I’ve just put a MYSQL firewall between one of my 0.9.6.2 test installs and its backend database on a remote machine, its called GreenSQL and its available for most platforms, here
http://www.greensql.net/(Why is a different matter, some of the suits here have just discovered sql firewalls exist and want to see one in action as it were!).
I’ve only used it for a few hours on this site with its demo content but the results are good so far, the fw rules are picking up expected things like jot trying to create its tables/using show tables commands etc. The only real alert of interest was this one :-
Query: SELECT DISTINCT sc.id FROM `cnmodx`.`modx_site_content` AS sc LEFT JOIN `cnmodx`.`modx_document_groups` AS dg ON dg.document = sc.id WHERE sc.parent=’1’ AND (1=’1’ OR sc.privatemgr=0)
Time: 2009-02-06 11:40:24
DB User: cnuser
Risk: 35 blocked
Reason: Query has ’or’ token
True expression detected (SQL tautology)
ID: 1
I think I was in the manger here but I’m not sure, anyone else tried anything like this? It may help in tidying some core sql code up for the future.
