GreenSQL is an Open Source database firewall used to protect databases from SQL injection attacks. GreenSQL works as a proxy and has built in support for MySQL. The logic is based on evaluation of SQL commands using a risk scoring matrix as well as blocking known db administrative commands (DROP, CREATE, etc). GreenSQL provides MySQL database security solution. GreenSQL is distributed under the GPL license.
Need help with GreeenSQL Installation ?
Check out the installation howto. If you need GreenSQL support team direct help please check our support service.

Spread The Word

Help GreenSQL promote the GreenSQL DB Firewall Open Source project and free software technologies by spreading the word about us.

You can use the GreenSQL db Firewall banner or logo with link

- on your website to link to ours
- on blogs and forums to make other people aware of what GreenSQL means

Just choose an image to use and then copy and paste the HTML code under it into your website or blog. It couldn't be easier!

1. Protected by GreenSQL Button, 120x60

GreenSQL-FW: 1.2.0 released

GreenSQL Database Firewall 1.2 is now available.

GreenSQL 1.2 includes many new features and enhancements.
In this version, GreenSQL provides native support for PostgreSQL (http://www.postgresql.org) databases for the very first time. In fact, GreenSQL is the only database firewall (Open or Closed Source) available for the protection of the many PostgreSQL databases currently in use.

GreenSQL-FW: 1.1.0 released

GreenSQL 1.1 is primarily a bug fix update of the previous GreenSQL version. One of the main fixes is to ensure code compliance with the MySQL version 5.0 protocol. During the MySQL protocol handshake, we disable MySQL built-in compression and encryption as GreenSQL does not yet support them. Old versions of GreenSQL were not aware of the compression and encryption at all, so by disabling them, we are able to check and forward the database queries.

GreenSQL-FW: 1.0.0 released

The GreenSQL team is ready to present a new version of GreenSQL - SQL Database Firewall. GreenSQL intercepts SQL commands being sent to MySQL, checks them, and then either halts the query or passes it on to MySQL proper. Then it returns the query results to the calling application. Currently only MySQL database is supported. GreenSQL is distributed under the GPL license. This release includes a new version of firewall and a management application.

GreenSQL-FW: 0.9.6 released

GreenSQL is a database firewall used to protect database from SQL injection attacks. New release fixes a number of critical bugs. We recommend all users to upgrade.

This release includes a number of pre-build packages of popular operating systems. We supply packages for: CentOS, openSUSE, Fedora, Ubuntu, Debian.

List of changes:
1. Code optimization.
2. Minor management bugs were fixes.
3. New MySQL patterns and commands added.
4. A number of risk matrix calculation bugs were fixed.
5. Debian package was enhanced. A lot of bugs were fixed.

GreenSQL Performance Test

GreenSQL becomes popular product. We received a number of inquiries from our users asking about database firewall performance. In addition, in new application version, we had made numerous optimization patches. In order to feel the gap we decided to perform and publish results of the performance tests.

Backdoor webserver using MySQL SQL Injection

MySQL Database is a great product used by thousand of websites. Various web applications use MySQL as their default database. Some of these applications are written with security in mind, and some are not. In this article, I would like to show you how you can exploit SQL injection in order to gain almost full control over your webserver.

SQL Injection Test Page

I finally finished coding for the SQL injection test page. I coded it as a drupal plugin. This SQL Injection page could be used to evaluate SQL protection using GreenSQL database firewall. In addition all SQL queries blocked are shown in demo version of GreenSQL installed at this site. You can reach SQL injection test page using the following url:

http://www.greensql.net/sql-injection-test

Syndicate content

Back to top