GreenSQL is an Open Source database firewall used to protect databases from SQL injection attacks. GreenSQL works as a proxy and has built in support for MySQL. The logic is based on evaluation of SQL commands using a risk scoring matrix as well as blocking known db administrative commands (DROP, CREATE, etc). GreenSQL provides MySQL database security solution. GreenSQL is distributed under the GPL license.
Need help with GreeenSQL Installation ?
Check out the installation howto. If you need GreenSQL support team direct help please check our support service.

MySQL Security Best Practices (Hardening MySQL Tips)

Introduction

The MySQL database has become the world's most popular open source database because of its consistent fast performance, high reliability and ease of use. MySQL is used on every continent – yes, even in Antarctica! – by individuals, Web developers, as well as many of the world's largest and fastest-growing organizations such as industry leaders Yahoo!, Alcatel-Lucent, Google, Nokia, YouTube and others to save time and money powering their high-volume websites, business-critical systems, and packaged software.

Spread The Word

Help GreenSQL promote the GreenSQL DB Firewall Open Source project and free software technologies by spreading the word about us.

You can use the GreenSQL db Firewall banner or logo with link

- on your website to link to ours
- on blogs and forums to make other people aware of what GreenSQL means

Just choose an image to use and then copy and paste the HTML code under it into your website or blog. It couldn't be easier!

1. Protected by GreenSQL Button, 120x60

GreenSQL-FW: 1.2.0 released

GreenSQL Database Firewall 1.2 is now available.

GreenSQL 1.2 includes many new features and enhancements.
In this version, GreenSQL provides native support for PostgreSQL (http://www.postgresql.org) databases for the very first time. In fact, GreenSQL is the only database firewall (Open or Closed Source) available for the protection of the many PostgreSQL databases currently in use.

GreenSQL-FW: 1.1.0 released

GreenSQL 1.1 is primarily a bug fix update of the previous GreenSQL version. One of the main fixes is to ensure code compliance with the MySQL version 5.0 protocol. During the MySQL protocol handshake, we disable MySQL built-in compression and encryption as GreenSQL does not yet support them. Old versions of GreenSQL were not aware of the compression and encryption at all, so by disabling them, we are able to check and forward the database queries.

GreenSQL Performance Test

GreenSQL becomes popular product. We received a number of inquiries from our users asking about database firewall performance. In addition, in new application version, we had made numerous optimization patches. In order to feel the gap we decided to perform and publish results of the performance tests.

Backdoor webserver using MySQL SQL Injection

MySQL Database is a great product used by thousand of websites. Various web applications use MySQL as their default database. Some of these applications are written with security in mind, and some are not. In this article, I would like to show you how you can exploit SQL injection in order to gain almost full control over your webserver.

SQL Injection Test Page

I finally finished coding for the SQL injection test page. I coded it as a drupal plugin. This SQL Injection page could be used to evaluate SQL protection using GreenSQL database firewall. In addition all SQL queries blocked are shown in demo version of GreenSQL installed at this site. You can reach SQL injection test page using the following url:

http://www.greensql.net/sql-injection-test

Syndicate content

Back to top