Querier [Deleted]

[euantor]

euantor submitted a new resource:

Querier - Run SQL queries from the comfort of your admin panel.

Querier is a simple add-on that adds a new tool to your administration area allowing you to run queries against your database and see the output. This is mostly useful for developers, but can also be used to perform other simple tasks without having to open up a MySQL connection.

Querier adds an admin permission, allowing you to specify who can access the tool.

Screenshots


View attachment 57753 View attachment 57754

Read more about this resource...

 

[IcEWoLF]

This is a very nice addition! Thank you!

 

[DRE]

Well isn't that convenient.

 

[Digital Doctor]

Very

 

[Adam Howard]

Question

This can be a very large security issue. Is this limited only to the Super Administrator?

 

[SneakyDave]

Anybody with the admin permission, just as the description suggests.

 

[Adam Howard]

Anybody with the admin permission, just as the description suggests.

I figured I'd inquire.... The term "admin" is easily tossed around often without any distinction between the two.

 

[euantor]

Yeah, as said above its controlled by an admin permission so you can choose exactly who sees it

 

[tajhay]

Can someone link to the external site here. Im clicking on the external site link and it doesnt do anything.

 

[euantor]

Can someone link to the external site here. Im clicking on the external site link and it doesnt do anything.

There's not a lot to see, but here you go: http://www.xendevelop.com/threads/querier.1/#post-1

 

[tajhay]

There's not a lot to see, but here you go: http://www.xendevelop.com/threads/querier.1/#post-1

Thank you. For some reason it wasnt working on chrome. Worked on IE.

 

[euantor]

Thank you. For some reason it wasnt working on chrome. Worked on IE.

Strange. Maybe an issue with Chrome's dodgy DNS caching as I only set up DNS on the server yesterday and had a similar issue for a few hours.

 

[DRE]

I tried it for the first time today. I made sure I had admin rights to it etc then ran a query.
http://xenforo.com/community/resources/query-to-reset-bb-code-media-sites.2783/


Error Info Zend_Db_Statement_Mysqli_Exception: Mysqli prepare error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'INSERT INTO xf_bb_code_media_site (media_site_id, site_title, site_url, mat' at line 3 - library/Zend/Db/Statement/Mysqli.php:77 Generated By: DRE, 1 minute ago Stack Trace #0 /home/blah/public_html/library/Zend/Db/Statement.php(115): Zend_Db_Statement_Mysqli->_prepare('TRUNCATE xf_bb_...') #1 /home/blah/public_html/library/Zend/Db/Adapter/Mysqli.php(381): Zend_Db_Statement->__construct(Object(Zend_Db_Adapter_Mysqli), 'TRUNCATE xf_bb_...') #2 /home/blah/public_html/library/Zend/Db/Adapter/Abstract.php(478): Zend_Db_Adapter_Mysqli->prepare('TRUNCATE xf_bb_...') #3 /home/blah/public_html/library/Zend/Db/Adapter/Abstract.php(734): Zend_Db_Adapter_Abstract->query('TRUNCATE xf_bb_...', Array) #4 /home/blah/public_html/library/XenDevelop/Querier/ControllerAdmin/Tools.php(17): Zend_Db_Adapter_Abstract->fetchAll('TRUNCATE xf_bb_...') #5 /home/blah/public_html/library/XenForo/FrontController.php(347): XenDevelop_Querier_ControllerAdmin_Tools->actionQuerier() #6 /home/blah/public_html/library/XenForo/FrontController.php(134): XenForo_FrontController->dispatch(Object(XenForo_RouteMatch)) #7 /home/blah/public_html/admin.php(13): XenForo_FrontController->run() #8 {main} Request State array(3) { ["url"] => string(38) "https://8th.us/admin.php?tools/querier" ["_GET"] => array(1) { ["tools/querier"] => string(0) "" } ["_POST"] => array(2) { ["queryString"] => string(1671) "TRUNCATE xf_bb_code_media_site; INSERT INTO xf_bb_code_media_site (media_site_id, site_title, site_url, match_urls, embed_html, match_is_regex) VALUES ('facebook', 'Facebook', 'http://www.facebook.com', 'facebook.com/*video.php?v={$id:digits}\nfacebook.com/*photo.php?v={\$id:digits}', '<iframe src="https://www.facebook.com/video/embed?video_id={$id}" width="500" height="300" frameborder="0"></iframe>', 0), ('vimeo', 'Vimeo', 'http://www.vimeo.com', 'vimeo.com/{$id:digits}\nvimeo.com/groups/*/videos/{$id:digits}', '<iframe src="http://player.vimeo.com/video/{$id}" width="500" height="300" frameborder="0"></iframe>', 0), ('youtube', 'YouTube', 'http://www.youtube.com', 'youtube.com/watch?v={$id}\nyoutube.com/v/{$id}\nyoutu.be/{$id}\nyoutube.com/*/u/*/{$id}\nyoutube.com/watch?feature=player_embedded&v={$id}', '<iframe width="500" height="300" src="http://www.youtube.com/embed/{$id}?wmode=opaque" frameborder="0" allowfullscreen></iframe>', 0), ('metacafe', 'Metacafe', 'http://www.metacafe.com', '#metacafe\\\\.com/watch/(?P<id>\\\\d+)/#siU', '<iframe src="http://www.metacafe.com/embed/{$id:digits}/" width="500" height="300" allowFullScreen frameborder=0></iframe>', 1), ('dailymotion', 'Dailymotion', 'http://www.dailymotion.com', 'dailymotion.com/video/{$id:alphanum}', '<iframe frameborder="0" width="500" height="300" src="http://www.dailymotion.com/embed/video/{$id}?width=500&hideInfos=1"></iframe>', 0), ('liveleak', 'Liveleak', 'http://www.liveleak.com', 'liveleak.com/view?i={$id}', '<iframe width="500" height="300" src="http://www.liveleak.com/ll_embed?i={$id}" frameborder="0" allowfullscreen></iframe>', 0);" ["_xfToken"] => string(8) "********" } }

