 Your new post is loading...
Your new post is loading...
Scoop.it!
Premier article de la série consacrée aux failles applicatives. Il aborde les injections SQL. 
No comment yet.
Sign up to comment
Scoop.it!
Recursive SQL can be awesome, although a bit hard to read in its SQL standard beauty.
Scoop.it!
MySQL and PostgreSQL are two of the most popular open-source RDMS (Relation Database Management System) programs on the market. They have competed favorably with commercial closed-source database programs for many years.
Scoop.it!
Chuck has come out with an update to his MySQL connector - http://drcharlesbell.blogspot.com/2013/10/introducing-mysql-connectorarduino-100.html Via F. Thunus
Scoop.it!
UNICODE is getting more and more traction and most new applications, at least web applications, support UNICODE.
Scoop.it!
TechWeekEurope UK
Scoop.it!
In the MySQL ecosphere there is an ecosystem of tools. Like real-world ecosystems, the “creatures” in the MySQL tools ecosystem can be classified and organized by a taxonomy. There are already multiple taxonomies of software bugs (e.g. A Taxonomy of Bugs), but as far as I know this is the first Taxonomy of Database Tools. A taxonomy of database tools serves useful purposes, as discussed in the previously linked page. For me, the most useful purpose is the high-level ecosystem view which I use to compare MySQL tools to Drizzle tools. In so doing, one sees clearly how the MySQL tools ecosystem is thriving whereas the Drizzle tools ecosystem is just budding, so to speak. For other people, I imagine two overarching interests in a taxonomy of database tools.
Mickael Ruau's insight:
This Taxonomy of Database Tools is still a work in progress. A lot of the descriptions need to be expanded, traits refined, and more examples added. If you do not agree with its organization, you can suggest a change, or develop your own taxonomy. In any case, I will continue to refine this Taxonomy of Database Tools to see where it leads and what it reveals.
Scoop.it!
MySQL is a great database for web-facing applications, however, it tends to be a bit rough around the edges. Enter Maatkit, a great toolkit with a bewildering array of command line tools that fill the gap where MySQL's native tools leave off.
Mickael Ruau's insight:
Maatkit is a tremendous toolkit for a MySQL DBA. It directly addresses day-to-day needs of DBAs, providing features you never knew you wanted, and some you sorely missed. In next month's article, we'll cover the rest of the Maatkit suite of command line tools - yep there's more, a lot more!
Scoop.it!
This post comes from Michael Rikmas at the MySQL Performance Blog.
Scoop.it!
Need some awesome data to test your sites with? Then check out GenerateData.com. Just enter the parameters your data should follow and it will generate whatever you need.
Mickael Ruau's insight:
Homepage: http://www.generatedata.com/
Scoop.it!
Free online sql formatting tool, beautify sql code instantly for SQL Server, Oracle, DB2, MySQL, Sybase, Access and MDX
Scoop.it!
This is the FREEWARE edition of Toad™ for Data Analysts. The Freeware edition has certain limitations, and is not intended to be used as a TRIAL for the Commercial edition of Toad Data Point (formerly Toad for Data Analysts).
Mickael Ruau's insight:
Cette version licence propose moins de fonctionnalités que la version complète et, comme tous les freewares Toad, elle est limitée à 5 postes par entreprise et sa licence doit être renouvelée tous les 120 jours.
Scoop.it!
Toad® for MySQL is an official Dell Software Group Freeware product. This license does not entitle Licensee to receive from Dell hard-copy documentation, technical support, telephone assistance, or enhancements or updates to the product.
Toad for MySQL Freeware is a tool that improves the productivity of developers and administrators by providing an easy-to-use development environment. With Toad, developers and database administrators can use a familiar, proven tool to manage MySQL databases. Quest Software has an established track record for proven solutions that simplify, automate and improve the quality of application and database development.
Mickael Ruau's insight:
Download
|
Scoop.it!
