rookie question about SQL request

Discussion regarding Joomla! 1.5 security issues.
Joomla! Vulnerable Extensions: http://feeds.joomla.org/JoomlaSecurityV ... Extensions

Moderator: General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security Checklist
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.
Locked
User avatar
alainroger
Joomla! Explorer
Joomla! Explorer
Posts: 438
Joined: Sat Apr 25, 2009 4:48 am
Location: France
Contact:

rookie question about SQL request

Post by alainroger » Mon Oct 19, 2009 7:29 pm

Hi,

i'm new to joomla, however i would like to know if joomla is a stored procedure oriented system or if modules example are only SQL oriented system ?

i mean by that, if i use the default login module delivered by joomla, can i trust it while i will implement into my web site ? or should i rewrite it to use stored procedures ?

thanks a lot,

A.
what does not kill you, makes you stronger

homemade
Joomla! Apprentice
Joomla! Apprentice
Posts: 30
Joined: Mon Jan 12, 2009 10:30 am

Re: rookie question about SQL request

Post by homemade » Wed Oct 21, 2009 10:02 am

I really don't understand the question fully but here is some info.

In my experience as an apprentice, the login modules use MySQL/SQL statements to query the database. It does not use MySQL stored precedures. So when a user logs in, php sends request to database and the database looks in table #__users(jos_users). No SQL procedure is called .

statement probably looks something like this:
select from `#__users` where `username`=XX and `password`= ad4 LIMIT 1

User avatar
alainroger
Joomla! Explorer
Joomla! Explorer
Posts: 438
Joined: Sat Apr 25, 2009 4:48 am
Location: France
Contact:

Re: rookie question about SQL request

Post by alainroger » Wed Oct 21, 2009 6:46 pm

in fact i just wanted to know if login module use stored procedure or a simple SQL query...

it's only for security reason :-)
what does not kill you, makes you stronger

User avatar
thefactory
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 177
Joined: Mon Apr 23, 2007 12:04 pm
Location: Bukarest, Rumänien
Contact:

Re: rookie question about SQL request

Post by thefactory » Thu Oct 29, 2009 8:21 am

it uses simple sql query
http://www.thephpfactory.com- home of Auction Factory,
Article Manager, Blogging
Yahoo Answers Clone and Classified Extensions
and the new Dating and Matchmaking Extension - http://lovefactory.thephpfactory.com/


Locked

Return to “Security in Joomla! 1.5”