Prevent MySQL LOAD DATA statements
ClosedPublic
Actions

Authored by dereckson on Dec 5 2019, 14:42.

Tags

Referenced Files

	F34899512: D2101.id.diff
	Fri, Jul 3, 19:10

	F34856947: D2101.id5304.diff
	Fri, Jul 3, 12:33

	F34759456: D2101.id5303.diff
	Thu, Jul 2, 23:00

	F34739879: D2101.id5304.diff
	Thu, Jul 2, 21:14

	Unknown Object (File)
	Wed, Jul 1, 11:17

	Unknown Object (File)
	Fri, Jun 26, 01:57

	Unknown Object (File)
	Wed, Jun 24, 03:40

	Unknown Object (File)
	Tue, Jun 23, 06:18

View All Files

Subscribers

Nasqueron Docker deployment squad

Details

Reviewers

dereckson

Commits

rDPHAB7c206bd5af07: Prevent MySQL LOAD DATA statements

Summary

This setting is recommended for Phabricator installations,

Reference: https://www.php.net/manual/en/mysqli.configuration.php

Reference: https://secure.phabricator.com/rP98bf3a950dcfafe8d9f4485fc6fa2bb394924841

Test Plan

Tested here for DevCentral

Diff Detail

Repository

rDPHAB Docker image for Phabricator

Lint

No Lint Coverage

Unit

No Test Coverage

Branch

secure-mysqli

Build Status

Buildable 3277
Build 3526: arc lint + arc unit

Event Timeline

dereckson created this revision.Dec 5 2019, 14:42

Herald added a project: Docker images. · View Herald TranscriptDec 5 2019, 14:42

Herald added a subscriber: Nasqueron Docker deployment squad. · View Herald Transcript

dereckson requested review of this revision.Dec 5 2019, 14:42

Harbormaster completed remote builds in B3277: Diff 5303.Dec 5 2019, 14:42

dereckson accepted this revision.Dec 5 2019, 14:43

This revision is now accepted and ready to land.Dec 5 2019, 14:43

Closed by commit rDPHAB7c206bd5af07: Prevent MySQL LOAD DATA statements (authored by dereckson). · Explain WhyDec 5 2019, 14:45

This revision was automatically updated to reflect the committed changes.

dereckson added a commit: rDPHAB7c206bd5af07: Prevent MySQL LOAD DATA statements.

Revision Contents
Changeset List

Path

Size

files/

usr/

local/

etc/

php/

conf.d/

mysqli.ini

2 lines

Diff 5303

View Options

files/usr/local/etc/php/conf.d/mysqli.ini

Prevent MySQL LOAD DATA statementsClosedPublicActions