 

[euantor]

That's strange. Can you paste the query that you were attempting to run @DRE?

 

[DRE]

I did. Click the first link I posted.

 

[euantor]

I did. Click the first link I posted.

Whoops, don't know how I missed that one.

What happens if you run the queries separately:

TRUNCATE xf_bb_code_media_site;

INSERT INTO xf_bb_code_media_site
    (media_site_id, site_title, site_url, match_urls, embed_html, match_is_regex)
VALUES
    ('facebook', 'Facebook', 'http://www.facebook.com', 'facebook.com/*video.php?v={$id:digits}\nfacebook.com/*photo.php?v={\$id:digits}', '<iframe src="https://www.facebook.com/video/embed?video_id={$id}" width="500" height="300" frameborder="0"></iframe>', 0),
    ('vimeo', 'Vimeo', 'http://www.vimeo.com', 'vimeo.com/{$id:digits}\nvimeo.com/groups/*/videos/{$id:digits}', '<iframe src="http://player.vimeo.com/video/{$id}" width="500" height="300" frameborder="0"></iframe>', 0),
    ('youtube', 'YouTube', 'http://www.youtube.com', 'youtube.com/watch?v={$id}\nyoutube.com/v/{$id}\nyoutu.be/{$id}\nyoutube.com/*/u/*/{$id}\nyoutube.com/watch?feature=player_embedded&v={$id}', '<iframe width="500" height="300" src="http://www.youtube.com/embed/{$id}?wmode=opaque" frameborder="0" allowfullscreen></iframe>', 0),
    ('metacafe', 'Metacafe', 'http://www.metacafe.com', '#metacafe\\\\.com/watch/(?P<id>\\\\d+)/#siU', '<iframe src="http://www.metacafe.com/embed/{$id:digits}/" width="500" height="300" allowFullScreen frameborder=0></iframe>', 1),
    ('dailymotion', 'Dailymotion', 'http://www.dailymotion.com', 'dailymotion.com/video/{$id:alphanum}', '<iframe frameborder="0" width="500" height="300" src="http://www.dailymotion.com/embed/video/{$id}?width=500&hideInfos=1"></iframe>', 0),
    ('liveleak', 'Liveleak', 'http://www.liveleak.com', 'liveleak.com/view?i={$id}', '<iframe width="500" height="300" src="http://www.liveleak.com/ll_embed?i={$id}" frameborder="0" allowfullscreen></iframe>', 0);

 

[rdn]

Php 5.5.15, after I installed this all over the site was blank, even if I disable all listener/addon, enable debug mode.
Still white page, luckily it's test site.

 

[euantor]

Php 5.5.15, after I installed this all over the site was blank, even if I disable all listener/addon, enable debug mode.
Still white page, luckily it's test site.

That's odd. I'll have to test that and see if I can find the cause. Was anything logged to your server error logs at all?

 

[rdn]

That's odd. I'll have to test that and see if I can find the cause. Was anything logged to your server error logs at all?

I cant even look at my admin page. Even if disable all addon on config.php, all was just blank.

 

[euantor]

I cant even look at my admin page. Even if disable all addon on config.php, all was just blank.

I mean the server level error logs. I'm not sure where they'll be, but all servers have them.

My site runs 5.5.15 too, so I will upgrade my version of XF there and see what happens.