SQL - Revision history

Zzo38: Mention host parameters

2020-01-19T21:30:44Z

Mention host parameters

Dan Tobias at 12:23, 16 December 2015

2015-12-16T12:23:59Z

Dan Tobias at 23:25, 11 May 2015

2015-05-11T23:25:49Z

Dan Tobias: /* References */

2014-08-05T11:25:13Z

‎References

Dan Tobias at 12:11, 22 July 2014

2014-07-22T12:11:06Z

Jsummers: PRONOM

2014-07-14T00:08:00Z

PRONOM

Dan Tobias: /* References */

2014-05-06T13:03:35Z

‎References

Dan Tobias at 12:58, 31 March 2014

2014-03-31T12:58:53Z

Dan Tobias: /* References */

2014-01-30T14:20:41Z

‎References

Dan Tobias: add cat

2013-09-14T15:14:57Z

add cat

@@ Line 10: / Line 10: @@
 SQL is frequently encountered in the form of queries sent to databases by programs in other languages, but it is a programming language in its own right with constructs sufficient to create large and complicated routines.
-"SQL injection" is a security issue with a number of poorly-developed systems and websites, if user input is not properly sanitized before inserting it into SQL statements for database operations. "Dangerous" characters such as quotes need to be properly escaped or stripped, or else it is possible to include a quote to end the string an input field is being inserted into, and follow it with other commands which might do dangerous things with the database. Poorly-done attempts to avoid such attacks may also cause harm; for instance, if a programmer tries to strip out any substrings that might be SQL commands, they might end up rejecting perfectly valid names, street addresses, and so on which happen to have a string like "table" in them.
+"SQL injection" is a security issue with a number of poorly-developed systems and websites, if user input is not properly sanitized before inserting it into SQL statements for database operations. "Dangerous" characters such as quotes need to be properly escaped or stripped, or else it is possible to include a quote to end the string an input field is being inserted into, and follow it with other commands which might do dangerous things with the database. Poorly-done attempts to avoid such attacks may also cause harm; for instance, if a programmer tries to strip out any substrings that might be SQL commands, they might end up rejecting perfectly valid names, street addresses, and so on which happen to have a string like "table" in them. Some SQL implementations support host parameters, which allow you to use data that is not a part of the SQL statement, and is added separately; this is done by substituting question marks in the parts of the SQL code where the value would belong.
 [http://performinsider.com/2014/07/ed-magedson-founder-of-ripoffreport-com-facing-criminal-charges/ This article] claims that legal troubles could result from use of "potentially illegal SQL technology", but it's unclear what that entails.

@@ Line 17: / Line 17: @@
 * [[Databases]]
-== References ==
+== Links and references ==
 * [[Wikipedia:SQL|Wikipedia article]]
 * [http://www.wiscorp.com/sql200n.zip SQL 2008 draft standard] (as [[ZIP]] archive)
 * [http://dangoldin.com/2014/01/25/solving-coding-tests-in-postgresql/ Solving coding tests in PostgreSQL]
 * [http://wozniak.ca/what-orms-have-taught-me-just-learn-sql What ORMs have taught me: just learn SQL]
 == Humor ==

← Older revision		Revision as of 23:25, 11 May 2015
Line 13:		Line 13:

	[http://performinsider.com/2014/07/ed-magedson-founder-of-ripoffreport-com-facing-criminal-charges/ This article] claims that legal troubles could result from use of "potentially illegal SQL technology", but it's unclear what that entails.		[http://performinsider.com/2014/07/ed-magedson-founder-of-ripoffreport-com-facing-criminal-charges/ This article] claims that legal troubles could result from use of "potentially illegal SQL technology", but it's unclear what that entails.
		+
		+	== See also ==
		+	* [[Databases]]

	== References ==		== References ==

@@ Line 18: / Line 18: @@
 * [http://www.wiscorp.com/sql200n.zip SQL 2008 draft standard] (as [[ZIP]] archive)
 * [http://dangoldin.com/2014/01/25/solving-coding-tests-in-postgresql/ Solving coding tests in PostgreSQL]
 == Humor ==

← Older revision		Revision as of 12:11, 22 July 2014
Line 11:		Line 11:

	"SQL injection" is a security issue with a number of poorly-developed systems and websites, if user input is not properly sanitized before inserting it into SQL statements for database operations. "Dangerous" characters such as quotes need to be properly escaped or stripped, or else it is possible to include a quote to end the string an input field is being inserted into, and follow it with other commands which might do dangerous things with the database. Poorly-done attempts to avoid such attacks may also cause harm; for instance, if a programmer tries to strip out any substrings that might be SQL commands, they might end up rejecting perfectly valid names, street addresses, and so on which happen to have a string like "table" in them.		"SQL injection" is a security issue with a number of poorly-developed systems and websites, if user input is not properly sanitized before inserting it into SQL statements for database operations. "Dangerous" characters such as quotes need to be properly escaped or stripped, or else it is possible to include a quote to end the string an input field is being inserted into, and follow it with other commands which might do dangerous things with the database. Poorly-done attempts to avoid such attacks may also cause harm; for instance, if a programmer tries to strip out any substrings that might be SQL commands, they might end up rejecting perfectly valid names, street addresses, and so on which happen to have a string like "table" in them.
		+
		+	[http://performinsider.com/2014/07/ed-magedson-founder-of-ripoffreport-com-facing-criminal-charges/ This article] claims that legal troubles could result from use of "potentially illegal SQL technology", but it's unclear what that entails.

	== References ==		== References ==

@@ Line 3: / Line 3: @@
 |subcat=Programming Languages
 |extensions={{ext|sql}}
 |released=1974
 }}
@@ Line 14: / Line 15: @@
 * [[Wikipedia:SQL|Wikipedia article]]
 * [http://www.wiscorp.com/sql200n.zip SQL 2008 draft standard] (as [[ZIP]] archive)
 * [http://dangoldin.com/2014/01/25/solving-coding-tests-in-postgresql/ Solving coding tests in PostgreSQL]
 == Humor ==
 * [http://tumblr.snipe.net/post/84908125378/when-i-realize-i-didnt-include-the-where-clause When I realize I didn’t include the WHERE clause when I highlighted and ran the DELETE]
 [[Category:IBM]]
 [[Category:Databases]]

@@ Line 5: / Line 5: @@
 |released=1974
 }}
 '''SQL''' (Structured Query Language) is a database query language initially developed at IBM in the 1970s. It was originally called SEQUEL, but IBM changed the name due to a trademark conflict with another company. It is currently very popular as an interface language for relational database systems. Although it is officially standardized (ISO/IEC 9075, ISO/IEC 13249), SQL still has a number of incompatible "dialects", reminiscent of [[BASIC]] in its heyday.

← Older revision		Revision as of 15:14, 14 September 2013
Line 18:		Line 18:

	[[Category:IBM]]		[[Category:IBM]]
		+	[[Category:Databases]]