As a web programming language, one of PHP’s strengths traditionally has been to make it easy to write scripts that access databases so that you can create dynamic web pages that incorporate database content. This is important when you want to provide visitors with information that is always up-to-date, without hand tweaking a lot of static HTML pages. However, although PHP is easy to use, it includes no general-purpose database access interface. Instead it has a number of specialized ones that take the form of separate sets of functions for each database system. There is one set for MySQL, another for InterBase, and another for PostgreSQL—and others as well.
Read the rest of this entry »

• 0 Comments

We present a practical protection mechanism against SQL injection attacks. Such attacks target databases that are accessible through a web front-end, and take advantage of flaws in the input validation logic of Web components such as CGI scripts. We apply the concept of instruction-set randomization to SQL, creating instances of the language that are unpredictable to the attacker. Queries injected by the attacker will be caught and terminated by the database parser. We show how to use this technique with the MySQL database using an intermediary proxy that translates the random SQL to its standard language. Our mechanism imposes negligible performance overhead to query processing and can be easily retrofitted to existing systems.
Read the rest of this entry »

• 0 Comments

This tutorial provides a short introduction to developing with Zope 3. It provides an example of creating a content objects and associated views, adapters, and utilities. The skills learned here are applied in most facets of Zope 3 development.

We Zope to be much more approachable to Python programmers. You should be able to use existing Python objects in Zope with few changes. We want developers to be able to learn Zope a little bit at a time. We provide greater support for reuse through components.
Read the rest of this entry »

• 0 Comments

A Word About Secure Database Access
Unfortunately, this database access code exhibits insecurities of its own. For example, you should never use the sa account (or an equivalent) to access databases from Web applications. Instead, use weak accounts that lack permission to drop tables, insert, update, and delete records, and the like. In addition, you should use stored procedures or parameterized commands in lieu of dynamic SQL commands for added protection against malicious input parameters. Finally, consider encrypting database connection strings to minimize the risk of information disclosure if your source code falls into the wrong hands. And note that truly paranoid ASP.NET programmers encrypt connection strings and store them in ACLed registry keys. When it comes to Web security, a little paranoia can be a good thing.
Read the rest of this entry »

• 0 Comments

The CPC GPS ushers in the next generation of computer automated telescopes. The CPC series uses GPS (Global Positioning System) technology to take the guesswork and effort out of aligning and finding celestial objects in the sky. Simple and easy to use, the CPC with its on-board GPS, is up and running after locating just three celestial objects. It’s so advanced that once you turn it on, the integrated GPS automatically pinpoints your exact coordinates. No need to enter the date, time, longitude and latitude or even know the name of a single star in the sky. If you are new to astronomy, you may wish to start off by using the CPC’s built-in Sky Tour feature, which commands the CPC to find the most interesting objects in the sky and automatically slews to each one. Or if you are more experienced, you will appreciate the comprehensive database of over 40,000 objects, including customized lists of all the best deep-sky objects, planets and bright double stars. No matter at what level you are starting out, the CPC will unfold for you and your friends all the wonders of the Universe.
Read the rest of this entry »

• 0 Comments

With Dynamic Forms and Open Web Studio, you can create a workflow to view / edit / delete records from a database table. Assuming you already have Dynamic Forms and Open Web Studio (OWS) installed on your Dot Net Nuke website, as well as created a page and imported both modules into that page. To access “Administration” control of OWS, you will need “HOST” privilege.
Read the rest of this entry »

• 0 Comments

The 4D Ajax Framework v11 component comes in two flavors, For 4D 2004 and For 4D v11 SQL. Thus, there are two sets of installation instructions.
- Installing the 4D Ajax Framework v11 component in a 4D 2004 database
- Installing the 4D Ajax Framework v11 component in a 4D V11 SQL database Follow the set that best suits your situation.
Read the rest of this entry »

• 0 Comments

Microsoft provides a very simple layer between the web interface (asp.net 2.0) and the database. The object they use to perform this is the SqlDataSource. It works very well in many cases. It’s fast, easy to use and great for demonstration of technology and to show how fast you can program database type applications. It falls apart (IMHO) when the application starts getting larger and requiring more customization. It’s also very hard to maintain because at the end of the day, it puts most of what it does in the aspx page itself.
Read the rest of this entry »

• 0 Comments