Invision Community 4: SEO, prepare for v5 and dormant account notifications Matt November 11, 2024Nov 11
Posted March 31, 20196 yr I have Invision Community v4.4.2 when I search for SQL I don't get a result anymore
March 31, 20196 yr I think that is possibly by design to prevent 'accidents' from those who discover it by accident and then try things without realising the serious nature of the tool. It has been known.
April 1, 20196 yr Yes, the toolbox is being phased out, somewhat. You may wish to consider using phpmyadmin or a similar dedicated tool for managing your database.
October 3, 20204 yr On 4/1/2019 at 6:18 PM, bfarber said: Yes, the toolbox is being phased out, somewhat. You may wish to consider using phpmyadmin or a similar dedicated tool for managing your database. Nooooooo! Please don't remove it! 🥶 It is actually a great tool despite its simplicity, it saves us the hassle of connecting other dedicated software or to log via ssh and go to mysql command line just to see simple things, such as the raw names of the fields, specially when we are developing Pages templates, for example. Edited October 3, 20204 yr by xtech
October 3, 20204 yr Oh, what fortuitous timing. Please remove this completely dangerous tool. Offer it as an optional download. Stick it on your CICs if you must, but this is a completely unnecessary vector to be potentially exploited.
October 3, 20204 yr 10 hours ago, Paul E. said: Please remove this completely dangerous tool. It is only dangerous if the user knows what sql is. And if he knows, surely knows what DELETE FROM query is... 10 hours ago, Paul E. said: this is a completely unnecessary vector to be potentially exploited. Some simple measures could be taken, like forbidding UPDATE or DELETE queries. Allow only SELECT queries, for example.
