Just a few ?'s

[kornmonkie]

I may be blind, but does JaguarPC keep and allow us to view SQL logs? If so, is that available from the CP?

Also, is there a PHP server variable that returns the name of the current URL location? Or do I need to creat a variable inside the script with the name of the file or location?

Thank you for your help.

[Vin DSL]

Hrm... I don't know if MySQL logging is even turned on...

I'll check it out when I get home.

[Vin DSL]

I was just thinking, have you tried doing 'whereis mysqld.log' yet?

[Smo]

Also, is there a PHP server variable that returns the name of the current URL location? Or do I need to creat a variable inside the script with the name of the file or location?

$PHP_SELF 

should do the trick on subdomains it seems to give random responses to me. eather /subdomain/file.php or just file.php

[jason]

Depending on your setup you may have to use $_SERVER['PHP_SELF'] (that's the more secure way to do it, besides ), but just $PHP_SELF will probably work. If you find PHP_SELF to be inconsistant, you could try SCRIPT_NAME or REQUEST_URI as well; they should all have the same values.

--Jason

[kornmonkie]

Thank you...

Both $_SERVER['PHP_SELF'] and $PHP_SELF do what I needed.

Also, there's a .mysql_history file that does have some past SQL stuff, but it seems like the entries in the file are from an old project.

I figured if Jag didn't have any SQL logs, I could just make them myself with a database.

Thanks again for the variables, they will really help.

[jason]

I'm not positive, but the "history" file is probably just a list of commands that you've typed at the mysql> prompt, similar to the .bash_histroy file that keeps track of your last x command entries so that you can press the up and down arrows to recall what you've previously typed.

If the MySQL logs are kept they are probably (unfortunately) kept in a place that you can't access with JailShell, just like the HTTP logs. I used to like being able to shell in and grep through my logs, especially when I was doing testing. Now I have download them by hand or rely on the recent errors page of cpanel.

--Jason

[kornmonkie]

Thanks for your help..

I made a little script that would add the info from a submitted form into a secondary database.

Since it's not possible to view the logs of the SQL database, I wanted a way to check the info that people were submitting via the forms on my site.

I took the form submitted data and filtered it for SQL injections.

Then I just took $_SERVER['PHP_SELF'] for the current PHP page (thank you!), $_SERVER['REMOTE_ADDR'] for the IP, and the filtered data from the form and inserted the info to a seperate database from the one I am using for my login information.

I guess if one database is unsecure and injectable, then the one with the stored form info may be as well, but it's the best I can do given what I got.