Upload datas in flexicontent via sql injection

hello

thanks again for this great component.

I know you work hardly on different new topics for this component.
I wanted to know if it could be possible to upload a large amount of datas via sql injection directly into the database (focus in only one categorie)?

thanks

Hi,
Basically yes, but remember that the fields data are stored in a value table and thus they are not "flat". The process is more complicated and a simple sql insert is not enough. You must write a script to do this task (with jumi for example).
I'll release a dedicated import/export component begining of next year (but as this is typically a professionnal feature, the product will be commercial GPL licensed).
Now concerning the amount of records, what do you mean by large? More or less than 10.000?
Cheers,
Emmanuel.

Hello Emmanuel,

Sorry for my english
a large amount for me is around 100 up to 200.
I never use jomi but my first seach in the web give me answer like "Vulnerability in Jumi ... "
When you said "not flat" you mean not in only one table if I only want to upload datas in one category ?

best regards

Bertrand

It's ok for your english (Je suis français)
Now concerning the non-flat datas: you will have to populate multiple tables content, flexicontent_items_ext, flexicontent_cats_item_relations, flexicontent_fields_item_relations.
If you study the structure of this jos_flexicontent_fields_item_relations, you'll better understand the problem you'll have
Concerning Jumi, it's a very safe component but their server was hacked acouple of weeks ago and a hacker left a malicious script in the component package.
This issue has been solved and you can use it safely.
Cheers,
Emmanuel.

Bonjour Emmanuel

many Thanks
I take time to go through the database and to answer you

I have downloaded these 3 table datas

jos_flexicontent_cats_item_relations
category - item relationship
jos_flexicontent_fields_item_relations
Item values
jos_flexicontent_items_ext
Item values for search engine

I have added a new item in the sql file following sql export template
I have imported the new item, with old ones (Sql)

OK for the sql injection and datas in Sql database. I see my new item

But I don't see this new item in the list of Items (Flex admin)

I have missed a table ?

thanks

take care

Bertrand

Hi

I understand
It is because the article was not created.
But if i create manualy the article, text and description of item are modified in flex following new article.

=> we have to create articles in jos_content at the same moment

another solutions?

thnks
Bertrand

Of course yes,
jos_content is the basis table, as the com_content does FLEXIcontent reads and writes in this table.
Emmanuel.

OK, thanks Emmanuel

that mean we need to have silimar :
for Articles and Items

ID, Description and text

and we fill only Description and text in each article ?

:roll: We just have to create the script which create, from one csv file, 4 files(4 tables) or 1 file (global) for database mysql upload.

and Jumi can do that?
I have another idea but I never see or use Jumi :roll:

thanks
Bertrand

hello !

après plusieurs heures à essayer de chercher un plugin ou des ressources sur les forums joomla, je tombe enfin sur le sujet (le problème qui m'interesse) je commencais à croire, que bien que débutant en joomla, j'avais loupé une étape cruciale car personne n'a l'air de se poser la question de savoir comment alimenter mysql via une requête afin d'éviter de tout saisir à la main des informations qui existent ailleurs ! ouff ! :oops:

j'ai suivi vos échanges Tramber et Emmanuel, pour comprendre qu'il fallait en effet alimenter 4 tables mais que cette procédure était assez incompléte (alimentation que de certains champs).

j'attends donc la réponse d'Emmanuel pour préciser tout cela.
Dans mon cas je me suis mis à Joomla pour créer un site d'une association botanique (qui dit association dit pas de budget, donc CMS open source )
et je me trouve devant cette intérogation qui est :
Comment récupérer les centaines de fiches technique de plante (nom, photo, famille, catégorie, région...)
actuellement sous Access pour les transférer dans mysql.
La problématique n'étant pas la création de la requête SQL d'alimentation Access -> mysql mais bien quels champs et quel tables prendre sachant que j'ai créer une 'catégorie' FICHES sous FlexiContent avec les champs en question .... ?

Question subsidiaire, quel contrôle prendre pour alimenter un champs 'image' sachant que les paramètres de ce champs demandent un emplacement d'une image (et non pas un champs spécifique de la table)

P.S. : je n'ai pas trouvé dans jumi d'information sur les fonctionnalité de ce type :shock:

je suis impatient de vous lire (même en Anglais)