[CONJ-334] jdbc property allowLoadLocalInfile and allowUrlInLocalInfile is not working Created: 2016-08-17  Updated: 2017-12-06  Resolved: 2017-12-06

Status: Closed
Project: MariaDB Connector/J
Component/s: Other
Affects Version/s: 1.4.6
Fix Version/s: 2.2.1, 1.7.1

Type: Bug Priority: Major
Reporter: Radik Assignee: Diego Dupin
Resolution: Cannot Reproduce Votes: 0
Labels: security


 Description   

I added this properties to jdbc connection string.
allowLoadLocalInfile=false;allowUrlInLocalInfile=false;

but is no effect, sql operator 

LOAD DATA LOCAL INFILE ...

is still working.

On mysql jdbc driver this flags is working.

 Comments   
Comment by Diego Dupin [ 2016-08-22 ]

Hi,
I just tested and that is working well.
(And there is unit test to validate any regression on this).

Only "allowLoadLocalInfile=false" is permitted on mariadb driver.
allowUrlInLocalInfile isn't recognized.

Are you sure the properties are well configured ?
If this is configured in connection string, parameter are separated by "&", not ";", "allowLoadLocalInfile=false;allowUrlInLocalInfile=false;" would be reconized as "allowLoadLocalInfile" = "false;allowUrlInLocalInfile=false;".

Comment by Diego Dupin [ 2017-12-06 ]

closing since no answer and not reproduced

Generated at Thu Feb 08 03:14:54 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.