RAISE

ERROR

None

SELECT * FROM fiberbox WHERE field REGEXP 'Pizza|Burger|Hotdog';

SELECT * FROM fiberbox WHERE field = '%Pizza%' OR field = '%Burger%' OR field = '%Hotdog%';

SELECT * FROM fiberbox WHERE field = '?Pizza?' OR field = '?Burger?' OR field = '?Hotdog?';

BIGINT

INT

Both BLOB and BIGINT

UPDATE mysql.user SET Password=PASSWORD('password') WHERE User='username';

UPDATE mysql.user SET Password='password' WHERE User='username';

UPDATE mysql.user SET Password=RESET('password') WHERE User='username';

ALTER TABLE table_name MODIFY column_name VARCHAR(255)

ALTER TABLE table_name CHANGE column_name column_name type DEFAULT NULL

ALTER table_name MODIFY column_name varchar(255) null

mysql -e "select * from myTable" -u myuser -pxxxxxxxxx mydatabase > mydumpfile.txt

mysql -e "select * from myTable" mydatabase > mydumpfile.txt

SELECT * from myTable FIELDS TERMINATED BY ',' ENCLOSED BY '"' LINES TERMINATED BY '\n'

The default character set of MySQL is UTF-8.

lang.cnf sets the default character set for MySQL databases.

SET CHARSET utf8 will set the character set of data to be imported to UTF-8.

Using subqueries

Using variables in a MySQL query

MySQL also supports ROW_NUMBER()

select subject,count(*) as Books from books,subjects where books.popularityrating > 7

select subject,count(*) as Books from books,subjects where books.authorid=subjects.authorid and books.popularityrating > 7 group by subjects.subject

select subject,count(*) as Books from books,subjects where books.subjectid=subjects.subjectid and books.popularityrating = 7 group by subjects.subject

Parametrized queries do not make code less vulnearable to SQL injections.

SQL injections are not possible, if only emulated prepared statements are used.

Usage of later versions of MySQL, validation, and explicit setting of the charset of user input are valid measures to decrease vulnerability to SQL injections.