œã¯ã‚¹ãƒ”ãƒ¼ãƒ‰ã€ãƒ‘ãƒ¯ãƒ¼ã€ã‚¹ã‚ãƒ«å…¨é–‹ã®ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã‚²ãƒ¼ãƒ ã§ã™ã€‚ãƒ–ãƒ¬ãƒ¼ã‚ã¯å¿˜ã‚Œã¦ã€ã“ã‚Œã¯ãƒ‰ãƒ©ãƒƒã‚°ãƒ¬ãƒ¼ã‚¹ã€ãƒ™ã‚¤ãƒ“ãƒ¼ï¼å¤å…¸çš„ãªã‚¯ãƒ©ã‚·ãƒƒã‚¯ã‹ã‚‰æœªæ¥çš„ãªãƒ“ãƒ¼ã‚¹ãƒˆã¾ã§ã€æœ€ã‚‚ã‚¯ãƒ¼ãƒ«ã§é€Ÿã„è»Šã¨ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã§ãã¾ã™ã€‚ã‚¹ãƒ†ã‚£ãƒƒã‚¯ã‚·ãƒ•ãƒˆã‚’ãƒžã‚¹ã‚¿ãƒ¼ã—ã€ãƒ‹ãƒˆãƒã‚’è³¢ãä½¿ã£ã¦ç«¶äº‰ã‚’æ‰“ã¡ç ´ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ã“ã®ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã‚²ãƒ¼ãƒ ã¯ãã®ãƒªã‚¢ãƒ«ãªç‰©ç†å¦ã¨ç´ æ™´ã‚‰ã—ã„ã‚°ãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚¹ã§ã‚ãªãŸã®å¿ƒã‚’çˆ†ç™ºã•ã›ã¾ã™ã€‚ã“ã‚Œã¾ã§ãƒ—ãƒ¬ã‚¤ã—ãŸã“ã¨ã®ãªã„ã‚ˆã†ãªã‚‚ã®ã§ã™ã€‚ GT Nitroã¯ã€ãƒªãƒ•ãƒ¬ãƒƒã‚¯ã‚¹ã¨ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã‚’è©¦ã™ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã‚²ãƒ¼ãƒ ã§ã™ã€‚æ£ã—ã„çž¬é–“ã«ã‚®ã‚¢ã‚’ã‚·ãƒ•ãƒˆã—ã€ã‚¬ã‚¹ã‚’æ€ã„åˆ‡ã‚Šè¸ã‚€å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ã¾ãŸã€å¤§ç‰©ãŸã¡ã¨ç«¶ã„ã¤ã¤ã€è»Šã®ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã¨ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã‚‚è¡Œã‚ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“ã€‚ä¸–ç•Œä¸ã§æœ€é«˜ã®ãƒ‰ãƒ©ã‚¤ãƒãƒ¼ã¨è»Šã¨ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã«æŒ‘ã‚€ã“ã¨ã«ãªã‚Šã€ãƒ‰ãƒ©ãƒƒã‚°ãƒ¬ãƒ¼ã‚¹ã®çŽ‹å†
justoneplanet 2010/04/08
PHP

programming

ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

æš—å·åŒ–
ãƒªãƒ³ã‚¯
MySQL :: MySQL 4.1 ãƒªãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ãƒžãƒ‹ãƒ¥ã‚¢ãƒ« :: 4.3.1 ä¸€èˆ¬çš„ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³
ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«æŽ¥ç¶šã•ã‚ŒãŸã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã§ MySQL ã‚’ä½¿ç”¨ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ã¯ã™ã¹ã¦ã€ã“ã®ã‚»ã‚¯ã‚·ãƒ§ãƒ³ã‚’èªã‚“ã§ã€é »ç™ºã—ã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¾µå®³ã‚’å›žé¿ã™ã‚‹ã‚ˆã†ã«ã—ã¦ãã ã•ã„ã€‚ ç›—è´å‚å—ã€æ”¹ã–ã‚“ã€å†ç”Ÿã€ã‚µãƒ¼ãƒ“ã‚¹å¦¨å®³ãªã©ã€ã‚ã‚‰ã‚†ã‚‹ã‚¿ã‚¤ãƒ—ã®æ”»æ’ƒã«å¯¾ã—ã¦ã€MySQL ã‚µãƒ¼ãƒã ã‘ã§ãªãã€ã‚µãƒ¼ãƒãƒ›ã‚¹ãƒˆå…¨ä½“ã‚’ã€æœ€å¤§é™ã®åŠªåŠ›ã‚’ã‚‚ã£ã¦ä¿è·ã™ã‚‹ã“ã¨ãŒå¿…è¦ã§ã™ã€‚ã“ã“ã§ã¯ã€å¯ç”¨æ€§ãŠã‚ˆã³è€éšœå®³æ€§ã®ã™ã¹ã¦ã«ã¤ã„ã¦ã¯ã‚«ãƒãƒ¼ã—ã¦ã„ã¾ã›ã‚“ã€‚ MySQL ã§ã¯ã€ã™ã¹ã¦ã®æŽ¥ç¶šã€ã‚¯ã‚¨ãƒªãªã©ã€ãƒ¦ãƒ¼ã‚¶ãŒå®Ÿè¡Œã™ã‚‹å¯èƒ½æ€§ã®ã‚ã‚‹æ“ä½œã«å¯¾ã—ã¦ã€ãã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã€ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ãƒªã‚¹ãƒˆï¼ˆACLï¼‰ã‚’ãƒ™ãƒ¼ã‚¹ã«ã—ã¦ä¿è·ã—ã¦ã„ã¾ã™ã€‚MySQL ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒé–“ã® SSL æš—å·åŒ–æŽ¥ç¶šã‚‚ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã™ã€‚ã“ã“ã§èª¬æ˜Žã™ã‚‹æ¦‚å¿µã®å¤šãã¯ã€MySQL å›ºæœ‰ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ã»ã¨ã‚“ã©ã™ã¹ã¦ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«å½“ã¦ã¯ã¾ã‚Šã¾ã™ã€‚ MySQL ã‚’å®Ÿè¡Œã™ã‚‹éš›ã«ã¯ã€å¯èƒ½ãªé™ã‚Šä»¥ä¸‹ã®
justoneplanet 2010/01/26
mysql

security

æš—å·åŒ–
ãƒªãƒ³ã‚¯
1