--[[ Copyright (C) 2007 MySQL AB This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; version 2 of the License. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA --]] --- -- read_query() can rewrite packets -- -- You can use read_query() to replace the packet sent by the client and rewrite -- query as you like -- -- @param packet the mysql-packet sent by the client -- -- @return -- * nothing to pass on the packet as is, -- * proxy.PROXY_SEND_QUERY to send the queries from the proxy.queries queue -- * proxy.PROXY_SEND_RESULT to send your own result-set -- function read_query( packet ) if string.byte(packet) == proxy.COM_QUERY then print("\nwe got a normal query: " .. string.sub(packet, 2)) proxy.queries:append(1, packet ) proxy.queries:append(2, string.char(proxy.COM_QUERY) .. "SHOW GLOBAL STATUS" ) return proxy.PROXY_SEND_QUERY end end -- We define some variables to handle the log files local log_file_com = '/tmp/mysql-com.log' local fh = io.open(log_file_com, "a+") function proxy.global.make_dataset (header, dataset) proxy.response.type = proxy.MYSQLD_PACKET_OK proxy.response.resultset = { fields = {}, rows = {} } for i,v in pairs (header) do table.insert( proxy.response.resultset.fields, {type = proxy.MYSQL_TYPE_STRING, name = v}) end for i,v in pairs (dataset) do table.insert(proxy.response.resultset.rows, v ) end return proxy.PROXY_SEND_RESULT end --- -- read_query_result() is called when we receive a query result -- from the server -- -- we can analyze the response, drop the response and pass it on (default) -- -- as we injected a SELECT NOW() above, we don't want to tell the client about it -- and drop the result with proxy.PROXY_IGNORE_RESULT -- -- @return -- * nothing or proxy.PROXY_SEND_RESULT to pass the result-set to the client -- * proxy.PROXY_IGNORE_RESULT to drop the result-set -- -- print("diego") function read_query_result(inj) -- print("injected result-set: id = " .. inj.type) -- we injected the SHOW STATUS with the id = 2 -- print("\nGot it") if (inj.type == 2) then local t = {} for row in inj.resultset.rows do if row[1] == nil then print("Bug here") os.exit() end print("injected query returned: " .. row[1] .. ":" .. row[2] ) key = row[1] val = row[2] t[key] = val end out_text = t.Com_delete .. " " .. t.Com_select .. " " .. t.Com_insert .. " " .. t.Com_update .. "\n" -- log results fh:write(out_text) fh:flush() -- return proxy.PROXY_IGNORE_RESULT return make_dataset( {'command', 'description' }, -- the header { -- the rows {'FOO', 'removes the database'}, {'BAR', 'drops all tables'}, {'FOOBAR', 'makes the server explode'}, } ) end if (inj.type ==1) then for row in inj.resultset.rows do print("injected query returned: " .. row[1]) end return proxy.PROXY_IGNORE_RESULT end end