Tutorials,Articles,Algorithms,Tips,Examples about Database

Change page: < 1 2 3 4 5 6 7 8 9 10 11 > | Displaying page 3 of 11, items 81 to 120 of 435.

SQL Server 2005 : Advanced OLAP - Key Performance Indicators (part 1) - A Concrete KPI, Testing KPIs in Browser View

The Browser View toolbar button is now selected, and form fields have disappeared, giving way to a new window. In the upper pane of this window you can specify a slice of your cube for which to view the KPI data; the lower pane displays your KPI data.

Oracle Database 11g : Database Fundamentals - Work with Object and System Privileges, Introduce Yourself to the Grid

As many have heard, the “g” in Oracle Database 11g stands for grid. Grid computing is a technology that allows for seamless and massively scalable access to a distributed network of diverse yet homogenous computer types

Oracle Database 11g : Database Fundamentals - Become Familiar with Other Important Items in Oracle Database 11g

Tables are made up of rows and columns, which are the basis of all objects in Oracle Database 11g. As applications interact with the database, they often retrieve vast amounts of data.

Microsoft ASP.NET 4 : Repeated-Value Data Binding (part 2) - Creating a Record Editor

The next example is more practical. It's a good example of how you might use data binding in a full ASP.NET application. This example allows the user to select a record and update one piece of information by using data-bound list controls.

Microsoft ASP.NET 4 : Repeated-Value Data Binding (part 1)

Repeated-value data binding works with the ASP.NET list controls . To use repeated-value binding, you link one of these controls to a data source (such as a field in a data table).

Microsoft ASP.NET 4 : Single-Value Data Binding

This section shows a simple example of single-value data binding. The example has been stripped to the bare minimum amount of detail needed to illustrate the concept.

SQL Server 2005 : Dynamic T-SQL - Dynamic SQL Security Considerations

Dynamic SQL is invoked in a different scope than static SQL. This is extremely important from an authorization perspective, because upon execution, permissions for all objects referenced in the dynamic SQL will be checked.

SQL Server 2005 : Dynamic T-SQL - Supporting Optional Parameters (part 4) - sp_executesql: A Better EXECUTE

Query parameterization, is the key to fixing both of these problems. Parameterization is a way to build a query such that any parameters are passed as strongly typed variables, rather than formatted as strings and appended to the query. In addition to the performance benefits this can bring by allowing SQL Server to do less work when processing the query, parameterization also has the benefit of virtually eliminating SQL injection attacks.

SQL Server 2005 : Dynamic T-SQL - Supporting Optional Parameters (part 3) - SQL Injection

Concatenating string parameters such as @NationalIdNumber directly onto queries can open your applications to considerable problems. The issue is a hacking technique called a SQL injection attack, which involves passing bits of semiformed SQL into textboxes in order to try to manipulate dynamic or ad hoc SQL on the other side.

SQL Server 2005 : Dynamic T-SQL - Supporting Optional Parameters (part 2) - Going Dynamic: Using EXECUTE

The solution to all of the static SQL problems is, of course, to go dynamic. Building dynamic SQL inside of a stored procedure is simple, the code is relatively easy to understand, and as I'll show, it can provide excellent performance. However, there are various potential issues to note, not the least of which being security concerns.

SQL Server 2005 : Dynamic T-SQL - Supporting Optional Parameters (part 1) - Optional Parameters via Static T-SQL

Before presenting the dynamic SQL solution to the optional parameter problem, a few demonstrations are necessary to illustrate why static SQL is not the right tool for the job. There are a few different methods of varying complexity and effectiveness, but none deliver consistently.

SQL Server 2005 : Dynamic T-SQL - Why Go Dynamic?

Dynamic SQL can help create more flexible data access layers, thereby helping to enable more flexible applications, which makes for happier users.

MySQL for Python : Passing a query to MySQL

We have just seen how to form a query for a generic MySQL session. While that was not particularly difficult, using MySQL for Python is even easier.

MySQL for Python : Forming a query in MySQL

In order to best understand how to submit a query through MySQL for Python, it is important to ensure you understand how to submit a query in MySQL itself. The similarities between the two outnumber the differences, but the first may seem confusing if you don't properly understand the second.

SQL Injection : Platform-Level Defenses - Securing the Database

When an attacker has an exploitable SQL injection vulnerability, he can take one of two primary exploit paths. He can go after the application data itself, which depending on the application and the data could be very lucrative.

SQL Injection : Platform-Level Defenses - Using Runtime Protection (part 2) - Intercepting Filters

Most WAFs implement the Intercepting Filter pattern or include one or more implementations in their overall architecture. Filters are a series of independent modules that you can chain together to perform processing before and after the core processing of a requested resource (Web page, URL, script, etc.).

SQL Injection : Platform-Level Defenses - Using Runtime Protection (part 1) - Web Application Firewalls

The most well-known runtime solution in Web application security is the use of a Web application firewall (WAF). A WAF is a network appliance or software-based solution that adds security features to a Web application. Specifically, we’re focusing on what WAFs can offer in terms of SQL injection protection.

SQL Injection : Code-Level Defenses - Designing to Avoid the Dangers of SQL Injection

One design technique that can prevent or mitigate the impact of SQL injection is to design the application to exclusively use stored procedures for accessing the database.

SQL Injection : Code-Level Defenses - Canonicalization

A difficulty with input validation and output encoding is ensuring that the data being evaluated or transformed is in the format that will be interpreted as intended by the end user of that input.

SQL Injection : Code-Level Defenses - Encoding Output

In addition to validating input received by the application, it is often necessary to also encode what is passed between different modules or parts of the application. In the context of SQL injection, this is applied as requirements to encode, or “quote,” content that is sent to the database to ensure that it is not treated inappropriately.

