Skip to main content
SpringerLink
Log in
Book cover

IFIP International Conference on Computer Information Systems and Industrial Management

CISIM 2018: Computer Information Systems and Industrial Management pp 461–473Cite as

MySQL Extension Automatic Porting to PDO for PHP Migration and Security Improvement

  • Conference paper
  • First Online:

  • 1265 Accesses

Part of the book series: Lecture Notes in Computer Science ((LNISA,volume 11127))

Abstract

In software management, the upgrade of programming languages may introduce critical issues. This is the case of PHP, the fifth version of which is going towards the end of the support. The new release improves on different aspects, but removes the old deprecated MySQL extensions, and supports only the newer library of functions for the connection to the databases. The software systems already in place need to be renewed to be compliant with respect to the new language version. The conversion of the source code, to be safe against injection attacks, should involve also the transformation of the query code. The purpose of this work is the design of specific tool that automatically applies the required transformation yielding to a precise and efficient conversion procedure. The tool has been applied to different projects to provide evidence of its effectiveness.

This is a preview of subscription content, log in via an institution.

Chapter
USD   29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD   39.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD   54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Learn about institutional subscriptions

References

  1. Artzi, S., et al.: Finding bugs in web applications using dynamic test generation and explicit-state model checking. IEEE Trans. Softw. Eng. 36(4), 474–494 (2010)

    Article  Google Scholar 

  2. Clause, J.A., Li, W., Orso, A.: Dytan: a generic dynamic taint analysis framework. In: ISSTA 2007, pp. 196–206 (2007)

    Google Scholar 

  3. Costantini, G., Ferrara, P., Cortesi, A.: Static analysis of string values. In: Qin, S., Qiu, Z. (eds.) ICFEM 2011. LNCS, vol. 6991, pp. 505–521. Springer, Heidelberg (2011). https://doi.org/10.1007/978-3-642-24559-6_34

    Chapter  Google Scholar 

  4. Hauzar, D., Kofron, J.: Framework for static analysis of PHP applications. In: ECOOP 2015, pp. 689–711 (2015)

    Google Scholar 

  5. Khmelevsky, Y., Rinard, M., Sidiroglou-Douskos, S.: A source-to-source transformation tool for error fixing (2013)

    Google Scholar 

  6. Kiezun, A., Guo, P.J., Jayaraman, K., Ernst, M.D.: Automatic creation of SQL injection and cross-site scripting attacks. In: ICSE 2009, pp. 199–209 (2009)

    Google Scholar 

  7. Loveman, D.B.: Program improvement by source-to-source transformation. J. ACM 24(1), 121–145 (1977)

    Article  MathSciNet  Google Scholar 

  8. Pawlak, R., Monperrus, M., Petitprez, N., Noguera, C., Seinturier, L.: SPOON: a library for implementing analyses and transformations of Java source code. Softw. Pract. Experience 46, 1155–1179 (2015)

    Article  Google Scholar 

  9. Pollet, I., Le Charlier, B., Cortesi, A.: Distinctness and sharing domains for static analysis of Java programs. In: Knudsen, J.L. (ed.) ECOOP 2001. LNCS, vol. 2072, pp. 77–98. Springer, Heidelberg (2001). https://doi.org/10.1007/3-540-45337-7_5

    Chapter  Google Scholar 

  10. Wassermann, G., Su, Z.: Sound and precise analysis of web applications for injection vulnerabilities. PLDI 46, 32–41 (2007)

    Google Scholar 

  11. Zanioli, M., Ferrara, P., Cortesi, A.: SAILS: static analysis of information leakage with sample. In: ACM SAC 2012, pp. 1308–1313 (2012)

    Google Scholar 

  12. A MySQL Converter Tool. https://github.com/philip/MySQLConverterTool

  13. C2CUDATranslator. https://github.com/prem30488/C2CUDATranslator

  14. Grumpy: Go running Python. https://github.com/google/grumpy

  15. Migrating from PHP 5.6.x to PHP 7.0.x. http://php.net/manual/en/migration70.php

  16. PHP Backward incompatible changes. http://php.net/manual/en/migration70.incom-patible.php

  17. PHP Supported Versions. http://php.net/supported-versions.php

  18. PHP 5.4 Short Array Syntax Converter. https://github.com/thomasbachem/php-short-array-syntax-converter

  19. PIPS: Automatic Parallelizer and Code Transformation Framework. https://pips4u.org

  20. The PIPS Workbench Project. http://www.cri.ensmp.fr/PIPS/home.html

  21. ROSE compiler infrastructure. http://rosecompiler.org

  22. YAK Pro - mysql to mysqli converter. http://mysql-to-mysqli.yakpro.com/

Download references

Author information

Authors and Affiliations

  1. DAIS - Università Ca’ Foscari, Venice, Italy

    Fabio Mondin & Agostino Cortesi

Authors
  1. Fabio Mondin
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Agostino Cortesi
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Agostino Cortesi .

Editor information

Editors and Affiliations

  1. Bialystok University of Technology, Bialystok, Poland

    Khalid Saeed

  2. Warsaw University of Technology, Warsaw, Poland

    Władysław Homenda

Rights and permissions

Reprints and permissions

Copyright information

© 2018 Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Mondin, F., Cortesi, A. (2018). MySQL Extension Automatic Porting to PDO for PHP Migration and Security Improvement. In: Saeed, K., Homenda, W. (eds) Computer Information Systems and Industrial Management. CISIM 2018. Lecture Notes in Computer Science(), vol 11127. Springer, Cham. https://doi.org/10.1007/978-3-319-99954-8_38

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-99954-8_38

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-99953-1

  • Online ISBN: 978-3-319-99954-8

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation