Friday, December 04, 2009

GreenSQL- Free database firewall protects PostgreSQL and MySQL

GreenSQL is an Open Source database firewall used to protect databases from SQL injection attacks. GreenSQL works as a proxy for SQL commands and has built in support for MySQL & PostgreSQL . The logic is based on evaluation of SQL commands using a risk scoring matrix as well as blocking known db administrative commands (DROP, CREATE, etc). GreenSQL is distributed under the GPL license.

You can download it here

GreenSQL works as a reverse proxy for MySQL connections. This means, that instead of connecting TO THE MySQL server, your applications will connect to THE GreenSQL server. GreenSQL will analyze SQL queries and then, if they're safe, will forward them to the back-end MySQL server.

The following picture describes the whole process:


As you can see, GreenSQL calls the real database server to execute SQL commands and the web application connects to the GreenSQL server as if it were a real database server.

GreenSQL can be installed together with the database server on the same computer or it can use a distinct server. By default GreenSQL listens on local port 127.0.0.1:3305 redirecting SQL requests to 127.0.0.1:3306 (the default MySQL setting). These settings can be altered using the GreenSQL Console.

For more details, please refer to GreenSQL website:
http://www.greensql.net/about

5 comments:

Tokwear said...

aiyak... produce more bottle neck hehehehe

Johncrackernet said...

Yer ker Tokwear? Kawe tok try agi Tool ni....tp tgk diagram bottleneck ah...berlapis2 firewall...hahahaa

Anonymous said...

Genial post and this enter helped me alot in my college assignement. Gratefulness you seeking your information.

Anonymous said...

My friend and I were recently discussing about how modern society has evolved to become so integrated with technology. Reading this post makes me think back to that debate we had, and just how inseparable from electronics we have all become.


I don't mean this in a bad way, of course! Ethical concerns aside... I just hope that as technology further innovates, the possibility of transferring our memories onto a digital medium becomes a true reality. It's one of the things I really wish I could see in my lifetime.


(Posted on Nintendo DS running [url=http://knol.google.com/k/anonymous/-/9v7ff0hnkzef/1]R4i[/url] DS S3)

Anonymous said...

Brim over I agree but I think the post should acquire more info then it has.