La société Ubisoft vient de lancer une très belle plateforme baptisée WeAreData ("Nous sommes les données").
Scoop.it!
Lots of blog posts and research papers are written about the topics of scaling up and scaling out.
Scoop.it!
Database and Query Analysis Tools for MySQL: Exploiting Hypertree and Hypergraph Decompositions by Selvameenal Chokkalingam. Via Pascual Pérez-Paredes
Scoop.it!
As I wrote in a previous post, MariaDB / MySQL has some issues with the standard UTF-8 encoding there. This UTF-8 encoding limits us to 3 UTF-8 bytes or 2 UNICODE bytes if you want to look at it that way.
Scoop.it!
We just announced Percona Server 5.6.14 release, and I decided to make this build with the TokuDB 7.1 engine.
Scoop.it!
Wireshark est probablement le sniffeur le plus connu et le plus utilisé à travers le monde pour observer ce qu’il se passe au niveau d’un réseau, et plus précisément pour voir les requêtes qui circulent à travers une carte réseau. Mais vous pouvez être amené à devoir tester en local des programmes qui communiquent entres eux… et pour le coup Wireshark ne vous retournera pas les requêtes échangées entre ces programmes car ces dernières ne transiteront pas par la carte réseau… Il existe une petite marche à suivre simple pour palier à ce problème !
Mickael Ruau's insight:
Exemple concret pour lequel utiliser cette astuce : vous développez une application web que vous testez en local (http://localhost:8080/) et vous voulez un peu voir les requêtes qui circulent lorsque vous accédez à ce site en envoyant telle ou telle requête HTTP avec ou sans votre navigateur préféré.
Scoop.it!
mysqlsniffer is a tcpdump clone which dumps MySQL network protocol traffic.
Mickael Ruau's insight:
Scoop.it!
Nous avons décidé de sortir sur un laps de quinze minutes les requêtes que devait exécuter MySQL. Ça c’était pour la théorie, maintenant quelle solution choisir ?
Scoop.it!
SkySQL a obtenu un financement de catégorie B de 20 millions de dollars, auprès des sociétés de capital-risque Intel Capital, California Technology Ventures, Finnish Industry Investment, Open Ocean Capital et Spintop Private Partners.
Scoop.it!
Normally, my white papers and PowerPoint presentations about benchmarking pick a particular area or focus – and drill deep into the performance issues and gains possible. But inevitably, many people email or stop up to ask me a bunch of very simple or generic questions. So I thought this time I’d write something to address those common questions which seem to get asked all the time. So this white paper may not be very deep, but it will nonetheless address the breadth of common questions most people seemingly would like to hear about. So below are the five questions I remember hearing the most often.
Mickael Ruau's insight:
Which Operating System yields better benchmark results – Windows or Linux? How many bits are best, 32 or 64 – and can that effect the operating system choice? Which Database benchmarks best – Oracle 10g, SQL Server 2005 or MySQL 5.0? How does one determine the maximum concurrent OLTP users a server can sustain? How does one determine the maximum size data warehouse a server can sustain?
Scoop.it!
Toad Extension for Eclipse allows you to: Connect to your Oracle, PostgreSQL or MySQL database from within EclipseBrowse data, object relationships and other detailed object propertiesDevelop complex PL/SQL code comfortablyQuery data with easy export functionsManage or Edit data and objects quicklyImport/Export of BLOBsImport/Export data... and take advantage of many standard Eclipse features including Local History, integration with version control systems, XML editor and more!
Mickael Ruau's insight:
Download
|
Dans la plupart des systèmes d’information des "entrées utilisateurs" sont permises pour consulter ou altérer des données issues d’une base quelconque. Cette entrée utilisateur est un vecteur d’attaque qu’il faut prendre en considération lors de la réalisation de notre application pour s’affranchir de la menace par injections.
Une grande majorité des SI utilisent des bases de données de type relationnelles avec pour langage interprété le SQL. C’est donc sur ces types d’injections que portera cet article.