next »

[isthisthingon]

hmm proxy eh

interesting:

http://www.greensql.net/

Definitely gonna check this out.  I've been pretty frustrated in the past with various Bayesian-type approaches to filtering out unwanteds (email only).  But with the right tuning and possible automated improvements to injection detection this could be a really nice tool.

[perkiset]

Man, given the "I have no real control" notion, that's a sweet and slick solution. You'll need shell access (or equivalent) to install it, and you'll need to get in the way of the connection to the database - so hopefully, the app you're working with has a single connection point rather than mysql_connects all over the place (in which case, you're phuqued).

Optionally, if you can get the MySQL instance reset to listen on another port, you could put GreenSQL on the normal MySQL port, then put MySQL on 3305 (like the docs on that site) - then PHP would think it's talking to a regular old MySQL instance but it's talking to the proxy instead.

Very interesting indeed.