Direct MYSQL: injection

[gordonisnz]

Good day.

I've found a few threads, indicating that folk can do direct MYSQL actions to update / insert things into mantis.

Queries

:- Is there a tutorial / background of the table layout & how to add new entries into mantis.

IE - Project name, Title, description etc - any fields that are REQUIRED - & won't break Mantis if not inserted...

:- A quick way to verify a correct project name / category etc - so if you insert, you don't insert with a slight difference - & have 2 seperate categories in the database..

PS - I'm using mantis on my PC - Localhost (not sure if that makes any difference).. - I'm panning a bulk upload of tasks soon - not just a few...

[atrol]

:- Is there a tutorial / background of the table layout & how to add new entries into mantis.

No.
Maybe helps for a rough overview of version 1.2.x: http://www.mantisbt.org/forums/viewtopi ... =2&t=10017

Have a look at
- function create in file core/bug_api.php
- the XmlImportExport plugin which is delivered as part of your installation (subdirectory plugins)
- the csv-Import Plugin https://github.com/mantisbt-plugins/csv-import