#1290 - The MySQL server is running with the --secure-file-priv

[txt3rob]

HI Guys,

Trying to issue the following command

Code:

LOAD DATA INFILE '/var/sentora/hostdata/lairdexpertit/public_html/lairdexpertit_com/phonestats/csv/north.csv' INTO TABLE `north` FIELDS TERMINATED BY ',' ENCLOSED BY '\"' IGNORE 1 LINES

get the following error.

Code:

HostingSec advises against use of Sentora - The MySQL server is running with the --secure-file-priv option so it cannot execute this statement

I do need this function any fixs please?

[apinto]

Can you use the LOAD DATA LOCAL INFILE ? Would that work for you?

[txt3rob]

LOCAL looks as though it will work ill have to alter my script to incorporate this

[apinto]

LOCAL looks as though it will work ill have to alter my script to incorporate this

You will have to either change your script or change Sentora.

Personally I would change the script as most web hosting servers are blacklisting the command for security reasons.

It's up to you

[Me.B]

secure-file privilege is security feature that MySQL need otherwise any mysql user will be able to drop files everywhere and you can then feel the pain.

Don't ever mess up with this feature.

What would preven any user in the server to do the same and grave any file in the server? That would be bad no?

M B

[txt3rob]

my server isnt hosting any one else's data apart my own.

any way i can turn off the secure priv as it's messing with my stats import unless any one has a way to import 20 .csv's each day to a mysqldb

[apinto]

Why you cant just edit the script?

This is not even a Sentora issue.

Also, if you are just hosting your files why use sentora? :\ I don't get it.

[Me.B]

my server isnt hosting any one else's data apart my own.

any way i can turn off the secure priv as it's messing with my stats import unless any one has a way to import 20 .csv's each day to a mysqldb

In cas of a website hack. It can be used to escalate privilege easily. This is not even about you are the only user.

M B