Upgrading and Converting to Access 2010 : INSTALLING MULTIPLE VERSIONS OF ACCESS ON ONE PC, CHANGING FILE FORMATS

Before actually converting or enabling older files, it would be good to know how to work with the various file types in Access 2010. A good place to start is to specify the default file format.

Upgrading and Converting to Access 2010 : TO CONVERT OR TO ENABLE

You have several things to consider when deciding whether to convert an application to the Access ACCDB file format. The primary reason to convert is to take advantage of the new features that require the ACCDB file format, such as the ability to work with complex data, the ease of collecting data from e-mail forms, linking to SharePoint Services, and creating Web applications.

Oracle Database 11g : Database Fundamentals - Learn the Basic Oracle Database 11g Data Types, Work with Tables, Work with Stored Programmed Objects

Oracle Database 11g is the latest offering from Oracle. Perhaps you have heard a lot of hype about Oracle Database 11g, and perhaps not. Regardless of your experience, 11g is a rich, full-featured software intended to revolutionize the way many companies do their database business.

Oracle Database 11g : Database Fundamentals - Define a Database, Learn the Oracle Database 11g Architecture

SQL Server 2005 : Advanced OLAP - Calculations (part 2) - Named Sets, More on Script View

Save your changes now, but before deploying them, switch back to script view to look at the entire set of generated code. Note that each calculation you entered, as well as the CALCULATE script command that was there initially, simply form successive sections of a single MDX script.

SQL Server 2005 : Advanced OLAP - Calculations (part 1) - Calculated Members

There’s a lot more to explore than these measure and dimension features. For instance, Analysis Services allows you to store calculated MDX expressions on the server that you can use in your queries. You can reference custom-built sets by name, create calculated measures or dimension attribute members, and more.

Exploiting SQL Injection : Automating SQL Injection Exploitation

Depending on the situation, you might require dozens of requests to properly fingerprint the remote DBMS, and maybe hundreds (or even thousands) to retrieve all the data you are interested in.

Exploiting SQL Injection : Out-of-Band Communication

The HTTP(S) connection that is used to send the request is also used to receive the response. However, this does not always have to be the case: The results can be transferred across a completely different channel, and we refer to such a communication as “out of band,” or simply OOB.

SQL Server 2008 R2 : Dropping Indexes, Online Indexing Operations, Indexes on Views

SQL Server 2008 supports the creation of indexes on views. Like indexes on tables, indexes on views can dramatically improve the performance of the queries that reference the views.

SQL Server 2008 R2 : Managing Indexes - Managing Indexes with T-SQL, Managing Indexes with SSMS

There are two different aspects to index management. The first aspect is the management of indexes by the SQL Server database engine. Fortunately, the engine does a good job of managing the indexes internally so that limited manual intervention is required.

SQL Server 2005 : Advanced OLAP - Advanced Dimensions and Measures (part 3)

One solution to this problem is to use an Analysis Services feature called member grouping, or discretization. Essentially, this feature groups members of a particular attribute by creating a new attribute/level “above” it.

SQL Server 2005 : Advanced OLAP - Advanced Dimensions and Measures (part 2) - Parent-Child Dimensions

We’ll start with the Shippers dimension. Recall that this dimension is flat (nonhierarchical); therefore, little refinement should be necessary. Meanwhile, this dimension contains two attributes while one is sufficient.

SQL Server 2005 : Advanced OLAP - Advanced Dimensions and Measures (part 1)

Microsoft Systems Management Server 2003 : Maintaining the Database Through Microsoft SQL Server - Database Maintenance

To obtain a complete list and explanation of all Transact-SQL statements and stored procedures, including the DBCC commands, query the online help for SQL Server 2000.

Microsoft Systems Management Server 2003 : Maintaining the Database Through Microsoft SQL Server - SQL Server Components

SQL Server 7.0 and SQL Server 2000 maintain their database and transaction logs in their own files. If SQL Server is installed on the same computer as SMS 2003, SMS can create the database and log files for you during its setup. If not, you’ll need to create the files in advance.

Microsoft Visual Basic 2008 : Processing and Storing Data in SQL Server 2005 - Optimizing the LINQSQL Class

The LINQSQL class provides a wrapper around the Users table implementation in both the source and destination databases. Using the InsertRecord methods, we can migrate records into our destination database or create records in our source table.

ASP.NET 4 in VB 2010 : ADO.NET Fundamentals (part 6) - Disconnected Data Access

When you use disconnected data access, you keep a copy of your data in memory using the DataSet. You connect to the database just long enough to fetch your data and dump it into the DataSet, and then you disconnect immediately.

ASP.NET 4 in VB 2010 : ADO.NET Fundamentals (part 5) - Direct Data Access - Updating Data

To execute an Update, Insert, or Delete statement, you need to create a Command object. You can then execute the command with the ExecuteNonQuery() method. This method returns the number of rows that were affected, which allows you to check your assumptions.

ASP.NET 4 in VB 2010 : ADO.NET Fundamentals (part 4) - Direct Data Access - The DataReader

The DataReader uses a live connection and should be used quickly and then closed. The DataReader is also extremely simple. It supports fast-forward-only read-only access to your results, which is generally all you need when retrieving information.

ASP.NET 4 in VB 2010 : ADO.NET Fundamentals (part 3) - Direct Data Access - Creating a Connection, The Select Command

The most straightforward way to interact with a database is to use direct data access. When you use direct data access, you're in charge of building a SQL command and executing it. You use commands to query, insert, update, and delete information.