mysql udf 执行命令_执行系统命令的MySQL UDF -电脑资料

Bernardo Damele A. G. 针对这一问题做了一个更新包，增加了一个sys_eval函数，这一函数命令执行成功返回执行结果，而如果错误返回NULL。

这里下载补丁：here

lib_mysqludf_sysversion 0.0.2 在这里下载here.

使用实例：$ wget --no-check-certificate https://svn.sqlmap.org/sqlmap/trunk/sqlmap/extra/mysqludfsys/lib_mysqludf_sys_0.0.3.tar.gz

$ tar xfz lib_mysqludf_sys_0.0.3.tar.gz

$ cd lib_mysqludf_sys_0.0.3

$ sudo ./install.sh

Compiling the MySQL UDF

gcc -Wall -I/usr/include/mysql -I. -shared lib_mysqludf_sys.c -o /usr/lib/lib_mysqludf_sys.so

MySQL UDF compiled successfully

Please provide your MySQL root password

Enter password:

MySQL UDF installed successfully

$ mysql -u root -p mysql

Enter password:

[...]

mysql> SELECT sys_eval('id');

+--------------------------------------------------+

| sys_eval('id') |

+--------------------------------------------------+

|uid=118(mysql) gid=128(mysql) groups=128(mysql)|

+--------------------------------------------------+

1 row in set (0.02 sec)

mysql> SELECT sys_exec('touch /tmp/test_mysql');

+-----------------------------------+

| sys_exec('touch /tmp/test_mysql') |

+-----------------------------------+

|0|

+-----------------------------------+

1 row in set (0.02 sec)

mysql> exit

Bye

$ ls -l /tmp/test_mysql

-rw-rw---- 1 mysql mysql 0 2009-01-16 23:18 /tmp/test_mysql