PHP - mysql dump doesn't work with symbol in password

Question

I tried the mysqldump in php

shell_exec("mysqldump --user=$username --password=$password --host=$host $database > dump.sql");

Works fine if password is plain. But when there's a symbol in the password & in my case, it does't work. Any idea why, or how this can be resolved?

Short answer could be don't put symbols in your password. But that's not the answer I'm looking for and some DB passwords are beyond my reach. So I need a solution or a workaround.

have you tried using the escapeshellcmd function : php.net/manual/en/function.escapeshellcmd.php — PaulF
– PaulF, Commented Nov 6, 2015 at 12:25
Yep, and using quotes will work until there is a quote in your password. — bobwienholt
– bobwienholt, Commented Nov 7, 2015 at 0:27

Lumbendil · Accepted Answer · 2015-11-06 12:56:13Z

1

Given that you're using some unknown input, I'd use escapeshellcmd, which should be able to deal with everything (including having a ' in your password).

answered Nov 6, 2015 at 12:56

Lumbendil

2,9161 gold badge21 silver badges24 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Xpleria · Accepted Answer · 2015-11-06 23:33:09Z

1

Using quotes worked. Thanks +Mubin

 shell_exec("mysqldump --user='$username' --password='$password' --host=$host $databaseName > dump.sql");

edited Nov 6, 2015 at 23:33

answered Nov 6, 2015 at 12:51

Xpleria

5,9625 gold badges55 silver badges67 bronze badges

Comments

XorNut · Accepted Answer · 2024-06-18 08:48:23Z

0

If the password contains a ' then --password='$password' does not work. The best solution I have found for Windows and Linux is:

if ($isWindows) {
    $password = str_replace('"', '\\"', $password);
    return " --password=\"$password\"";
} else {
    $q = "'";
    $password = str_replace("'", "'\\''", $password);
    return " --password='$password'";
}

Tested with password []<>(),;:/\| !@#$%^&*()_-+=~?`"'

Updated: escapeshellcmd does not help, at least on Linux, it adds extra \, but mysql does not accept such a password.

answered Jun 18, 2024 at 8:48

XorNut

191 silver badge8 bronze badges

3 Comments

Álvaro González Over a year ago

You probably want escapeshellarg(). To be honest, I don't really understand what escapeshellcmd() is trying to accomplish.

XorNut Over a year ago

At least on Windows escapeshellarg does wrong things: php.net/manual/en/function.escapeshellarg.php#123718

Álvaro González Over a year ago

Yes, it actually does. I've finally given up and switched to Symfony Process for anything non-trivial.

Collectives™ on Stack Overflow

PHP - mysql dump doesn't work with symbol in password

3 Answers 3

Comments

Comments

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related