Click here to Skip to main content
15,900,818 members
Home / Discussions / Database
   

Database

 
AnswerRe: How to use a FileInfo control to add a filename to an Access database Pin
Richard MacCutchan25-Aug-20 21:16
mveRichard MacCutchan25-Aug-20 21:16 
QuestionDATABASE KEY Pin
Member 1492238425-Aug-20 0:42
Member 1492238425-Aug-20 0:42 
AnswerRe: DATABASE KEY Pin
OriginalGriff25-Aug-20 0:45
mveOriginalGriff25-Aug-20 0:45 
AnswerRe: DATABASE KEY Pin
ZurdoDev31-Aug-20 9:45
professionalZurdoDev31-Aug-20 9:45 
AnswerRe: DATABASE KEY Pin
Eddy Vluggen24-Sep-20 8:12
professionalEddy Vluggen24-Sep-20 8:12 
QuestionAny recommendations ora 01722 ??? Pin
Mahmoud Mohammad23-Aug-20 23:26
Mahmoud Mohammad23-Aug-20 23:26 
AnswerRe: Any recommendations ora 01722 ??? Pin
Richard Deeming24-Aug-20 0:42
mveRichard Deeming24-Aug-20 0:42 
Questionsql server express 2014 named instance not connecting from outside network Pin
Member 1258438314-Aug-20 1:28
Member 1258438314-Aug-20 1:28 
AnswerRe: sql server express 2014 named instance not connecting from outside network Pin
Sandeep Mewara18-Aug-20 23:17
mveSandeep Mewara18-Aug-20 23:17 
QuestionAny good tool (free) for DB Schema? Pin
Sandeep Mewara14-Aug-20 0:01
mveSandeep Mewara14-Aug-20 0:01 
AnswerRe: Any good tool (free) for DB Schema? Pin
Richard MacCutchan14-Aug-20 1:44
mveRichard MacCutchan14-Aug-20 1:44 
GeneralRe: Any good tool (free) for DB Schema? Pin
Sandeep Mewara14-Aug-20 1:45
mveSandeep Mewara14-Aug-20 1:45 
GeneralRe: Any good tool (free) for DB Schema? Pin
Jörgen Andersson14-Aug-20 3:24
professionalJörgen Andersson14-Aug-20 3:24 
GeneralRe: Any good tool (free) for DB Schema? Pin
Sandeep Mewara14-Aug-20 3:39
mveSandeep Mewara14-Aug-20 3:39 
QuestionMS SQL Database Breach Pin
Otekpo Emmanuel13-Aug-20 4:03
Otekpo Emmanuel13-Aug-20 4:03 
AnswerRe: MS SQL Database Bridge Pin
Richard MacCutchan13-Aug-20 4:14
mveRichard MacCutchan13-Aug-20 4:14 
GeneralRe: MS SQL Database Bridge Pin
Otekpo Emmanuel13-Aug-20 5:02
Otekpo Emmanuel13-Aug-20 5:02 
AnswerRe: MS SQL Database Bridge Pin
Richard Deeming13-Aug-20 4:18
mveRichard Deeming13-Aug-20 4:18 
GeneralRe: MS SQL Database Bridge Pin
Otekpo Emmanuel13-Aug-20 5:01
Otekpo Emmanuel13-Aug-20 5:01 
GeneralRe: MS SQL Database Bridge Pin
Otekpo Emmanuel14-Aug-20 5:19
Otekpo Emmanuel14-Aug-20 5:19 
GeneralRe: MS SQL Database Bridge Pin
Richard Deeming14-Aug-20 5:38
mveRichard Deeming14-Aug-20 5:38 
Otekpo Emmanuel wrote:
Will it be possible for attacker to select all table names from my database without having idea of the database name or anything related using the browser address bar or any input field of my site? If yes, how can I prevent this?

Yes, if your code is vulnerable to SQL Injection[^], an attacker can still dump your entire database.

Blind SQL Injection | OWASP[^]
Hacking is child's play - SQL injection with Havij by 3 year old[^]

The fix is to always use properly parameterized queries, and never concatenate values into the query itself - especially if those values could potentially be controlled or manipulated by the user.


Otekpo Emmanuel wrote:
My question is, can a routed url i.e www.mysite.com/user/0683 be manipulated?

Assuming the number is a sequential ID for your users, an attacker could try changing it to see if that can access information for other users. This is known as an Insecure Direct Object Reference (IDOR). If your code doesn't validate the user's permissions, this can lead to a security vulnerability.

Insecure Direct Object Reference Prevention - OWASP Cheat Sheet Series[^]

The fix is to always validate that the currently authenticated user has permission to access the data they are requesting.



"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

GeneralRe: MS SQL Database Bridge Pin
Otekpo Emmanuel14-Aug-20 5:56
Otekpo Emmanuel14-Aug-20 5:56 
QuestionAws lamda Pin
Member 1490095628-Jul-20 2:16
Member 1490095628-Jul-20 2:16 
AnswerRe: Aws lamda Pin
CHill604-Aug-20 3:02
mveCHill604-Aug-20 3:02 
AnswerRe: Aws lamda Pin
MichaelFern15-Sep-20 2:19
MichaelFern15-Sep-20 2:19 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.