We present a practical protection mechanism against SQL injection attacks. Such attacks target databases that are accessible through a web front-end, and take advantage of flaws in the input validation logic of Web components such as CGI scripts. We apply the concept of instruction-set randomization to SQL, creating instances of the language that are unpredictable to the attacker. Queries injected by the attacker will be caught and terminated by the database parser. We show how to use this technique with the MySQL database using an intermediary proxy that translates the random SQL to its standard language. Our mechanism imposes negligible performance overhead to query processing and can be easily retrofitted to existing systems.
Read the rest of this entry »

• 0 Comments

One of the great benefits of using Oracle products is their support for multiple programming frameworks. By supporting .NET, Java/J2EE, PHP, and C/C++ applications, all developers can use Oracle’s advanced database features, providing true flexibility for development organizations. Each of Oracle’s data access drivers is designed to maximize performance of its respective framework and to enable access to the latest database features.
Read the rest of this entry »

• 0 Comments

Everybody who wants to install a web server database but does not know which software is necessary and how it is installed should benefit from reading this text. This text provides all information necessary to get a SQL database for a web server going; it does not go into any detail of CGI programming, nor does it explain the SQL database language. Excellent books are available on both topics, and it is the intention of this text to provide a working platform based on which a user can then study CGI programming and SQL. For getting a small scale SQL system running (not the notorious example of a major airline booking system, or space mission management database) it will be sufficient to have the software described in this text and the documentation accompanying it. The user manual of msql (a database introduced in this text) provides sufficient information on SQL for building your own database.
Read the rest of this entry »

• 0 Comments

The Basics Part 1. Start MS Access
From the Start menu click on
> Programs
> Microsoft Office
> Microsoft Office Access 2003
2. Note the Getting Started task pane on the right side of your screen.
3. Click on Create a new file.
Read the rest of this entry »

• 0 Comments

If you are new to programming in the Java TM language, have some experience with other languages, and are familiar with things like displaying text or graphics or performing simple calculations, this tutorial could be for you. It walks through how to use the Java® 2 Platform software to create and run three common types of programs written for the Java platform—applications, applets, and servlets. You will learn how applications, applets, and servlets are similar and different, how to build a basic user interface that handles simple end user input, how to read data from and write data to files and databases, and how to send and receive data over the network.
Read the rest of this entry »

• 0 Comments