From: Martin Gainty
Date: September 23 2012 11:27pm
Subject: RE: How to block SELECT * FROM table; but not SELECT * FROMT table
 WHERE...;
List-Archive: http://lists.mysql.com/mysql/228240
Message-Id: <BLU142-W4C429FFC1F072FE26B780AE9F0@phx.gbl>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="_2078e049-85c6-4cfa-9ab5-473dc180ee9c_"

--_2078e049-85c6-4cfa-9ab5-473dc180ee9c_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


Possibly run your constructed query thru a regex expression e.g.
String mydata =3D "SELECT * from table WHERE a<b=3B"=3B
Pattern pattern =3D Pattern.compile("'WHERE'")=3B
Matcher matcher =3D pattern.matcher(mydata)=3B
if (matcher.find())
{
 //WHERE clause found proceed normally
}
else throw new Exception("WHERE clause not found")=3B
Martin=20
______________________________________________=20
Verzicht und Vertraulichkeitanmerkung/Note de d=E9ni et de confidentialit=
=E9

Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaeng=
er sein=2C so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiter=
leitung oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient l=
ediglich dem Austausch von Informationen und entfaltet keine rechtliche Bin=
dungswirkung. Aufgrund der leichten Manipulierbarkeit von E-Mails koennen w=
ir keine Haftung fuer den Inhalt uebernehmen.
Ce message est confidentiel et peut =EAtre privil=E9gi=E9. Si vous n'=EAtes=
 pas le destinataire pr=E9vu=2C nous te demandons avec bont=E9 que pour sat=
isfaire informez l'exp=E9diteur. N'importe quelle diffusion non autoris=E9e=
 ou la copie de ceci est interdite. Ce message sert =E0 l'information seule=
ment et n'aura pas n'importe quel effet l=E9galement obligatoire. =C9tant d=
onn=E9 que les email peuvent facilement =EAtre sujets =E0 la manipulation=
=2C nous ne pouvons accepter aucune responsabilit=E9 pour le contenu fourni=
.


> Date: Sun=2C 23 Sep 2012 18:38:58 -0400
> Subject: Re: How to block SELECT * FROM table=3B but not SELECT * FROMT t=
able WHERE...=3B
> From: fuller.artful@stripped
> To: pownalltim@stripped
> CC: mysql@stripped
>=20
> Tim=2C
>=20
> I think you misunderstood the question. Daniel wants to block Select
> queries that ask for all rwows=2C and permit only queries that ask for so=
me
> rows=2C as restricted by the Where clause.
>=20
> Unfortunately=2C I don't think that can be done. But I'm not certain of t=
hat=3B
> there might be a trick.
>=20
> Arthur
> www.artfulsoftware.com
>=20
> On Sun=2C Sep 23=2C 2012 at 3:50 PM=2C Tim Pownall <pownalltim@stripped>=
 wrote:
>=20
> >  select * from table where column=3Dvalue means it will return only row=
s that
> > match.  as long as you have proper indexing there should not be any iss=
ues.
> >
> > On Sun=2C Sep 23=2C 2012 at 1:23 PM=2C Luis Daniel Lucio Quiroz <
> > luis.daniel.lucio@stripped> wrote:
> >
> >
 		 	   		  =

--_2078e049-85c6-4cfa-9ab5-473dc180ee9c_--