|
Hi,
I've install SQL Server Express 2014 named instance with mixed mode authentication.
one more SQL Server 2005 version installed with default instance and TCP port has been assigned 1433.
following error occurred
Server Name: .\sqlexpress
Error Number: 18456
Severity: 14
State: 1
Line Number: 65536 -I want to connect locally (with dot) but not able to connect, I also want to connect from outside network
-with static IP still getting the same problem.
following changes I've done
-remove dynamic TCP port from configuration manager ipall
-instead of dynamic port I've place static tcp port 1438 and 1440 both are listening
-try 1434 TCP port but SQL service not able start so I've change into 1438 and 1440.
-and same has been configured from firewall inbound and outbound rule.
--also tried through dbeaver to make connection but following error occurred
SQLEXPRESS,1438 failed. Error: "java.net.UnknownHostException: 103.87.24.38:3390: invalid IPv6 address". Verify the server and instance names and check that no firewall is blocking UDP traffic to port 1434. For SQL Server 2005 or later, verify that the SQL Server Browser Service is running on the host.
modified 14-Aug-20 7:40am.
|
|
|
|
|
|
Is there any known tool for creating a schema (database diagram) (ER) back from the SQLite DB by itself? (Want to avoid creating DB schema from scratch and I already have the database with me)
Think SchemaSky is one of it but that needs a lot of work to setup.
modified 14-Aug-20 9:40am.
|
|
|
|
|
If you mean just to print the CREATE statements, then you can use the sqlite3 command line program.
|
|
|
|
|
Not the statements. That was easy.
I am talking of Database diagram. Sorry for confusion.
|
|
|
|
|
I have ever only used Oracle Sql developer Data Modeler, which is free a even pretty good, but I think it only supports Oracle, Sql Server and DB2 properly.
But take a look here for data modeling tools[^].
And here for database diagram tools[^] for SQLite.
I would expect quite some overlap between them.
Also, please report back if you find any of them useful. SQLite is quite interesting after all.
Wrong is evil and must be defeated. - Jeff Ello
Never stop dreaming - Freddie Kruger
|
|
|
|
|
Sure, will have a look and report back in case I find anything interesting.
Thanks man! 
|
|
|
|
|
Hi there,
Please am currently having serious issue since my site database is at risk.
Someone somehow or one way get access to my database and I don't know how he/she managed to do it.
Of recent I discovered various comments on post and the clients now reported to me.
When I really checked, I see that is true. The hacker have access to all registered users password and username.
So what can I do please to avoid this?
modified 14-Aug-20 3:57am.
|
|
|
|
|
Change the administrator password immediately. Then make sure all other passwords are changed as soon as possible.
|
|
|
|
|
Thanks Sir! You have always been helpful.
I have already changed the database password
|
|
|
|
|
|
Wow, thanks! I know I can count on you guys from codeproject.
I will take action right away
|
|
|
|
|
Thanks for your help so far and sorry for disturbing you.
Will it be possible for attacker to select all table names from my database without having idea of the database name or anything related using the browser address bar or any input field of my site? If yes, how can I prevent this?
And, since some of the attacks might be triggered from the broswer address bar by manipulating my site url.
My question is, can a routed url i.e www.mysite.com/user/0683 be manipulated?
If yes, how do I prevent this?
|
|
|
|
|
Otekpo Emmanuel wrote: Will it be possible for attacker to select all table names from my database without having idea of the database name or anything related using the browser address bar or any input field of my site? If yes, how can I prevent this?
Yes, if your code is vulnerable to SQL Injection[^], an attacker can still dump your entire database.
Blind SQL Injection | OWASP[^]
Hacking is child's play - SQL injection with Havij by 3 year old[^]
The fix is to always use properly parameterized queries, and never concatenate values into the query itself - especially if those values could potentially be controlled or manipulated by the user.
Otekpo Emmanuel wrote: My question is, can a routed url i.e www.mysite.com/user/0683 be manipulated?
Assuming the number is a sequential ID for your users, an attacker could try changing it to see if that can access information for other users. This is known as an Insecure Direct Object Reference (IDOR). If your code doesn't validate the user's permissions, this can lead to a security vulnerability.
Insecure Direct Object Reference Prevention - OWASP Cheat Sheet Series[^]
The fix is to always validate that the currently authenticated user has permission to access the data they are requesting.
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
|
How do you call REST API inside AWS lambda function using python?
|
|
|
|
|
|
|
Hi, I have 3 different types of values that can come, like for example, I00259, T00123, C00456 etc like that, I want to check an if Else statement in my stored procedure that,
1. If a value has 6 characters in length, and starts with I and ends with a number
2. If a value has 6 characters in length, and starts with T and ends with a number and
3. If a value has 6 characters in length, and starts with C and ends with a number
I have to write different sections if the conditions satisfy, any help in SQL Server please.
|
|
|
|
|
|
|
I am not an SQL expert, but I do know how to use Google. it is a skill you need to develop.
|
|
|
|
|
Try panicking.
1, 2, and 3 are the same assignment. And, you will fail.
Bastard Programmer from Hell 
If you can't read my code, try converting it here[^]
"If you just follow the bacon Eddy, wherever it leads you, then you won't have to think about politics." -- Some Bell.
|
|
|
|
|
Someone's trying to teach you how to organize things.
Here's a way to consider what they want to teach you:
Is the first test you make the first character or the length of the string? As proposed in your (homework) question, one is a more efficient option than the other.
Another thing your being taught is "how to look up something you've never done before".
You need to make sure you can handle the latter, in particular, if you ever really want to learn how to code.
| Ravings en masse^ |
|---|
| "The difference between genius and stupidity is that genius has its limits." - Albert Einstein | | "If you are searching for perfection in others, then you seek disappointment. If you seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010 |
|
|
|
|
|
It would probably be easiest to test this using LIKE:
LIKE (Transact-SQL) - SQL Server | Microsoft Docs[^]
Eg: "I" followed by five numbers would be:
value LIKE 'I[0-9][0-9][0-9][0-9][0-9]'
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
