Alert Pattern help Page


The Alerts options allows you to view all suspicious SQL queries been detected by GreenSQL, by default the Alert option shows the Alerts from all protected Databases, you have the option to customize the view to a specific database by selecting a specific database.
Change db:  More for greendb: Overview | Alerts | Whitelist | Settings

Vew Alert Pattern

Patternselect * from admin where name = ? and pwd=sha(?)
Alert ID4
Time2010-09-08 14:23:14
ListenerDefault MySQL Proxy
DBgreendb

Matching queries:

Query:SELECT * FROM admin WHERE name = '' AND pwd=SHA('1 OR 1=1')
Time:2010-09-08 14:23:14
DB User: 
Risk:10 blocked
Reason:Query uses sensitive tables
Query blocked because it is not in whitelist.
ID:6662

Query:SELECT * FROM admin WHERE name = '' AND pwd=SHA('1 UNI/**/ON SELECT ALL FROM WHERE')
Time:2010-09-08 14:23:13
DB User: 
Risk:10 blocked
Reason:Query uses sensitive tables
Query blocked because it is not in whitelist.
ID:6649

Query:SELECT * FROM admin WHERE name = '' AND pwd=SHA('1 AND 1=1')
Time:2010-09-08 14:23:13
DB User: 
Risk:10 blocked
Reason:Query uses sensitive tables
Query blocked because it is not in whitelist.
ID:6658

Query:SELECT * FROM admin WHERE name = '' AND pwd=SHA('1 EXEC XP_')
Time:2010-09-08 14:23:13
DB User: 
Risk:10 blocked
Reason:Query uses sensitive tables
Query blocked because it is not in whitelist.
ID:6659

Query:SELECT * FROM admin WHERE name = '1 AND 1=1' AND pwd=SHA('')
Time:2010-09-08 14:23:12
DB User: 
Risk:40 blocked
Reason:Query uses sensitive tables
Query has empty password expression
Query blocked because it is not in whitelist.
ID:6643

Query:SELECT * FROM admin WHERE name = '1 EXEC XP_' AND pwd=SHA('')
Time:2010-09-08 14:23:12
DB User: 
Risk:40 blocked
Reason:Query uses sensitive tables
Query has empty password expression
Query blocked because it is not in whitelist.
ID:6644

Query:SELECT * FROM admin WHERE name = '1 OR 1=1' AND pwd=SHA('')
Time:2010-09-08 14:23:12
DB User: 
Risk:40 blocked
Reason:Query uses sensitive tables
Query has empty password expression
Query blocked because it is not in whitelist.
ID:6646

Query:SELECT * FROM admin WHERE name = '1 UNI/**/ON SELECT ALL FROM WHERE' AND pwd=SHA('')
Time:2010-09-08 14:23:11
DB User: 
Risk:40 blocked
Reason:Query uses sensitive tables
Query has empty password expression
Query blocked because it is not in whitelist.
ID:6633

Query:SELECT * FROM admin WHERE name = '" OR balls=balls' AND pwd=SHA('')
Time:2010-09-08 12:55:41
DB User: 
Risk:40 blocked
Reason:Query uses sensitive tables
Query has empty password expression
Query blocked because it is not in whitelist.
ID:6631

Query:SELECT * FROM admin WHERE name = 'A or A = A--' AND pwd=SHA('A or A = A--')
Time:2010-09-08 12:06:38
DB User: 
Risk:10 blocked
Reason:Query uses sensitive tables
Query blocked because it is not in whitelist.
ID:6615

Query:SELECT * FROM admin WHERE name = '" OR balls=balls' AND pwd=SHA('" OR balls=balls')
Time:2010-09-08 12:05:32
DB User: 
Risk:10 blocked
Reason:Query uses sensitive tables
Query blocked because it is not in whitelist.
ID:6611

Query:SELECT * FROM admin WHERE name = 'jjhdue9hjjdkjanjkdkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkknaskdjkasndjnkjasndjnkjadnjnaksjdnkjandnkjnakdnkjsanjdnijnbjddnkjsandnkjsndkjnkjndkjnkjndkjnkndnkdnkjnaskjdnkjsanknknaskjndkjnskdnnkdnkndkjnkndkjnkjdnkandddddddddddddddddddd' AND pwd=SHA('jjhdue9hjjdkjanjkdkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkknaskdjkasndjnkjasndjnkjadnjnaksjdnkjandnkjnakdnkjsanjdnijnbjddnkjsandnkjsndkjnkjndkjnkjndkjnkndnkdnkjnaskjdnkjsanknknaskjndkjnskdnnkdnkndkjnkndkjnkjdnkandddddddddddddddddddd')
Time:2010-09-08 11:32:58
DB User: 
Risk:10 blocked
Reason:Query uses sensitive tables
Query blocked because it is not in whitelist.
ID:6609

Query:SELECT * FROM admin WHERE name = '0x21' AND pwd=SHA('')
Time:2010-09-08 11:30:37
DB User: 
Risk:40 blocked
Reason:Query uses sensitive tables
Query has empty password expression
Query blocked because it is not in whitelist.
ID:6605

Query:SELECT * FROM admin WHERE name = '%20' AND pwd=SHA('')
Time:2010-09-08 11:30:28
DB User: 
Risk:40 blocked
Reason:Query uses sensitive tables
Query has empty password expression
Query blocked because it is not in whitelist.
ID:6604

Query:SELECT * FROM admin WHERE name = '"' AND pwd=SHA('')
Time:2010-09-08 11:30:18
DB User: 
Risk:40 blocked
Reason:Query uses sensitive tables
Query has empty password expression
Query blocked because it is not in whitelist.
ID:6603

Query:SELECT * FROM admin WHERE name = 'root' AND pwd=SHA('password')
Time:2010-09-08 07:22:17
DB User: 
Risk:10 blocked
Reason:Query uses sensitive tables
Query blocked because it is not in whitelist.
ID:6592

Query:SELECT * FROM admin WHERE name = 'admin' AND pwd=SHA('password')
Time:2010-09-08 07:22:11
DB User: 
Risk:10 blocked
Reason:Query uses sensitive tables
Query blocked because it is not in whitelist.
ID:6591

Query:SELECT * FROM admin WHERE name = 'admin' AND pwd=SHA('admin')
Time:2010-09-08 07:22:04
DB User: 
Risk:10 blocked
Reason:Query uses sensitive tables
Query blocked because it is not in whitelist.
ID:6590

Query:SELECT * FROM admin WHERE name = 'admin' AND pwd=SHA('password')
Time:2010-09-08 07:14:46
DB User: 
Risk:10 blocked
Reason:Query uses sensitive tables
Query blocked because it is not in whitelist.
ID:6588

Query:SELECT * FROM admin WHERE name = 'admin' AND pwd=SHA('admin or 1=1')
Time:2010-09-08 06:22:00
DB User: 
Risk:10 blocked
Reason:Query uses sensitive tables
Query blocked because it is not in whitelist.
ID:6585