taosdata / taosdata/TDengine

当我使用6060端口的ui管理工具,操作tdengine的时候,会被防火墙判断为SQL注入,导致封IP

Open
#33,958 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug
Dominant language
C
Stars
25.1k
Forks
5k
Avg merge
4d 59m
Merged PRs (30d)
7

Description

当我使用6060端口的ui管理工具,操作tdengine的时候,会被防火墙判断为SQL注释,导致封IP
该网页提供的查询功能,直接在url中明文传输selec语句,能否加一层加密,防止被防火墙误判为SQL注入

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing the TDengine UI on port 6060 and how its query function places SQL text in the URL. Reproduce the reported firewall block and identify the request flow involved. Done means the UI no longer triggers the reported false positive while query operations continue to work.

Written by the indexing model from the issue text.

Assessment

Tech stack
sql
Domain
databases, security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.