In mysql, is "explain ..." always safe?
- by tye
If I allow a group of users to submit "explain $whatever" to mysql (via Perl's DBI using DBD::mysql), is there anything that a user could put into $whatever that would make any database changes, leak non-trivial information, or even cause significant database load? If so, how?
I know that via "explain $whatever" one can figure out what tables /…