Database

Any good tool (free) for DB Schema?

18-Aug-20 23:17

Got a response to look into here: https://www.codeproject.com/Questions/5276649/Sql-server-express-2014-named-instance-not-connect

For your read/comments:
Beginner’s Guide to understand Kafka
Beginners Quick Start to Learn React.js

Sandeep Mewara14-Aug-20 0:01

14-Aug-20 0:01

Is there any known tool for creating a schema (database diagram) (ER) back from the SQLite DB by itself? (Want to avoid creating DB schema from scratch and I already have the database with me)

Think SchemaSky is one of it but that needs a lot of work to setup.

For your read/comments:
Beginner’s Guide to understand Kafka
Beginners Quick Start to Learn React.js

modified 14-Aug-20 9:40am.

Richard MacCutchan14-Aug-20 1:44

14-Aug-20 1:44

If you mean just to print the CREATE statements, then you can use the sqlite3 command line program.

Sandeep Mewara14-Aug-20 1:45

14-Aug-20 1:45

Not the statements. That was easy.

I am talking of Database diagram. Sorry for confusion.

For your read/comments:
Beginner’s Guide to understand Kafka
Beginners Quick Start to Learn React.js

Jörgen Andersson14-Aug-20 3:24

Jörgen Andersson

14-Aug-20 3:24

I have ever only used Oracle Sql developer Data Modeler, which is free a even pretty good, but I think it only supports Oracle, Sql Server and DB2 properly.

But take a look here for data modeling tools[^].
And here for database diagram tools[^] for SQLite.
I would expect quite some overlap between them.

Also, please report back if you find any of them useful. SQLite is quite interesting after all.

Wrong is evil and must be defeated. - Jeff Ello
Never stop dreaming - Freddie Kruger

Sandeep Mewara14-Aug-20 3:39

14-Aug-20 3:39

Sure, will have a look and report back in case I find anything interesting.

Thanks man! Thumbs Up | :thumbsup:

For your read/comments:
Beginner’s Guide to understand Kafka
Beginners Quick Start to Learn React.js

MS SQL Database Breach

Otekpo Emmanuel13-Aug-20 4:03

13-Aug-20 4:03

Hi there,

Please am currently having serious issue since my site database is at risk.

Someone somehow or one way get access to my database and I don't know how he/she managed to do it.

Of recent I discovered various comments on post and the clients now reported to me.

When I really checked, I see that is true. The hacker have access to all registered users password and username.

So what can I do please to avoid this?

modified 14-Aug-20 3:57am.

Richard MacCutchan13-Aug-20 4:14

13-Aug-20 4:14

Change the administrator password immediately. Then make sure all other passwords are changed as soon as possible.

Otekpo Emmanuel13-Aug-20 5:02

13-Aug-20 5:02

Thanks Sir! You have always been helpful.

I have already changed the database password

Richard Deeming13-Aug-20 4:18

Richard Deeming

13-Aug-20 4:18

Make sure your database server is behind a firewall, and is not exposed to the internet.

Review all of your code for SQL Injection vulnerabilities, which is the most likely culprit.
Everything you wanted to know about SQL injection (but were afraid to ask) | Troy Hunt[^]
How can I explain SQL injection without technical jargon? | Information Security Stack Exchange[^]
Query Parameterization Cheat Sheet | OWASP[^]

Stop storing passwords insecurely.
Secure Password Authentication Explained Simply[^]
Salted Password Hashing - Doing it Right[^]

In terms of recovery, you'll need to restore your databases from the last known-good backup before the databases were defaced. You'll also need to notify all of your users of the data breach, and notify your local data protection controller. You may also need to prepare to pay a large fine if any of your users are covered by GDPR or similar legislation.

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Otekpo Emmanuel13-Aug-20 5:01

13-Aug-20 5:01

Wow, thanks! I know I can count on you guys from codeproject.
I will take action right away

Otekpo Emmanuel14-Aug-20 5:19

14-Aug-20 5:19

Thanks for your help so far and sorry for disturbing you.

Will it be possible for attacker to select all table names from my database without having idea of the database name or anything related using the browser address bar or any input field of my site? If yes, how can I prevent this?

And, since some of the attacks might be triggered from the broswer address bar by manipulating my site url.
My question is, can a routed url i.e www.mysite.com/user/0683 be manipulated?
If yes, how do I prevent this?

Richard Deeming14-Aug-20 5:38

Richard Deeming

14-Aug-20 5:38

Otekpo Emmanuel wrote:
Will it be possible for attacker to select all table names from my database without having idea of the database name or anything related using the browser address bar or any input field of my site? If yes, how can I prevent this?

Yes, if your code is vulnerable to SQL Injection[^], an attacker can still dump your entire database.

Blind SQL Injection | OWASP[^]
Hacking is child's play - SQL injection with Havij by 3 year old[^]

The fix is to always use properly parameterized queries, and never concatenate values into the query itself - especially if those values could potentially be controlled or manipulated by the user.

Otekpo Emmanuel wrote:
My question is, can a routed url i.e www.mysite.com/user/0683 be manipulated?

Assuming the number is a sequential ID for your users, an attacker could try changing it to see if that can access information for other users. This is known as an Insecure Direct Object Reference (IDOR). If your code doesn't validate the user's permissions, this can lead to a security vulnerability.

Insecure Direct Object Reference Prevention - OWASP Cheat Sheet Series[^]

The fix is to always validate that the currently authenticated user has permission to access the data they are requesting.

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

Otekpo Emmanuel14-Aug-20 5:56

Need a script, SDF or UDF for checking the following conditions and make IF Else in a stored procedure SQL Server

14-Aug-20 5:56

Ok. Thanks

Aws lamda

Member 1490095628-Jul-20 2:16

Member 14900956

28-Jul-20 2:16

How do you call REST API inside AWS lambda function using python?

Re: Aws lamda

CHill604-Aug-20 3:02

CHill60

4-Aug-20 3:02

If that had been me asking that question I would have typed it into Google first.
Then I would have found things like https://medium.com/@ss.shawnshi/make-api-calls-from-aws-lambda-to-access-backend-database-e23abcbfc45a[^]

Re: Aws lamda

MichaelFern15-Sep-20 2:19

MichaelFern

15-Sep-20 2:19

Not a pro in here, but did some research and it seems like that this link might be helpful: Generating REST APIs from data classes in Python | AWS Compute Blog[^]

simpledeveloper21-Jul-20 9:45

simpledeveloper

21-Jul-20 9:45

Hi, I have 3 different types of values that can come, like for example, I00259, T00123, C00456 etc like that, I want to check an if Else statement in my stored procedure that,

1. If a value has 6 characters in length, and starts with I and ends with a number
2. If a value has 6 characters in length, and starts with T and ends with a number and
3. If a value has 6 characters in length, and starts with C and ends with a number

I have to write different sections if the conditions satisfy, any help in SQL Server please.

Re: Need a script, SDF or UDF for checking the following conditions and make IF Else in a stored procedure SQL Server

Richard MacCutchan21-Jul-20 10:28

Re: Need a script, SDF or UDF for checking the following conditions and make IF Else in a stored procedure SQL Server

21-Jul-20 10:28

You can use the SQL Server LEN() Function[^] to check the length of the string, and the SQL Server SUBSTRING() Function[^] to extract the first character.

simpledeveloper21-Jul-20 11:57

simpledeveloper

21-Jul-20 11:57

Thank you Richard

Re: Need a script, SDF or UDF for checking the following conditions and make IF Else in a stored procedure SQL Server

Richard MacCutchan21-Jul-20 21:30